This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: Xd62N9R3gA8MfqXZJsZusIDAwaFBLtXnTo/V2ywIpI0= Subject key identifier: 38:88:47:50:1B:D4:2F:C2:6D:2D:68:83:C7:D7:0F:95:EB:D1:EF:22 Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 0702 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 06FC Signing time: Sat 06 Dec 2025 20:53:39 +0000 Manifest this update: Sat 06 Dec 2025 20:53:38 +0000 Manifest next update: Sat 13 Dec 2025 20:53:38 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: /kOvi/seRZSmpVZBYpvmk0pT8RNys3mGSACe6QZecII=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Dec 6 20:53:38 2025 GMT Not After : Dec 13 20:53:38 2025 GMT Subject: CN=693497d2-ffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:10:89:1e:4e:f1:e6:3a:ae:1b:d6:40:22: e5:49:f2:d4:aa:fd:e8:cd:46:3a:08:d3:f9:e5:3a: 34:31:19:5b:fc:5d:5f:e3:d2:ac:61:ad:af:04:a5: 3c:ef:1c:9c:61:63:b7:67:4d:db:4c:fb:87:30:89: 38:dc:49:8d:1e:7f:4c:a2:ac:82:d9:e2:6b:6f:c2: 4e:1e:f5:27:89:50:78:19:db:04:95:5f:75:de:82: 33:08:d8:36:eb:c0:36:56:f6:d6:15:03:00:bf:0c: b9:13:e8:16:8d:7d:b3:80:03:97:34:91:3b:97:91: b0:44:8a:3c:6a:69:04:dd:d9:d7:48:a8:f4:88:a7: 40:40:49:56:f4:b8:aa:6d:b1:61:6f:70:1a:98:a1: bc:35:0b:6d:78:46:bc:42:bf:c6:6e:88:97:cf:5d: bf:0d:af:dd:ac:9e:a7:4d:81:51:3e:a1:48:ae:90: a9:fb:fa:c6:5c:32:bf:b8:9e:25:68:0d:5b:83:27: 09:d4:89:df:06:8f:ff:4c:99:84:c2:a7:75:dd:fc: a3:dd:5d:c6:e2:c3:f8:c8:fa:8e:b9:52:57:e5:a3: 7c:c4:41:cf:48:4b:ad:f7:6c:c2:15:6c:53:44:84: 55:4d:5f:02:45:b1:24:cd:0f:ee:8e:18:4e:74:17: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:88:47:50:1B:D4:2F:C2:6D:2D:68:83:C7:D7:0F:95:EB:D1:EF:22 X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:52:14:f3:9b:9c:f0:68:c5:72:39:3a:c5:e8:c5:6b:ae:76: 26:c9:cb:ce:62:4f:c9:2b:a3:ea:8f:78:f6:f3:0f:e2:3a:a9: 00:6c:c0:c5:11:5f:80:de:cb:b6:17:d1:be:10:e9:2f:b3:44: d2:d1:39:e3:85:1c:8c:72:4b:fc:f5:e7:e9:56:3f:d4:86:e9: 64:e9:36:b5:74:05:44:5e:45:7c:f8:cd:ba:a1:0c:47:e7:fc: 4e:e1:ef:b8:19:08:cb:16:13:22:6c:63:15:94:f8:0f:e0:61: 7c:80:b6:8b:e3:e1:24:e7:25:7a:f4:9a:31:8a:ee:89:7b:cc: cb:b1:f7:5f:f6:3f:62:82:57:dc:81:86:aa:f0:9f:87:1d:50: 8a:5e:f4:6c:03:35:de:c7:f0:e5:01:be:6b:8d:6b:a8:dd:a5: 67:63:23:a0:13:02:f0:5c:08:47:65:a5:ee:95:77:61:05:2b: 90:ef:92:f8:56:8a:59:e6:d9:9f:cd:50:f4:79:43:72:e6:34: 62:3d:57:4d:68:6e:3a:57:e7:6c:96:55:73:d8:4d:1b:20:89: d3:4b:0b:3c:87:a1:be:df:7c:c3:70:23:90:e4:c7:53:a1:eb: 15:a7:d4:73:66:fe:23:b1:14:b1:ec:05:18:22:76:6b:03:34: b8:b5:c1:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUxMjA2MjA1MzM4WhcNMjUxMjEzMjA1MzM4WjAYMRYwFAYD VQQDEw02OTM0OTdkMi1mZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJkQiR5O8eY6rhvWQCLlSfLUqv3ozUY6CNP55To0MRlb/F1f49KsYa2vBKU8 7xycYWO3Z03bTPuHMIk43EmNHn9MoqyC2eJrb8JOHvUniVB4GdsElV913oIzCNg2 68A2VvbWFQMAvwy5E+gWjX2zgAOXNJE7l5GwRIo8amkE3dnXSKj0iKdAQElW9Liq bbFhb3AamKG8NQtteEa8Qr/GboiXz12/Da/drJ6nTYFRPqFIrpCp+/rGXDK/uJ4l aA1bgycJ1InfBo//TJmEwqd13fyj3V3G4sP4yPqOuVJX5aN8xEHPSEut92zCFWxT RIRVTV8CRbEkzQ/ujhhOdBdYEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiIR1Ab 1C/CbS1og8fXD5Xr0e8iMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfUhTzm5zwaMVyOTrF6MVrrnYmycvOYk/JK6Pqj3j28w/iOqkAbMDF EV+A3su2F9G+EOkvs0TS0TnjhRyMckv89efpVj/Uhulk6Ta1dAVEXkV8+M26oQxH 5/xO4e+4GQjLFhMibGMVlPgP4GF8gLaL4+Ek5yV69Joxiu6Je8zLsfdf9j9iglfc gYaq8J+HHVCKXvRsAzXex/DlAb5rjWuo3aVnYyOgEwLwXAhHZaXulXdhBSuQ75L4 VopZ5tmfzVD0eUNy5jRiPVdNaG46V+dsllVz2E0bIInTSws8h6G+33zDcCOQ5MdT oesVp9RzZv4jsRSx7AUYInZrAzS4tcFM -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:11 2025 by rpki-client