This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: rAeJVHw9Q36O2CK8BYWn3lOk92bkdEUcaOVfEtsYbwY= Subject key identifier: 62:93:77:CB:35:3B:7D:D8:BE:8C:D6:79:C8:FA:78:F8:44:8C:72:2D Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34FE Signing time: Sat 06 Dec 2025 14:18:25 +0000 Manifest this update: Sat 06 Dec 2025 14:18:24 +0000 Manifest next update: Sat 13 Dec 2025 14:18:24 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: zWWOYaopYm+DtYA4b0gDcGXjB7wVfHTdsvpRZSTw9Qc=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Dec 6 14:18:24 2025 GMT Not After : Dec 13 14:18:24 2025 GMT Subject: CN=69343b30-f341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:ca:e4:ac:03:9e:de:11:23:69:1b:54:13: 56:28:74:b3:73:50:03:a1:c7:91:c8:2a:ae:5d:28: 24:bc:5d:19:bd:31:96:ac:26:5d:5f:b4:ed:a4:09: 9f:f6:6a:4b:64:8c:e0:30:0f:ab:b0:7b:e1:37:21: 65:85:67:05:64:f3:70:2d:64:e8:ba:c2:99:4a:f8: 7b:09:c1:dc:21:79:d8:24:9d:41:30:ab:d0:0f:09: 97:37:09:3b:1a:1a:4d:09:8f:06:d9:41:2f:9b:d1: 9d:10:36:61:be:04:ff:70:db:2a:08:a5:30:47:3b: a5:cb:69:ae:4f:18:f1:69:03:34:69:33:7d:89:d2: 7f:34:dd:4b:69:ed:bf:48:6a:87:76:c6:12:dc:5b: 37:22:fc:5e:c3:cb:ad:f0:ae:e9:38:2f:71:16:07: 49:c3:91:93:f0:56:8d:78:1a:30:9d:43:d1:8f:29: 28:20:96:77:5d:7d:fb:da:b8:42:18:6d:61:93:f3: a6:d8:3e:c3:72:92:5f:f6:b5:76:ea:49:8c:59:72: a4:77:9c:48:9b:dc:e5:50:68:a3:19:18:c6:c5:1e: 03:7c:59:11:bd:8f:23:c5:f9:c6:03:87:d7:75:2b: 55:c1:6d:e5:92:0b:90:df:f1:68:94:84:5d:66:d4: f2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:93:77:CB:35:3B:7D:D8:BE:8C:D6:79:C8:FA:78:F8:44:8C:72:2D X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:1d:cf:27:85:9b:99:e7:3a:66:54:aa:98:c2:bd:d8:67:25: 9b:f2:2b:57:5f:cd:47:22:c0:e5:1a:00:58:b9:ca:61:6a:c2: 7c:1b:48:aa:a4:6b:f6:21:06:3e:72:fd:df:28:0c:88:aa:87: f4:11:9e:86:00:0c:97:2c:be:c3:56:94:48:04:79:6f:db:ee: ac:59:7f:50:0a:45:a8:40:50:27:75:a3:a3:7d:66:2a:56:e7: d0:b4:96:42:27:00:be:32:46:a8:42:f9:1b:57:dd:fb:71:9e: b0:de:53:65:78:7b:81:50:fd:99:9b:74:df:f7:cf:e5:4f:92: 50:d8:8b:23:81:ff:a0:af:08:0c:52:2a:e6:a3:f8:9e:c1:7e: 7c:11:70:6c:10:0e:06:73:dc:ce:7f:32:9b:fe:61:9e:d7:6e: 9c:f9:bb:32:76:e3:ee:8f:43:af:17:cb:ab:d6:57:90:07:71: a8:2c:f6:53:2f:88:e2:c9:d1:73:a4:78:bf:47:b4:37:4f:6e: 2f:a9:3f:29:5e:8c:ea:67:21:54:15:16:9f:80:c9:40:a2:4f: 11:a7:f0:44:4f:2c:f0:4c:c5:c3:74:aa:da:34:56:94:52:92: 16:1a:3f:0c:69:9d:79:1e:c7:a7:9f:f4:e0:56:2e:6c:c9:a0: 94:4f:94:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUxMjA2MTQxODI0WhcNMjUxMjEzMTQxODI0WjAYMRYwFAYD VQQDEw02OTM0M2IzMC1mMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXjK5KwDnt4RI2kbVBNWKHSzc1ADoceRyCquXSgkvF0ZvTGWrCZdX7TtpAmf 9mpLZIzgMA+rsHvhNyFlhWcFZPNwLWTousKZSvh7CcHcIXnYJJ1BMKvQDwmXNwk7 GhpNCY8G2UEvm9GdEDZhvgT/cNsqCKUwRzuly2muTxjxaQM0aTN9idJ/NN1Lae2/ SGqHdsYS3Fs3Ivxew8ut8K7pOC9xFgdJw5GT8FaNeBownUPRjykoIJZ3XX372rhC GG1hk/Om2D7DcpJf9rV26kmMWXKkd5xIm9zlUGijGRjGxR4DfFkRvY8jxfnGA4fX dStVwW3lkguQ3/FolIRdZtTy0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKTd8s1 O33YvozWecj6ePhEjHItMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTHc8nhZuZ5zpmVKqYwr3YZyWb8itXX81HIsDlGgBYucphasJ8G0iq pGv2IQY+cv3fKAyIqof0EZ6GAAyXLL7DVpRIBHlv2+6sWX9QCkWoQFAndaOjfWYq VufQtJZCJwC+MkaoQvkbV937cZ6w3lNleHuBUP2Zm3Tf98/lT5JQ2Isjgf+grwgM Uirmo/iewX58EXBsEA4Gc9zOfzKb/mGe126c+bsyduPuj0OvF8ur1leQB3GoLPZT L4jiydFzpHi/R7Q3T24vqT8pXozqZyFUFRafgMlAok8Rp/BETyzwTMXDdKraNFaU UpIWGj8MaZ15Hsenn/TgVi5syaCUT5R/ -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:00 2025 by rpki-client