This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: E3G2JNXIFywIPV1LF4y9d8phZGra8cajSVG5ifYKj9k= Subject key identifier: 43:BF:C4:DF:E4:FB:91:BF:96:71:AC:1B:21:A6:F4:20:8E:72:ED:32 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 0404 Signing time: Thu 04 Dec 2025 23:02:25 +0000 Manifest this update: Thu 04 Dec 2025 23:02:24 +0000 Manifest next update: Thu 11 Dec 2025 23:02:24 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 0qMSTHdvVvrhFqDYRbMSSAKIMb9t6XEkwOlSRJ/OF2k=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: 2KodBvrJvVzLG2LbWPZiEGrY7NIy7vzTjdiUIRnC0oY=) 6: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=) 7: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) 8: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: NJb7fbLMu5qVuetYwV/WSEDtWyBY5QSeAuqQ8b9b+dY=) 9: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Dec 4 23:02:24 2025 GMT Not After : Dec 11 23:02:24 2025 GMT Subject: CN=69321300-d3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:7d:34:09:63:d0:1f:5e:a4:81:95:f5:85: 7f:7f:04:cb:0c:14:34:5b:7c:cb:6c:03:2f:b6:61: 1f:a0:7d:c6:81:50:9f:ee:88:7a:d6:9e:79:41:55: e8:63:82:be:00:8a:18:36:2e:63:06:1e:b1:f5:9b: 07:6f:78:bf:e3:8a:84:c1:32:24:12:c5:ba:ef:b0: 18:36:45:be:66:69:67:52:be:2d:37:83:81:d6:4f: 64:71:14:e8:e9:ed:25:1f:f2:d2:6f:70:72:6e:fe: 7e:78:37:64:eb:53:a5:bc:be:80:2b:4e:ba:f0:5f: 04:1a:89:ff:d8:10:b5:9d:1e:48:07:be:dd:c4:54: 19:3a:8b:9b:e6:60:8f:09:19:db:c3:f3:df:fd:34: 39:eb:4f:17:75:0a:21:4b:b0:eb:f4:32:c0:fe:fc: 3c:e3:0a:1a:af:83:46:69:d2:87:cc:d8:23:75:b1: 8b:7d:04:43:b8:e6:68:2e:35:f9:51:cf:0c:4e:cc: 4e:5c:94:43:09:8d:76:86:33:78:cd:47:b1:6f:dd: 3c:79:86:19:36:f6:f5:cf:71:25:20:45:5d:b2:61: 28:36:2e:0d:f4:d4:ee:0b:15:17:86:76:0b:c5:6d: 98:17:ee:be:2d:08:29:c8:d0:ef:06:3c:6f:d3:59: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BF:C4:DF:E4:FB:91:BF:96:71:AC:1B:21:A6:F4:20:8E:72:ED:32 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c8:d3:42:b5:02:12:41:e2:63:55:22:e4:47:f3:e4:79:11: f7:5c:5c:5d:55:64:e6:d8:e1:59:b1:48:b4:40:f4:43:26:f5: 56:72:1c:5e:16:d5:ba:3b:08:9a:4a:e0:5d:bb:29:46:fa:5a: 33:21:25:36:fc:3a:3a:5d:67:e1:06:e4:9c:0e:bb:39:90:08: 08:a0:76:79:28:78:e7:3e:7c:51:55:29:63:61:a5:e5:aa:3b: 09:20:c0:dc:8f:6e:28:21:5b:08:08:eb:6e:1e:b5:ef:ea:d5: f7:e4:84:15:b6:70:1a:7b:8f:bd:bc:87:74:87:78:6c:43:48: f6:79:1e:8c:ee:77:ef:fd:5b:b6:e4:ec:ed:3a:24:ef:6c:9e: 61:3b:bb:17:5e:c5:f3:b8:49:f7:69:ae:67:b4:cb:8a:ca:ff: 5e:34:df:ea:56:4c:aa:41:82:e4:b9:01:74:64:7b:1f:6c:f4: ff:0f:ad:78:77:d5:04:cd:2d:5d:bb:eb:4f:57:75:fc:d4:53: 24:f1:cf:91:bc:55:c4:d2:9d:d6:45:61:5a:3c:0a:55:66:6e: f8:a2:fb:db:de:d2:aa:99:34:55:c5:5a:c7:5d:8b:1b:8d:1f: 19:97:9d:41:04:5b:22:a6:f1:29:c7:8d:d6:d6:cc:d0:57:82: 19:f0:16:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUxMjA0MjMwMjI0WhcNMjUxMjExMjMwMjI0WjAYMRYwFAYD VQQDEw02OTMyMTMwMC1kM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunB9NAlj0B9epIGV9YV/fwTLDBQ0W3zLbAMvtmEfoH3GgVCf7oh61p55QVXo Y4K+AIoYNi5jBh6x9ZsHb3i/44qEwTIkEsW677AYNkW+ZmlnUr4tN4OB1k9kcRTo 6e0lH/LSb3Bybv5+eDdk61OlvL6AK0668F8EGon/2BC1nR5IB77dxFQZOoub5mCP CRnbw/Pf/TQ5608XdQohS7Dr9DLA/vw84woar4NGadKHzNgjdbGLfQRDuOZoLjX5 Uc8MTsxOXJRDCY12hjN4zUexb908eYYZNvb1z3ElIEVdsmEoNi4N9NTuCxUXhnYL xW2YF+6+LQgpyNDvBjxv01k+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO/xN/k +5G/lnGsGyGm9CCOcu0yMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCyNNCtQISQeJjVSLkR/PkeRH3XFxdVWTm2OFZsUi0QPRDJvVWchxe FtW6OwiaSuBduylG+lozISU2/Do6XWfhBuScDrs5kAgIoHZ5KHjnPnxRVSljYaXl qjsJIMDcj24oIVsICOtuHrXv6tX35IQVtnAae4+9vId0h3hsQ0j2eR6M7nfv/Vu2 5OztOiTvbJ5hO7sXXsXzuEn3aa5ntMuKyv9eNN/qVkyqQYLkuQF0ZHsfbPT/D614 d9UEzS1du+tPV3X81FMk8c+RvFXE0p3WRWFaPApVZm74ovvb3tKqmTRVxVrHXYsb jR8Zl51BBFsipvEpx43W1szQV4IZ8BZD -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:00 2025 by rpki-client