This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: vQXzwK0pvq03IDaRzFq001MKHHU2Wp0c+Krq2LOk4Tg= Subject key identifier: 23:07:11:9F:28:E2:6E:74:B8:AF:2A:CA:D0:BF:32:77:F3:D0:AF:5F Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: 0D Signing time: Wed 03 Dec 2025 06:10:55 +0000 Manifest this update: Wed 03 Dec 2025 06:10:55 +0000 Manifest next update: Wed 10 Dec 2025 06:10:55 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: Wvc1C6G7waAzN85hkAosAV5DVMZ7s8PJmoik8KGnycI=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: BkprVFwAt62ek1/osfcjd4iYpz4rBk8/YYmw+8qHsBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Dec 3 06:10:55 2025 GMT Not After : Dec 10 06:10:55 2025 GMT Subject: CN=692fd46f-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:7e:4d:d3:3a:06:6e:4e:bc:6b:5c:34:3e: ba:e6:cd:6b:f4:74:e7:61:43:67:6d:6f:c1:e8:0a: 94:b9:59:ea:9c:c6:fd:c3:a8:7e:ff:ee:a9:47:c3: 93:de:be:0a:14:d8:fb:3f:65:dd:34:e8:9c:06:fd: df:65:b2:f7:71:f7:67:ae:db:3f:8e:85:0a:89:6d: 81:68:96:ce:d7:04:1f:15:f6:22:ef:4a:40:b2:15: 83:1c:95:93:9e:7b:08:d6:fe:6e:d1:cd:4a:67:a9: e1:9e:e8:3c:49:6e:e5:87:a8:ca:72:6f:9e:95:ee: d2:34:36:f5:b8:1c:93:8d:c4:c7:d9:28:8a:d6:60: 27:d1:57:2c:91:f0:56:11:52:91:51:69:ac:b8:5b: c4:86:6f:1d:08:1a:10:9c:54:46:8d:e6:e3:91:33: 26:e0:b8:c7:79:29:15:51:6a:d8:72:2a:fd:0c:3c: 75:30:6d:5d:49:ad:e7:b9:fc:4a:d9:26:4d:fe:58: 7d:2d:5d:10:cd:e0:e8:9b:6e:12:8f:a2:a1:fc:c1: 54:f7:4f:a5:89:7f:26:6f:4a:04:db:93:43:b1:d2: 2f:dd:9f:b9:88:1c:26:09:25:e8:55:fd:99:8f:11: 79:8e:84:df:17:d5:e0:78:f8:5c:9a:57:f6:e0:e1: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:11:9F:28:E2:6E:74:B8:AF:2A:CA:D0:BF:32:77:F3:D0:AF:5F X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:f4:bf:c6:43:e0:20:19:16:2c:59:4e:b4:99:7e:e5:ca: aa:37:f8:82:36:fe:05:3d:db:50:ac:65:30:e1:b2:ab:8a:da: cd:2d:b6:01:6f:fc:68:ea:00:df:06:2c:05:02:91:0b:d7:b4: 52:cd:b1:ba:0e:e6:aa:97:c4:7a:8a:10:1e:b3:08:f5:f2:4c: 34:fb:0d:5b:29:0c:5f:d7:5f:30:18:b0:f0:7e:ec:47:71:5b: 72:89:62:33:dd:35:02:e4:4b:db:ab:b1:df:5c:5a:b2:19:9d: 54:d1:e0:a2:14:23:68:5e:4e:82:30:ba:a4:35:f7:ba:be:7a: 79:04:2b:ee:3d:53:e8:d5:dd:61:c2:a0:bf:c9:5b:54:48:b9: 55:2b:0e:d7:3f:09:09:49:91:16:6f:0c:fe:da:46:f6:34:28: 21:da:7d:d7:c5:06:49:2d:68:34:d4:97:18:f6:f6:d0:1c:06: 56:e9:bb:7d:73:e9:e0:0a:e5:b7:0b:74:94:e5:5d:dd:aa:05: 80:7e:d3:ec:7a:3f:e3:a4:d7:67:a3:7a:df:45:8f:56:fe:8f: 90:f8:30:e9:16:5f:5f:1c:04:4c:46:86:66:9c:49:9f:c4:79: f9:62:b9:ad:2d:1b:8f:06:17:bd:56:cb:7c:d4:3b:ea:e1:16: 81:d8:37:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNTEyMDMwNjEwNTVaFw0yNTEyMTAwNjEwNTVaMBgxFjAUBgNV BAMTDTY5MmZkNDZmLTc5YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8O35N0zoGbk68a1w0PrrmzWv0dOdhQ2dtb8HoCpS5Weqcxv3DqH7/7qlHw5Pe vgoU2Ps/Zd006JwG/d9lsvdx92eu2z+OhQqJbYFols7XBB8V9iLvSkCyFYMclZOe ewjW/m7RzUpnqeGe6DxJbuWHqMpyb56V7tI0NvW4HJONxMfZKIrWYCfRVyyR8FYR UpFRaay4W8SGbx0IGhCcVEaN5uORMybguMd5KRVRathyKv0MPHUwbV1Jree5/ErZ Jk3+WH0tXRDN4OibbhKPoqH8wVT3T6WJfyZvSgTbk0Ox0i/dn7mIHCYJJehV/ZmP EXmOhN8X1eB4+FyaV/bg4SdLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIwcRnyji bnS4ryrK0L8yd/PQr18wHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx STRCRV9KUFZocHYzWFFGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJb9L/GQ+AgGRYsWU60mX7lyqo3+II2/gU921CsZTDhsquK2s0ttgFv /GjqAN8GLAUCkQvXtFLNsboO5qqXxHqKEB6zCPXyTDT7DVspDF/XXzAYsPB+7Edx W3KJYjPdNQLkS9ursd9cWrIZnVTR4KIUI2heToIwuqQ197q+enkEK+49U+jV3WHC oL/JW1RIuVUrDtc/CQlJkRZvDP7aRvY0KCHafdfFBkktaDTUlxj29tAcBlbpu31z 6eAK5bcLdJTlXd2qBYB+0+x6P+Ok12ejet9Fj1b+j5D4MOkWX18cBExGhmacSZ/E efliua0tG48GF71Wy3zUO+rhFoHYN3I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:25 2025 by rpki-client