This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json) Hash identifier: n5gfCU7Km3zEUcLeo9uvC416NlVCNmQ0xLDyN4CFhF8= Subject key identifier: 92:7D:22:5A:DD:5B:90:39:59:0B:8C:6A:DA:A1:3E:0D:8F:10:03:FA Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft Manifest number: 0399 Signing time: Thu 04 Dec 2025 23:11:05 +0000 Manifest this update: Thu 04 Dec 2025 23:11:04 +0000 Manifest next update: Thu 11 Dec 2025 23:11:04 +0000 Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: +qp7vWc2iRRcJgiiPwl9zDvT2wqIx6vYcyfl701yzlA=) 2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: 3Kdq8iB7GHkmorOzNCkj5Eih8OtxQjBmOJhG+WoD4A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: Dec 4 23:11:04 2025 GMT Not After : Dec 11 23:11:04 2025 GMT Subject: CN=69321508-2c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:fd:3c:29:9d:39:ef:f6:ea:f3:9a:bc:9c: 13:72:c6:9e:50:a7:e9:2c:e4:05:93:88:46:d3:57: 1c:19:c5:bb:bf:8a:40:49:5d:f2:cd:8c:c3:04:70: 00:6b:70:94:f1:ad:e6:a0:0b:aa:6d:91:ac:b3:b9: 6c:42:9f:c5:bd:84:07:18:9d:57:c3:38:ca:7f:0d: 9e:11:11:f0:ab:22:7b:b9:ab:c9:81:00:78:76:50: e0:38:7b:8a:5a:90:4c:9d:c2:8e:0e:99:6a:31:4d: c8:47:b1:ab:ee:85:0c:fc:87:9d:7f:8b:e2:f2:d2: b9:a3:53:a3:7b:41:b4:8c:e2:aa:c1:da:d9:dc:4f: b6:1d:3f:71:0a:26:c1:0e:1c:77:6e:57:8c:fd:48: e5:a2:44:db:ce:b7:43:b8:6d:9d:6b:78:01:f8:50: 2c:be:60:88:c2:04:d4:74:f0:9f:e5:1c:5b:18:83: c1:14:70:32:1a:b5:a0:cc:5e:1b:2c:1b:ee:bb:3d: 35:fe:78:ee:cb:01:78:e0:a0:ca:f9:34:af:6e:be: 64:84:cf:a4:88:38:4d:04:49:65:00:fe:76:5a:14: 23:f1:df:dd:bb:f4:c2:29:a4:7a:e5:db:60:cb:8b: 88:13:91:6f:94:4b:68:ce:ec:bd:a0:53:de:69:9d: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:22:5A:DD:5B:90:39:59:0B:8C:6A:DA:A1:3E:0D:8F:10:03:FA X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c1:02:93:fa:4d:8e:38:41:ed:e9:9c:a2:67:9d:3b:a9:86: 24:d1:d1:2a:43:db:23:fe:ff:9b:54:c8:22:3c:9a:71:3f:78: 7b:93:c2:e7:88:4e:8d:42:cd:d6:61:78:6e:4f:75:21:64:24: 2c:da:58:e7:16:8f:15:4c:78:27:10:c8:9f:8a:98:d5:b1:5d: 70:30:4f:b6:02:c7:a0:bc:36:f3:eb:b1:09:13:ba:81:5e:c7: 42:d9:cb:bd:f7:f6:9f:8d:31:96:07:ce:6b:17:fb:ab:7d:32: b3:13:84:17:6d:05:f4:b8:c5:07:6d:8d:10:97:c2:21:f7:9a: 15:34:68:bb:e4:4e:3b:e0:6e:8b:7b:62:a9:98:66:33:b2:41: 15:1d:4a:07:01:96:e5:22:1d:47:e5:d4:58:ee:c6:5a:78:d6: 82:5a:73:02:40:01:b0:8c:37:57:d9:b5:cf:66:4b:d8:4e:4c: b0:a7:53:4e:60:6e:ee:52:8b:3d:de:d4:9a:19:4c:1a:5c:c9: a5:0c:8f:43:c9:6d:a2:0a:6f:de:37:b3:d3:3d:8a:43:67:1c: 1e:eb:48:99:b5:53:b4:d2:7c:ae:d9:cb:a0:b1:d5:9c:1f:b5: c9:9a:05:3a:d1:b4:ac:b8:82:dd:4b:61:71:fc:6c:c5:7a:d9: b1:42:1d:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjUxMjA0MjMxMTA0WhcNMjUxMjExMjMxMTA0WjAYMRYwFAYD VQQDEw02OTMyMTUwOC0yYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxb9PCmdOe/26vOavJwTcsaeUKfpLOQFk4hG01ccGcW7v4pASV3yzYzDBHAA a3CU8a3moAuqbZGss7lsQp/FvYQHGJ1XwzjKfw2eERHwqyJ7uavJgQB4dlDgOHuK WpBMncKODplqMU3IR7Gr7oUM/Iedf4vi8tK5o1Oje0G0jOKqwdrZ3E+2HT9xCibB Dhx3bleM/UjlokTbzrdDuG2da3gB+FAsvmCIwgTUdPCf5RxbGIPBFHAyGrWgzF4b LBvuuz01/njuywF44KDK+TSvbr5khM+kiDhNBEllAP52WhQj8d/du/TCKaR65dtg y4uIE5FvlEtozuy9oFPeaZ3ZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ9Ilrd W5A5WQuMatqhPg2PEAP6MB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqwQKT+k2OOEHt6ZyiZ507qYYk0dEqQ9sj/v+bVMgiPJpxP3h7k8Ln iE6NQs3WYXhuT3UhZCQs2ljnFo8VTHgnEMifipjVsV1wME+2AsegvDbz67EJE7qB XsdC2cu99/afjTGWB85rF/urfTKzE4QXbQX0uMUHbY0Ql8Ih95oVNGi75E474G6L e2KpmGYzskEVHUoHAZblIh1H5dRY7sZaeNaCWnMCQAGwjDdX2bXPZkvYTkywp1NO YG7uUos93tSaGUwaXMmlDI9DyW2iCm/eN7PTPYpDZxwe60iZtVO00nyu2cugsdWc H7XJmgU60bSsuILdS2Fx/GzFetmxQh2z -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:06 2025 by rpki-client