This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: CPqwnTnhOwWHj/J9/uYI3/ytnI1HzyxKr80UG3QeIx8= Subject key identifier: EA:5E:BF:2E:FF:E8:AF:2D:BB:C1:A6:37:B6:4F:29:C7:F9:84:B1:74 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 08C8 Signing time: Thu 04 Dec 2025 19:36:20 +0000 Manifest this update: Thu 04 Dec 2025 19:36:19 +0000 Manifest next update: Thu 11 Dec 2025 19:36:19 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: zPwYFAVUSpLivsdE6nx4KVnbcIcg358nsx+woSz2YAo=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: aGXCfIMMPiIdkB1VXV5Wr23hUeKQclg0bIflcTFqVx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Dec 4 19:36:19 2025 GMT Not After : Dec 11 19:36:19 2025 GMT Subject: CN=6931e2b4-709c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:db:a9:bc:b2:f2:47:b8:db:c3:35:7d:1c: 5e:c8:ee:21:74:66:08:17:93:e3:aa:87:d1:67:54: 4d:6d:f2:40:cd:9c:40:13:ed:20:04:79:24:e1:10: ed:2b:f6:50:46:dd:be:dc:43:e7:a2:18:cc:2d:5f: 9f:13:ed:5e:cf:5c:7a:a9:c1:5b:5c:72:f4:df:cd: f1:a2:7b:b8:ea:b1:77:93:83:38:69:8c:4c:d8:fa: 93:86:35:2a:f1:f0:63:f6:e7:d8:50:1c:c2:2a:62: a1:7d:af:ac:7c:eb:0c:a5:64:98:35:46:46:e4:da: 89:2f:f9:ef:8a:3c:ba:32:52:b1:b2:94:0f:71:79: c3:7e:e0:8d:37:75:bb:50:fd:4b:c0:4c:bd:fb:46: 1e:6a:b8:ca:38:4e:fa:fc:80:af:4a:c9:ec:6e:de: be:ba:ab:fe:b0:b4:db:3e:e3:15:bf:0e:d6:15:8f: 9c:75:fc:a2:55:63:50:32:55:9e:c6:83:86:ea:83: 18:c2:d6:14:41:67:7a:9a:94:46:32:63:e7:4a:9d: 4c:e4:4d:78:2b:d4:71:2f:8f:94:ff:0d:e7:5e:f8: 35:cb:b0:5f:87:a4:a6:23:2a:a1:a6:23:a6:9e:8b: 27:ba:84:0b:cf:ec:47:b6:4e:3f:95:0d:40:ec:44: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5E:BF:2E:FF:E8:AF:2D:BB:C1:A6:37:B6:4F:29:C7:F9:84:B1:74 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:68:e6:f6:b3:2d:33:c7:58:c7:f0:73:d5:77:de:36:6c:0a: 06:30:dd:b1:1e:72:5a:14:7d:df:91:72:09:ea:0a:9d:49:89: 97:43:56:aa:09:33:94:06:ec:af:9d:22:40:a7:56:f8:81:5c: ea:68:28:0f:b9:e8:6d:e8:be:1d:ac:19:1d:28:1f:15:0f:38: 48:6b:0f:5a:eb:02:3d:88:f1:77:b1:92:5a:4c:d5:04:7e:f4: f8:bf:8a:02:97:d9:57:2f:6d:45:e6:d0:42:46:d3:68:5e:2f: 03:7e:aa:b5:21:d4:42:31:5e:53:89:2a:ee:3e:a3:42:d3:8c: 29:d4:f7:f4:e7:ce:6b:38:f2:67:c3:9c:1e:c0:5e:7b:5c:f9: 93:1c:9e:9c:c9:51:b0:4c:2e:30:75:40:d6:3c:77:3f:ba:6c: 16:44:5e:8d:ae:e0:1b:07:c6:78:35:49:e2:ee:8f:81:7b:93: 61:d2:0c:73:10:9b:91:74:83:c5:a0:f0:68:8f:fd:d2:34:38: 02:97:b1:92:3a:cb:d7:af:78:a4:a4:90:69:fb:22:3e:3b:a5: ea:ae:cd:8c:fd:b3:21:fb:d7:d3:61:f2:b0:e2:75:a0:48:41: 60:11:72:ab:77:ef:95:0b:03:0c:43:2c:d7:06:0c:0b:81:63: 33:a8:80:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUxMjA0MTkzNjE5WhcNMjUxMjExMTkzNjE5WjAYMRYwFAYD VQQDEw02OTMxZTJiNC03MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpHbqbyy8ke428M1fRxeyO4hdGYIF5PjqofRZ1RNbfJAzZxAE+0gBHkk4RDt K/ZQRt2+3EPnohjMLV+fE+1ez1x6qcFbXHL0383xonu46rF3k4M4aYxM2PqThjUq 8fBj9ufYUBzCKmKhfa+sfOsMpWSYNUZG5NqJL/nvijy6MlKxspQPcXnDfuCNN3W7 UP1LwEy9+0YearjKOE76/ICvSsnsbt6+uqv+sLTbPuMVvw7WFY+cdfyiVWNQMlWe xoOG6oMYwtYUQWd6mpRGMmPnSp1M5E14K9RxL4+U/w3nXvg1y7Bfh6SmIyqhpiOm nosnuoQLz+xHtk4/lQ1A7ERUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpevy7/ 6K8tu8GmN7ZPKcf5hLF0MB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxaOb2sy0zx1jH8HPVd942bAoGMN2xHnJaFH3fkXIJ6gqdSYmXQ1aq CTOUBuyvnSJAp1b4gVzqaCgPueht6L4drBkdKB8VDzhIaw9a6wI9iPF3sZJaTNUE fvT4v4oCl9lXL21F5tBCRtNoXi8Dfqq1IdRCMV5TiSruPqNC04wp1Pf0585rOPJn w5wewF57XPmTHJ6cyVGwTC4wdUDWPHc/umwWRF6NruAbB8Z4NUni7o+Be5Nh0gxz EJuRdIPFoPBoj/3SNDgCl7GSOsvXr3ikpJBp+yI+O6Xqrs2M/bMh+9fTYfKw4nWg SEFgEXKrd++VCwMMQyzXBgwLgWMzqIB9 -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:47 2025 by rpki-client