This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: HQ2/26cfOBRi3aMtrfD/fkRsDvpQb4RdXyk96SRc98A= Subject key identifier: 92:56:0B:C9:9E:6F:FC:FC:4C:52:91:95:BD:68:EA:FB:41:C8:27:53 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0AB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0AB0 Signing time: Sat 06 Dec 2025 18:45:44 +0000 Manifest this update: Sat 06 Dec 2025 18:45:43 +0000 Manifest next update: Sat 13 Dec 2025 18:45:43 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: pO+wr+uJYq9sQgR15Rkk0j3/f+ne8Ku+CFjVp2t4d18=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: bm4J9Gs8kg53MtutKeTvvvRSq0MtCTJcSE5YLit7Dts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2744 (0xab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Dec 6 18:45:43 2025 GMT Not After : Dec 13 18:45:43 2025 GMT Subject: CN=693479d7-4b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:7e:6e:f8:92:de:f5:29:26:63:64:8e:bf: 5a:be:47:f2:3f:52:fa:3c:8c:53:bc:01:64:6f:95: 41:ff:38:2f:78:af:10:d6:17:51:6e:f5:8a:a9:78: d8:43:62:bb:bb:af:88:1c:5a:f3:0c:ee:eb:7a:83: ad:f0:b8:1a:dd:04:ed:78:07:e2:01:5e:80:a2:7e: 2e:2d:3b:fd:5d:61:fc:13:fd:2a:86:2a:de:ce:c4: 2d:2b:6b:90:cf:ff:48:cf:97:f6:e5:a5:17:83:7a: 8a:a6:c9:70:7b:87:ea:bb:80:65:6a:45:9e:c8:33: e5:09:d3:57:e3:95:d5:bd:4e:51:0d:e3:dc:c4:44: 1d:dc:f4:1e:f4:71:c0:ad:c0:38:fe:99:0c:fa:27: 89:4f:d1:ae:6e:ef:e0:a9:e1:54:47:43:56:a4:21: df:7e:75:ca:ec:1c:e3:04:4a:9f:cd:be:31:a9:d7: 69:92:dc:57:1b:ee:04:43:62:dc:1e:06:ba:04:58: ab:64:b4:08:c1:ee:3b:30:35:f0:49:2b:2d:d6:2a: d7:22:4b:3a:1e:7a:3d:d2:0b:53:95:8d:5a:7d:21: 9c:e8:19:44:20:72:dd:a6:72:d7:cb:39:72:60:e5: 72:7f:d9:15:d1:d6:02:78:bc:47:5b:f5:6a:7e:86: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:56:0B:C9:9E:6F:FC:FC:4C:52:91:95:BD:68:EA:FB:41:C8:27:53 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2d:b0:0c:5a:f9:6c:27:3f:0b:1f:c0:b3:69:f9:dc:53:e7: cc:1b:24:37:d1:51:62:0f:2b:d3:8d:7b:a7:c1:1c:8b:f2:1e: 14:60:ba:e2:35:80:5f:7c:8f:e3:ce:bc:56:0d:0c:c7:1c:70: 8e:a3:d8:30:32:5a:dc:a8:9f:87:d5:51:38:24:ea:cc:40:90: 1e:d8:fe:5d:c5:c1:fb:81:c8:ce:bd:40:c7:62:d6:07:32:2b: 7c:e1:55:dc:fe:4d:c4:5e:e3:42:de:b5:ee:57:84:c6:6e:e3: 0e:e9:47:34:9e:7c:16:83:6f:75:7c:c4:7d:02:93:74:db:fe: 42:83:e5:e3:8b:04:a9:cc:bf:76:6f:b0:a5:db:14:cb:e8:25: 8c:2d:9a:3e:64:69:dc:23:5b:00:39:9a:56:16:43:f8:bc:07: 07:9c:00:b2:d5:b4:01:93:5d:36:6b:bd:90:1b:69:a3:97:44: 94:02:df:0a:30:e1:e0:88:55:72:25:2c:9d:f4:03:e3:34:49: b7:b5:04:b3:28:df:ed:65:95:fb:10:b0:8e:77:fd:ed:62:af: 9d:63:86:f7:cb:dc:9c:d3:8b:61:81:82:8e:39:48:c0:54:55: 66:48:34:81:fb:a1:04:26:f8:87:87:7e:78:c6:f0:ac:5b:3e: b1:3c:5a:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjUxMjA2MTg0NTQzWhcNMjUxMjEzMTg0NTQzWjAYMRYwFAYD VQQDEw02OTM0NzlkNy00YjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZd+bviS3vUpJmNkjr9avkfyP1L6PIxTvAFkb5VB/zgveK8Q1hdRbvWKqXjY Q2K7u6+IHFrzDO7reoOt8Lga3QTteAfiAV6Aon4uLTv9XWH8E/0qhirezsQtK2uQ z/9Iz5f25aUXg3qKpslwe4fqu4BlakWeyDPlCdNX45XVvU5RDePcxEQd3PQe9HHA rcA4/pkM+ieJT9Gubu/gqeFUR0NWpCHffnXK7BzjBEqfzb4xqddpktxXG+4EQ2Lc Hga6BFirZLQIwe47MDXwSSst1irXIks6Hno90gtTlY1afSGc6BlEIHLdpnLXyzly YOVyf9kV0dYCeLxHW/VqfoaD1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJWC8me b/z8TFKRlb1o6vtByCdTMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6LbAMWvlsJz8LH8CzafncU+fMGyQ30VFiDyvTjXunwRyL8h4UYLri NYBffI/jzrxWDQzHHHCOo9gwMlrcqJ+H1VE4JOrMQJAe2P5dxcH7gcjOvUDHYtYH Mit84VXc/k3EXuNC3rXuV4TGbuMO6Uc0nnwWg291fMR9ApN02/5Cg+XjiwSpzL92 b7Cl2xTL6CWMLZo+ZGncI1sAOZpWFkP4vAcHnACy1bQBk102a72QG2mjl0SUAt8K MOHgiFVyJSyd9APjNEm3tQSzKN/tZZX7ELCOd/3tYq+dY4b3y9yc04thgYKOOUjA VFVmSDSB+6EEJviHh354xvCsWz6xPFpw -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:49 2025 by rpki-client