This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json) Hash identifier: DQ8aTDxpl1JGHFHMrc0CiPbMjc0A84jAgd5RlFgqC3M= Subject key identifier: 41:36:93:17:22:2C:90:9A:87:B8:86:E5:AE:FF:5C:39:10:67:B5:CE Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Certificate serial: 03C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft Manifest number: 03BD Signing time: Thu 04 Dec 2025 23:06:01 +0000 Manifest this update: Thu 04 Dec 2025 23:06:01 +0000 Manifest next update: Thu 11 Dec 2025 23:06:01 +0000 Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: GKX6bGDb9kWEww0h5IC2nl28uy/4q8pXRM9CQ+VXJ0U=) 2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: 3vUZjFTkW2synuvsfLkZE7Uj9BWq6GQxB8oRjg8f8YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 962 (0x3c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Validity Not Before: Dec 4 23:06:01 2025 GMT Not After : Dec 11 23:06:01 2025 GMT Subject: CN=693213d9-6985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:50:c9:35:c5:44:8d:8c:5e:99:11:b2:4c: 61:07:3b:65:a9:30:a9:aa:8f:c8:79:7e:83:23:c5: 6a:22:85:e3:db:ad:3e:54:e4:11:96:1c:2b:08:89: b5:51:0d:4c:4f:3b:66:3c:03:5a:f8:75:58:c3:cf: c3:a4:98:af:46:60:43:73:90:0d:6e:bf:0d:b5:51: 50:e1:80:ea:82:c6:c5:c4:18:5e:1e:4c:4d:04:25: cd:a0:85:d9:b3:09:56:14:ad:72:60:3b:f0:1f:d2: ce:56:13:ad:82:3d:d2:03:79:c2:b0:4e:8f:38:68: 30:c7:40:fe:cc:fc:5b:6e:6f:4b:c2:07:d4:5d:45: f4:01:63:8b:9e:29:00:d9:cf:b9:c1:fc:57:0e:53: d8:a9:2e:b3:10:13:8e:0e:b3:05:00:88:f0:10:84: 66:4a:d7:fb:ba:bc:5d:83:fa:05:37:b7:bb:96:48: 53:95:13:2c:e4:9c:4a:66:5a:27:d1:d6:e5:62:2a: c1:f6:0a:88:41:c8:9e:f7:75:48:2d:4f:50:c2:6c: b7:dc:96:d2:1a:a8:e9:7b:7f:2b:86:1e:b0:58:c7: 99:28:a3:db:79:b4:82:b7:43:e2:ba:fd:bd:8e:5d: e4:69:24:5c:93:eb:8d:4a:68:97:31:bf:fe:a7:cd: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:36:93:17:22:2C:90:9A:87:B8:86:E5:AE:FF:5C:39:10:67:B5:CE X509v3 Authority Key Identifier: keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9a:21:1d:bf:b6:00:92:f4:71:c8:05:af:78:f6:59:00:ba: ce:56:ae:a4:7a:db:3f:53:3f:6b:d5:38:b1:46:25:ec:60:27: 66:1d:04:0a:94:cc:36:dc:07:41:bf:71:f9:c4:1a:6e:6a:91: 21:62:6c:2c:e1:26:a7:c5:b9:8d:0c:3d:c5:b4:b8:f7:19:5a: 25:d0:dc:a2:2a:fb:6c:2c:cd:8e:29:1a:dd:e1:5e:bd:06:bb: 94:77:37:f1:0d:f3:d2:b7:a5:70:d1:bb:d7:4d:a6:e4:69:59: 91:8a:ae:69:0e:d4:47:27:6e:63:cf:7b:f9:a8:e0:f9:6a:72: 52:72:28:0b:2a:55:b7:4c:bb:1f:eb:41:41:3f:94:44:88:48: 35:aa:64:7c:25:04:ca:8f:22:30:77:67:68:18:dd:6c:24:48: 44:c4:31:63:b7:0c:84:f2:ad:98:2e:89:1a:35:e8:5a:a1:b3: d0:4a:8b:be:7a:47:c1:29:a5:c8:7d:58:2c:a6:99:e2:05:d0: 7b:c7:d8:8e:73:38:7e:3d:a2:f6:97:13:74:e0:75:56:32:44: ef:db:ce:11:4f:f5:02:18:6f:d4:b4:a4:01:c8:50:33:1d:c4: 59:93:10:ad:eb:62:eb:b8:b4:0f:3f:7b:35:76:de:68:97:3f: 8b:66:f8:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3 QzFDQzM4RjEwHhcNMjUxMjA0MjMwNjAxWhcNMjUxMjExMjMwNjAxWjAYMRYwFAYD VQQDEw02OTMyMTNkOS02OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoR1QyTXFRI2MXpkRskxhBztlqTCpqo/IeX6DI8VqIoXj260+VOQRlhwrCIm1 UQ1MTztmPANa+HVYw8/DpJivRmBDc5ANbr8NtVFQ4YDqgsbFxBheHkxNBCXNoIXZ swlWFK1yYDvwH9LOVhOtgj3SA3nCsE6POGgwx0D+zPxbbm9LwgfUXUX0AWOLnikA 2c+5wfxXDlPYqS6zEBOODrMFAIjwEIRmStf7urxdg/oFN7e7lkhTlRMs5JxKZlon 0dblYirB9gqIQcie93VILU9Qwmy33JbSGqjpe38rhh6wWMeZKKPbebSCt0Piuv29 jl3kaSRck+uNSmiXMb/+p80z6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEE2kxci LJCah7iG5a7/XDkQZ7XOMB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u d25FRGtVbl9vb3A4SE1PUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnmiEdv7YAkvRxyAWvePZZALrOVq6kets/Uz9r1TixRiXsYCdmHQQK lMw23AdBv3H5xBpuapEhYmws4SanxbmNDD3FtLj3GVol0NyiKvtsLM2OKRrd4V69 BruUdzfxDfPSt6Vw0bvXTabkaVmRiq5pDtRHJ25jz3v5qOD5anJScigLKlW3TLsf 60FBP5REiEg1qmR8JQTKjyIwd2doGN1sJEhExDFjtwyE8q2YLokaNehaobPQSou+ ekfBKaXIfVgsppniBdB7x9iOczh+PaL2lxN04HVWMkTv284RT/UCGG/UtKQByFAz HcRZkxCt62LruLQPP3s1dt5olz+LZvhq -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:00 2025 by rpki-client