This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: w3/tQ1Pfxj35HnrTZ/ZqnbQTMdwF6vleNZ/lhnRySGE= Subject key identifier: 7E:0B:CE:27:E2:0D:F7:56:ED:8D:67:DB:55:09:65:49:60:50:27:E2 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: 01E0 Signing time: Fri 05 Dec 2025 00:56:19 +0000 Manifest this update: Fri 05 Dec 2025 00:56:19 +0000 Manifest next update: Fri 12 Dec 2025 00:56:19 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: dtAJAnJUVg9FifhLhOw6XVy6DJsu/llmRUJYBRIO1Ug=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: tnhVbAfny5ry4j6HJiWID5oWjAmaD653liAgf81aO1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: Dec 5 00:56:19 2025 GMT Not After : Dec 12 00:56:19 2025 GMT Subject: CN=69322db3-b43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:80:c5:11:e5:9c:79:fd:0b:04:f2:45:91: 42:57:c0:a5:e0:eb:b5:08:39:30:a3:7a:cd:2a:71: 43:6c:84:fa:b8:f9:69:47:d9:94:89:c8:73:04:1d: ce:11:41:b4:7c:e4:aa:b9:b8:90:52:fa:f5:8b:cb: d6:30:0b:46:5a:68:71:ed:c7:7c:70:b6:cb:66:cd: 74:eb:6d:63:ec:a3:1e:53:a2:8f:ba:64:0d:58:4f: 0a:06:26:42:65:d6:94:78:3a:76:d3:23:d5:c4:6d: 64:39:d8:f3:68:75:de:4c:2b:8b:fc:c7:63:8e:88: 63:1d:76:a7:ad:49:8b:57:fa:cb:23:fb:68:d9:d1: 5f:85:e5:8f:f3:88:cd:dc:cd:91:e8:62:f2:48:75: f9:8c:8a:84:38:79:49:a5:29:49:b4:34:5a:55:63: 3a:f2:53:f6:59:a2:df:61:dd:d9:98:e2:d9:c8:79: 65:8a:a7:c2:9d:4f:85:cf:35:b0:87:57:ae:4b:da: db:6e:5c:2d:51:7f:a2:7f:e6:dc:ae:ab:36:62:6b: cb:03:a9:e7:45:43:56:52:a9:8b:2b:b5:6b:ac:f0: d4:6f:b4:34:0c:88:97:2b:9d:8e:64:b9:c2:52:8a: 7d:74:c3:bc:b0:73:d6:1e:fc:3f:51:44:d5:c6:c7: 53:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0B:CE:27:E2:0D:F7:56:ED:8D:67:DB:55:09:65:49:60:50:27:E2 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:25:bb:e7:af:e2:47:90:f2:33:cf:77:b0:32:20:3e:63: a4:b9:43:ca:f0:dc:0a:69:20:9c:37:69:41:e6:d1:7f:75:b7: 5f:fc:8b:eb:1f:d3:42:1a:0d:55:59:9a:83:d1:4f:cc:92:9a: 9a:5a:7d:7d:63:b4:3b:3b:80:75:2b:dc:98:a1:3d:6b:ae:6a: 53:71:c0:d1:98:6d:16:d7:57:d3:c8:89:63:df:83:b8:e2:e0: 7a:05:95:aa:65:e3:3c:fd:c9:f2:97:e7:3f:63:a5:a7:51:d4: f5:7c:f8:53:41:4d:3c:1e:50:9b:12:77:32:46:0a:45:f2:a5: 7c:96:2d:34:2d:12:5a:e0:d6:48:17:97:7b:63:6a:db:76:88: 72:f6:77:d3:aa:21:a7:4d:fc:42:b7:96:75:7f:e8:9a:ef:f6: 9b:5e:07:d0:6a:75:bf:97:0b:39:a8:80:0c:e9:1a:01:08:1c: c7:7d:da:9f:62:3a:f9:68:bf:4d:94:cd:da:84:67:34:6c:a0: de:b6:1c:f9:74:8b:cd:5e:08:96:16:62:8c:49:3b:f8:d7:b0: 8f:e8:ef:48:cc:5b:88:8a:ab:37:ee:8f:e0:89:1a:83:4a:05: db:b0:b2:67:97:71:79:68:fb:da:5a:6c:5c:21:e2:3d:7a:cf: 62:ba:ed:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUxMjA1MDA1NjE5WhcNMjUxMjEyMDA1NjE5WjAYMRYwFAYD VQQDEw02OTMyMmRiMy1iNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8WAxRHlnHn9CwTyRZFCV8Cl4Ou1CDkwo3rNKnFDbIT6uPlpR9mUichzBB3O EUG0fOSqubiQUvr1i8vWMAtGWmhx7cd8cLbLZs10621j7KMeU6KPumQNWE8KBiZC ZdaUeDp20yPVxG1kOdjzaHXeTCuL/MdjjohjHXanrUmLV/rLI/to2dFfheWP84jN 3M2R6GLySHX5jIqEOHlJpSlJtDRaVWM68lP2WaLfYd3ZmOLZyHlliqfCnU+FzzWw h1euS9rbblwtUX+if+bcrqs2YmvLA6nnRUNWUqmLK7VrrPDUb7Q0DIiXK52OZLnC Uop9dMO8sHPWHvw/UUTVxsdT7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4Lzifi DfdW7Y1n21UJZUlgUCfiMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoGCW756/iR5DyM893sDIgPmOkuUPK8NwKaSCcN2lB5tF/dbdf/Ivr H9NCGg1VWZqD0U/MkpqaWn19Y7Q7O4B1K9yYoT1rrmpTccDRmG0W11fTyIlj34O4 4uB6BZWqZeM8/cnyl+c/Y6WnUdT1fPhTQU08HlCbEncyRgpF8qV8li00LRJa4NZI F5d7Y2rbdohy9nfTqiGnTfxCt5Z1f+ia7/abXgfQanW/lws5qIAM6RoBCBzHfdqf Yjr5aL9NlM3ahGc0bKDethz5dIvNXgiWFmKMSTv417CP6O9IzFuIiqs37o/giRqD SgXbsLJnl3F5aPvaWmxcIeI9es9iuu3E -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:48 2025 by rpki-client