This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: lbxJLTYShQ/KMnBDYVsKIUXJJU1MHkUJY3zcfU2LHSo= Subject key identifier: E7:F3:66:9A:E2:A6:9E:57:74:35:0C:AB:C9:B3:4A:8D:33:8B:BE:07 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 0405 Signing time: Sat 06 Dec 2025 23:13:38 +0000 Manifest this update: Sat 06 Dec 2025 23:13:37 +0000 Manifest next update: Sat 13 Dec 2025 23:13:37 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: GXJVb4IBxem4+PBSze6LxOXZg9mSswHybMK4vs/HJwU=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: 2KodBvrJvVzLG2LbWPZiEGrY7NIy7vzTjdiUIRnC0oY=) 6: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=) 7: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) 8: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: NJb7fbLMu5qVuetYwV/WSEDtWyBY5QSeAuqQ8b9b+dY=) 9: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Dec 6 23:13:37 2025 GMT Not After : Dec 13 23:13:37 2025 GMT Subject: CN=6934b8a1-be47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:bc:f9:31:d1:bf:d1:e6:b2:b2:79:57:f2: 85:91:09:aa:da:2d:32:d5:07:e1:a8:56:fc:bb:81: 99:0f:52:7a:f0:d8:91:61:36:7d:43:b0:07:b7:a9: d5:21:ee:3d:49:bb:60:10:0a:01:63:da:24:e7:c6: 55:59:b8:10:4f:36:f1:e0:c5:cb:95:e9:d4:0d:bc: c1:21:fa:be:46:89:52:21:87:03:6f:ef:9b:57:8b: e7:df:89:cc:f7:b9:5d:c2:7c:ef:fb:0e:f0:11:82: 0d:f6:12:4a:df:51:a9:ef:69:9e:18:ed:97:2f:07: 66:c1:b6:5f:b0:ae:5b:53:b2:c7:dd:8b:87:4e:68: 43:69:9d:c6:17:d9:1f:6b:3d:08:de:3a:e3:cb:b3: 6a:fa:5e:a0:08:d6:7c:4c:c2:06:5f:81:70:96:c9: eb:d5:35:9d:d3:a8:7e:f3:00:34:11:77:55:e2:91: 84:65:cb:92:da:ea:44:fa:a5:31:91:9b:aa:f4:e5: 80:b9:9d:d5:0d:e2:35:fe:cc:cd:89:9c:55:e4:11: 84:aa:4d:ad:1a:15:a4:c6:71:6d:be:5c:6f:09:04: d9:e4:bb:a6:61:30:71:3c:fb:4d:0f:8a:1a:ec:86: a6:13:4f:c1:07:14:e7:02:e7:eb:67:92:ac:d4:44: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F3:66:9A:E2:A6:9E:57:74:35:0C:AB:C9:B3:4A:8D:33:8B:BE:07 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:55:d1:02:dd:6b:d0:e6:2f:4b:c0:35:b3:12:9f:92:11:0e: c3:75:61:e4:87:77:3e:8f:29:b6:67:1a:2c:74:35:e3:c4:dd: da:af:09:28:3c:be:07:81:0d:c5:71:9f:c4:aa:c4:ef:64:ab: c1:a0:31:fb:95:40:2c:55:ab:6d:df:2e:88:67:b7:85:3c:bb: f1:1d:a6:de:50:47:b8:03:6f:33:8c:05:ca:17:a3:04:98:7c: 53:b4:35:63:a9:83:dc:f1:92:40:80:d6:c0:bd:84:67:54:a2: e2:1d:f6:59:13:75:9a:bf:2e:94:bc:af:5a:05:a6:77:37:c3: 0f:26:21:ed:24:e7:cf:c1:7c:d3:03:28:61:03:fa:19:6d:12: fc:89:4f:27:e4:1d:1e:f9:96:7b:06:cd:59:eb:ed:79:49:04: 7d:2c:28:ee:ed:46:50:e3:1c:23:64:0d:dd:7d:4b:c0:27:be: 7b:f8:9f:e5:37:2f:63:85:73:0e:35:23:ca:3f:ac:31:ac:87: ca:ee:dc:80:90:d8:f9:87:6f:e5:09:54:b6:61:9a:d8:2d:2a: 88:cb:a4:8d:65:50:a7:f9:18:07:32:26:bc:35:78:ac:78:dd: a6:26:65:77:bd:8b:2d:76:d7:4f:76:0d:49:cb:9d:63:1b:ca: 37:f7:45:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUxMjA2MjMxMzM3WhcNMjUxMjEzMjMxMzM3WjAYMRYwFAYD VQQDEw02OTM0YjhhMS1iZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8m8+THRv9HmsrJ5V/KFkQmq2i0y1QfhqFb8u4GZD1J68NiRYTZ9Q7AHt6nV Ie49SbtgEAoBY9ok58ZVWbgQTzbx4MXLlenUDbzBIfq+RolSIYcDb++bV4vn34nM 97ldwnzv+w7wEYIN9hJK31Gp72meGO2XLwdmwbZfsK5bU7LH3YuHTmhDaZ3GF9kf az0I3jrjy7Nq+l6gCNZ8TMIGX4Fwlsnr1TWd06h+8wA0EXdV4pGEZcuS2upE+qUx kZuq9OWAuZ3VDeI1/szNiZxV5BGEqk2tGhWkxnFtvlxvCQTZ5LumYTBxPPtND4oa 7IamE0/BBxTnAufrZ5Ks1ER9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfzZpri pp5XdDUMq8mzSo0zi74HMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsVdEC3WvQ5i9LwDWzEp+SEQ7DdWHkh3c+jym2ZxosdDXjxN3arwko PL4HgQ3FcZ/EqsTvZKvBoDH7lUAsVatt3y6IZ7eFPLvxHabeUEe4A28zjAXKF6ME mHxTtDVjqYPc8ZJAgNbAvYRnVKLiHfZZE3Wavy6UvK9aBaZ3N8MPJiHtJOfPwXzT AyhhA/oZbRL8iU8n5B0e+ZZ7Bs1Z6+15SQR9LCju7UZQ4xwjZA3dfUvAJ757+J/l Ny9jhXMONSPKP6wxrIfK7tyAkNj5h2/lCVS2YZrYLSqIy6SNZVCn+RgHMia8NXis eN2mJmV3vYstdtdPdg1Jy51jG8o390Wy -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:43 2025 by rpki-client