This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: 4ojiCVPfRrlKf5SyZmHJnyD3ih7e+ZqxigIPVHxTDNM= Subject key identifier: 1E:30:24:BC:49:25:66:B6:D0:5F:AF:71:8A:A1:C9:CD:AB:B0:C3:37 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04F6 Signing time: Thu 04 Dec 2025 22:16:40 +0000 Manifest this update: Thu 04 Dec 2025 22:16:39 +0000 Manifest next update: Thu 11 Dec 2025 22:16:39 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: Iwb+tPD9xSl0ug2NVYYVvPOJ69+LqIGxIcO9VYqZf4g=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: ytiI82E6VCnTYlGo/bVg7G4jwjvMMnWPkOJQayi3ook=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Dec 4 22:16:39 2025 GMT Not After : Dec 11 22:16:39 2025 GMT Subject: CN=69320848-ddf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:d3:ac:85:07:79:3d:67:f3:8f:d9:d3:b9: 2f:47:95:0d:66:a3:5b:29:df:70:3f:85:55:8e:ea: d5:2e:fb:13:0a:71:ad:80:d9:4f:c6:ff:48:67:5d: 97:cf:21:e3:d3:9b:8c:87:f2:90:df:2d:2d:e0:48: ac:e7:da:78:b5:d4:52:97:3f:6b:24:0a:94:63:0f: 24:2a:72:43:a1:61:54:86:0b:d4:2e:4e:c4:a5:9c: 46:0d:07:d6:a9:7d:9a:37:c0:88:b2:aa:be:18:2a: 60:72:8f:6f:d8:f9:cf:4e:a6:68:24:8f:11:ac:b6: 1b:05:3e:44:99:60:f9:ba:18:7f:08:a3:a3:20:c4: 64:26:f3:a9:b2:dd:0f:dd:bc:6b:8b:7d:44:d5:43: e7:e7:d7:ec:51:d0:56:45:be:47:ab:96:58:94:d6: b6:04:ab:6b:84:41:d2:25:e4:19:3d:88:4e:04:55: 1e:c2:f4:d0:1a:b5:7c:cd:b5:b9:83:97:99:3e:de: cf:f2:69:07:71:cb:96:dc:4e:5a:35:37:77:2f:85: ea:ac:52:ca:08:ec:13:bd:0c:28:7e:c4:dd:59:e6: ee:cc:ce:bf:94:c8:4f:3e:12:f2:5d:d5:2f:7a:03: 9e:79:dd:5f:d5:98:48:56:f4:a6:e0:02:5c:40:6d: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:30:24:BC:49:25:66:B6:D0:5F:AF:71:8A:A1:C9:CD:AB:B0:C3:37 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a6:79:5f:41:d4:f1:f3:25:79:78:ce:08:39:e9:25:04:24: 97:c2:b2:b2:d5:50:1d:0f:2f:43:ad:bb:62:4f:4c:ca:63:f0: 24:20:40:86:a4:08:70:46:5b:b6:81:21:cf:c6:93:34:f6:ef: dc:16:c9:c1:23:2c:37:9d:3a:19:ee:a8:db:b0:01:30:b1:7e: a8:94:9e:03:1e:e2:13:79:b9:f8:f2:65:61:a5:43:5e:8d:8a: 08:49:0a:fd:38:75:91:21:2f:d0:0f:e5:1c:16:65:b9:34:28: 60:27:79:29:a3:8c:c7:f0:ac:4e:5e:2e:6d:be:e9:ae:cf:c9: 33:ce:85:f5:54:cb:9a:1b:59:57:d8:4a:56:d7:62:3c:80:07: 2b:8d:80:1e:c0:66:08:d4:fa:e7:1f:3e:79:f6:60:bb:9b:c9: 48:f1:98:9b:90:f3:ed:2c:1a:b2:46:14:df:b6:fb:94:a0:1f: c0:8b:48:ee:f6:08:2a:9c:a6:a2:81:81:4b:db:c0:25:f5:6b: a9:27:f8:d0:ac:d6:a4:ad:1d:e6:5c:5e:04:ef:75:88:83:0e: 34:f3:3a:62:d2:2e:8d:8c:bd:4e:37:f0:3c:6a:3d:84:8e:21: 12:b9:d1:9b:e4:3f:d6:32:6e:0e:04:07:c2:be:8a:da:b9:cd: 27:c2:16:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUxMjA0MjIxNjM5WhcNMjUxMjExMjIxNjM5WjAYMRYwFAYD VQQDEw02OTMyMDg0OC1kZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuXTrIUHeT1n84/Z07kvR5UNZqNbKd9wP4VVjurVLvsTCnGtgNlPxv9IZ12X zyHj05uMh/KQ3y0t4Eis59p4tdRSlz9rJAqUYw8kKnJDoWFUhgvULk7EpZxGDQfW qX2aN8CIsqq+GCpgco9v2PnPTqZoJI8RrLYbBT5EmWD5uhh/CKOjIMRkJvOpst0P 3bxri31E1UPn59fsUdBWRb5Hq5ZYlNa2BKtrhEHSJeQZPYhOBFUewvTQGrV8zbW5 g5eZPt7P8mkHccuW3E5aNTd3L4XqrFLKCOwTvQwofsTdWebuzM6/lMhPPhLyXdUv egOeed1f1ZhIVvSm4AJcQG0niQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4wJLxJ JWa20F+vcYqhyc2rsMM3MB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYpnlfQdTx8yV5eM4IOeklBCSXwrKy1VAdDy9DrbtiT0zKY/AkIECG pAhwRlu2gSHPxpM09u/cFsnBIyw3nToZ7qjbsAEwsX6olJ4DHuITebn48mVhpUNe jYoISQr9OHWRIS/QD+UcFmW5NChgJ3kpo4zH8KxOXi5tvumuz8kzzoX1VMuaG1lX 2EpW12I8gAcrjYAewGYI1PrnHz559mC7m8lI8ZibkPPtLBqyRhTftvuUoB/Ai0ju 9ggqnKaigYFL28Al9WupJ/jQrNakrR3mXF4E73WIgw408zpi0i6NjL1ON/A8aj2E jiESudGb5D/WMm4OBAfCvorauc0nwhY+ -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:45 2025 by rpki-client