This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: HphKs968COfi3AXu+mtM5ZCTdQocpkouakbzbvYph4M= Subject key identifier: EA:9D:C4:10:3A:CF:04:EA:39:F2:C3:41:FC:CD:6A:C5:D0:D2:50:52 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: C6 Signing time: Sun 07 Dec 2025 04:04:13 +0000 Manifest this update: Sun 07 Dec 2025 04:04:13 +0000 Manifest next update: Sun 14 Dec 2025 04:04:13 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: +6hZGGqjPEMAK8CE1IxNlSLaRcywGJiX2myaTq/vy/E=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: Vl4anvJxGj00QWX5m+Dlfx86DkUFERQcopj8hiwYg24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Dec 7 04:04:13 2025 GMT Not After : Dec 14 04:04:13 2025 GMT Subject: CN=6934fcbd-e654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:c6:2c:b8:78:a5:de:fa:cc:a7:35:73:85: e8:f9:65:82:17:27:ea:ed:01:e4:2f:cf:ae:e5:c8: 3a:92:6a:26:70:23:68:7b:83:c9:32:87:e0:cc:7d: 46:f7:69:17:b9:ed:84:df:15:62:f6:56:c0:0e:2b: 4b:a4:9f:9b:b9:2a:cd:3f:f8:be:79:4a:ba:c9:3f: 2e:ef:54:8d:3e:27:c3:27:58:e4:73:aa:29:8e:49: f2:27:c7:ba:38:ec:db:b1:a8:af:ff:85:8f:ff:e7: ea:9d:99:42:fc:18:db:bb:7e:10:48:ae:c3:7e:aa: 18:a8:b4:c7:5b:1f:7f:8f:a4:6e:82:d7:46:ad:94: e3:5a:b0:a9:9c:fe:5d:cf:d6:33:3d:19:52:d0:c5: e5:14:45:73:e1:a4:8f:87:1f:46:6d:a3:14:19:94: b2:c6:9b:ae:77:ed:9f:0c:43:a5:a0:ca:db:4e:4b: d3:2e:ef:c0:1c:b7:c3:3b:f1:47:02:8e:71:49:97: b1:06:2b:5b:68:25:d5:9a:30:90:ec:18:e2:96:01: c3:e8:f8:8f:66:fa:86:85:05:8a:af:64:66:46:d0: 8a:2c:4f:aa:19:f7:aa:92:53:10:25:61:a8:01:cb: a1:d2:6b:5c:c6:14:97:7e:f9:bb:c7:39:2e:88:c2: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:C4:10:3A:CF:04:EA:39:F2:C3:41:FC:CD:6A:C5:D0:D2:50:52 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:22:d8:46:4a:e6:76:96:d0:32:55:bd:a8:1c:fa:8a:a8:bf: 88:83:a0:7b:08:ef:5f:54:2d:44:ac:b3:dc:61:e0:48:34:14: 01:e5:51:25:08:ed:76:83:59:84:4c:1c:9c:46:d2:1d:79:41: 75:7f:37:c3:d4:f4:71:03:00:dc:24:c8:5f:6a:cf:58:63:08: d9:4d:90:9c:8d:6c:4f:90:21:4b:4b:54:9d:b1:61:2d:c8:7a: 19:b6:59:55:1e:78:24:cb:a1:0d:96:05:c6:f2:9f:4a:2a:92: b0:f8:3f:a0:1c:4a:52:e6:26:d1:1e:72:2b:07:0e:21:9c:b3: 3b:a8:da:f0:df:3d:24:91:b1:10:2d:65:73:75:8b:86:c2:ab: 52:63:01:50:3d:c9:74:c1:c4:15:38:64:44:09:f0:75:11:fb: f4:94:9b:bf:f5:46:0b:f8:b3:73:cd:28:d2:0b:f7:09:01:a3: 35:9c:d0:c5:c2:64:87:d5:08:7b:67:06:ac:af:99:49:18:fc: 4b:c6:68:5f:48:ab:2f:00:51:67:ef:70:28:85:10:77:48:47: d0:17:34:55:7f:4d:c0:c7:6d:5d:b4:79:86:83:2e:d7:2e:f2: b1:f6:79:8f:16:26:6c:22:c9:06:fd:15:7d:7b:db:6c:7b:b2: d3:46:77:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKEYwNDkyOUVGNzQzQzU0QzA4QjQ1RTE5Q0ZDNTFCRjJB QTU1OURBQTEwHhcNMjUxMjA3MDQwNDEzWhcNMjUxMjE0MDQwNDEzWjAYMRYwFAYD VQQDEw02OTM0ZmNiZC1lNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug/GLLh4pd76zKc1c4Xo+WWCFyfq7QHkL8+u5cg6kmomcCNoe4PJMofgzH1G 92kXue2E3xVi9lbADitLpJ+buSrNP/i+eUq6yT8u71SNPifDJ1jkc6opjknyJ8e6 OOzbsaiv/4WP/+fqnZlC/Bjbu34QSK7DfqoYqLTHWx9/j6RugtdGrZTjWrCpnP5d z9YzPRlS0MXlFEVz4aSPhx9GbaMUGZSyxpuud+2fDEOloMrbTkvTLu/AHLfDO/FH Ao5xSZexBitbaCXVmjCQ7BjilgHD6PiPZvqGhQWKr2RmRtCKLE+qGfeqklMQJWGo Acuh0mtcxhSXfvm7xzkuiMKGoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqdxBA6 zwTqOfLDQfzNasXQ0lBSMB8GA1UdIwQYMBaAFPBJKe90PFTAi0XhnPxRvyqlWdqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84QzIxNDk3NEE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZNQ0xSZUdjX0ZHX0txVloy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZN Q0xSZUdjX0ZHX0txVloycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBIthGSuZ2ltAyVb2oHPqKqL+Ig6B7CO9fVC1ErLPcYeBINBQB5VEl CO12g1mETBycRtIdeUF1fzfD1PRxAwDcJMhfas9YYwjZTZCcjWxPkCFLS1SdsWEt yHoZtllVHngky6ENlgXG8p9KKpKw+D+gHEpS5ibRHnIrBw4hnLM7qNrw3z0kkbEQ LWVzdYuGwqtSYwFQPcl0wcQVOGRECfB1Efv0lJu/9UYL+LNzzSjSC/cJAaM1nNDF wmSH1Qh7Zwasr5lJGPxLxmhfSKsvAFFn73AohRB3SEfQFzRVf03Ax21dtHmGgy7X LvKx9nmPFiZsIskG/RV9e9tse7LTRnfj -----END CERTIFICATE-----Generated at Sun Dec 7 05:36:13 2025 by rpki-client