This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: XCGiTg424mooueC0LZ0enIXBRG3Qn1ciEzaXCeJvp7w= Subject key identifier: C8:D4:AF:24:21:0E:D8:B7:D5:31:2E:C4:A2:A7:98:00:C7:D3:4F:D5 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: CD Signing time: Sun 21 Dec 2025 04:53:59 +0000 Manifest this update: Sun 21 Dec 2025 04:53:59 +0000 Manifest next update: Sun 28 Dec 2025 04:53:59 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: UxlsY7fSeBgWbXAU8aVpUMhfOB+BudZsgo1ADNJQUBQ=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: Vl4anvJxGj00QWX5m+Dlfx86DkUFERQcopj8hiwYg24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Dec 21 04:53:59 2025 GMT Not After : Dec 28 04:53:59 2025 GMT Subject: CN=69477d67-82b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:e6:bc:97:b0:5d:df:57:75:14:f3:d5:5c: 16:43:14:87:e3:0f:29:a2:b2:db:da:5f:0d:d4:a5: 80:ee:9c:84:8a:65:cf:36:e8:f4:4a:90:74:77:5b: d5:be:f4:0f:c6:9a:89:79:a5:c3:59:ba:3d:62:94: ef:a0:37:fe:3a:10:bf:ec:e9:93:7a:d3:e1:42:1a: fb:53:26:d7:e1:68:3c:b9:d6:d1:29:0c:ce:3d:dc: c6:59:ff:05:88:c5:b6:91:e4:73:fc:e4:e6:0e:1b: ab:f4:f5:cd:ea:e4:95:c1:f3:e2:77:f3:bc:ab:eb: 12:37:f6:af:0b:84:56:23:b1:2a:91:f9:bb:dd:85: 14:d9:fe:2b:e5:79:df:23:16:7a:c8:dd:e9:77:f7: a5:a2:4f:c3:0d:48:6c:21:01:12:0c:99:7b:46:d0: d9:a1:8a:b6:65:fe:3a:56:a6:94:0c:0a:59:47:1e: cc:10:8c:29:0c:9b:2e:00:c3:a3:67:68:0e:47:85: 60:54:7b:1a:e6:88:d8:46:41:a7:af:e8:48:bf:db: 42:f0:6a:35:28:bf:e3:ba:bb:0a:3f:bc:9b:ce:c4: 6c:81:98:7f:50:25:59:a9:0c:7a:72:8b:b5:f2:19: a1:bd:77:a5:78:bb:2f:8b:4a:c4:e6:14:f6:99:f7: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D4:AF:24:21:0E:D8:B7:D5:31:2E:C4:A2:A7:98:00:C7:D3:4F:D5 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:8d:c8:c6:b3:68:85:64:d2:fd:3d:46:fb:41:7d:bc:e8:69: 06:68:da:69:ef:32:71:ed:cd:16:5e:4c:36:24:65:20:a2:6f: 44:b2:12:5c:81:83:a3:1a:ce:5a:ac:f2:df:84:d6:6b:e2:53: de:81:f2:88:5b:e6:bc:57:c8:92:ce:2e:4d:2a:e2:6f:d6:80: 9d:b2:01:9a:92:b5:26:73:d0:98:9f:e9:88:49:a8:a6:f9:09: e8:09:dc:ee:e6:82:f0:a0:0e:33:39:3a:bc:13:b3:c5:09:9b: 50:72:e1:23:97:b9:5b:87:03:b3:5b:0f:fa:c9:4a:13:d4:51: 5e:f4:97:33:e3:cd:fe:a2:5a:13:1d:91:33:c1:cc:ab:41:41: d5:24:b3:d1:f3:b4:66:a5:5d:f5:0b:05:e1:d4:1b:97:9e:bc: d8:6a:6a:0a:62:b4:14:c8:75:89:bb:55:92:db:82:1a:a6:c4: 9e:00:81:65:94:0b:52:ec:54:90:7f:aa:e4:3d:bf:77:af:68: b3:1a:d5:88:e8:2e:6e:dc:1a:9d:3d:dc:8b:31:e1:c3:92:e6: 22:cd:ee:60:4b:81:0e:23:ea:35:bb:6b:8e:6a:18:be:7b:35: 1c:67:01:8c:b6:6f:5f:7f:9a:fd:3a:11:f5:09:a1:88:95:1f: ca:51:0a:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKEYwNDkyOUVGNzQzQzU0QzA4QjQ1RTE5Q0ZDNTFCRjJB QTU1OURBQTEwHhcNMjUxMjIxMDQ1MzU5WhcNMjUxMjI4MDQ1MzU5WjAYMRYwFAYD VQQDDA02OTQ3N2Q2Ny04MmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzermvJewXd9XdRTz1VwWQxSH4w8porLb2l8N1KWA7pyEimXPNuj0SpB0d1vV vvQPxpqJeaXDWbo9YpTvoDf+OhC/7OmTetPhQhr7UybX4Wg8udbRKQzOPdzGWf8F iMW2keRz/OTmDhur9PXN6uSVwfPid/O8q+sSN/avC4RWI7Eqkfm73YUU2f4r5Xnf IxZ6yN3pd/elok/DDUhsIQESDJl7RtDZoYq2Zf46VqaUDApZRx7MEIwpDJsuAMOj Z2gOR4VgVHsa5ojYRkGnr+hIv9tC8Go1KL/jursKP7ybzsRsgZh/UCVZqQx6cou1 8hmhvXeleLsvi0rE5hT2mfdQDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjUryQh Dti31TEuxKKnmADH00/VMB8GA1UdIwQYMBaAFPBJKe90PFTAi0XhnPxRvyqlWdqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84QzIxNDk3NEE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZNQ0xSZUdjX0ZHX0txVloy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZN Q0xSZUdjX0ZHX0txVloycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRjcjGs2iFZNL9PUb7QX286GkGaNpp7zJx7c0WXkw2JGUgom9EshJc gYOjGs5arPLfhNZr4lPegfKIW+a8V8iSzi5NKuJv1oCdsgGakrUmc9CYn+mISaim +QnoCdzu5oLwoA4zOTq8E7PFCZtQcuEjl7lbhwOzWw/6yUoT1FFe9Jcz483+oloT HZEzwcyrQUHVJLPR87RmpV31CwXh1BuXnrzYamoKYrQUyHWJu1WS24IapsSeAIFl lAtS7FSQf6rkPb93r2izGtWI6C5u3BqdPdyLMeHDkuYize5gS4EOI+o1u2uOahi+ ezUcZwGMtm9ff5r9OhH1CaGIlR/KUQqY -----END CERTIFICATE-----Generated at Sun Dec 21 19:26:22 2025 by rpki-client