This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: lBPTZwVoZ3LCtrBJJ/8ugNRCDphZpLKpM9AOyXD8q2Q= Subject key identifier: E3:B0:AA:2C:7A:21:D7:53:BC:E4:71:03:57:57:77:74:7A:3B:A3:1E Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 0179 Signing time: Fri 05 Dec 2025 01:55:28 +0000 Manifest this update: Fri 05 Dec 2025 01:55:27 +0000 Manifest next update: Fri 12 Dec 2025 01:55:27 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: arXNl54/0uxK6tRSNaSIwZIt2AvoMCvGFJhqE8R1AyQ=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Dec 5 01:55:27 2025 GMT Not After : Dec 12 01:55:27 2025 GMT Subject: CN=69323b90-35b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:ad:e9:e4:cb:2b:8b:fb:29:6c:94:d1:7a: 73:e0:a3:93:53:4b:87:83:dd:f8:fa:dc:2d:20:5d: 91:35:a0:28:f7:34:97:a5:8c:b6:1f:60:5e:9b:4f: 32:3c:94:f8:1c:d3:ab:1c:72:25:a7:46:64:a3:71: 0c:b4:fb:16:07:8b:f6:f7:f9:fb:ac:eb:23:ca:10: 24:f3:90:88:bb:d2:ad:79:a9:b4:28:aa:af:7b:45: 35:9f:b7:56:57:a9:f1:9c:0e:a1:84:90:74:bd:79: 48:d6:46:11:26:51:7f:d2:e7:88:9b:77:a9:ed:85: fc:dc:8b:25:b5:0e:2f:83:04:6c:b1:6d:80:7f:ee: 5d:ba:6e:88:57:b8:dd:76:33:ee:b8:dc:26:b3:77: 8f:48:a5:35:1c:4f:c7:4f:bd:ab:59:04:1c:7f:29: 46:1c:fd:91:1f:9f:56:c9:20:ac:e0:92:bb:6f:ca: ab:33:78:e4:fb:62:95:a9:24:74:d9:6a:77:a6:b4: 12:bc:fc:32:7b:e0:9d:d1:ff:52:8d:55:bd:aa:a0: d7:38:cb:02:00:6b:e2:e0:1a:a7:c0:f4:67:4f:84: 19:ec:13:b9:30:4a:40:72:49:53:61:69:4f:9e:10: b9:c3:98:c6:ca:93:aa:c4:4f:36:b8:28:d5:91:9f: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B0:AA:2C:7A:21:D7:53:BC:E4:71:03:57:57:77:74:7A:3B:A3:1E X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:42:96:07:3e:74:1a:0e:81:16:22:1a:06:73:15:50:0b:b8: 06:d0:c4:40:21:da:2f:ca:5a:28:f6:57:30:17:18:a4:14:cf: a2:a4:94:21:23:1a:cf:17:23:f6:2f:09:d3:6f:e1:34:ae:41: ef:e9:54:e4:53:f6:85:56:0a:d5:34:3f:40:73:3d:e2:83:0d: 8e:34:a1:0c:06:c7:40:89:63:0e:af:71:1b:a7:4d:a2:51:99: 0b:31:e6:87:56:fb:d5:a7:4e:58:11:58:13:ae:1e:76:39:d7: 0b:4f:a6:36:80:d6:c1:8b:3e:39:60:20:f3:33:11:b8:ef:32: 42:27:62:6e:e9:83:54:71:ae:fa:f0:57:a8:b6:20:e8:55:8b: a4:5d:80:b7:81:c6:23:41:da:20:98:74:9f:c3:25:67:5c:b7: ee:61:44:0b:69:01:7b:41:92:49:a9:dc:8d:76:34:70:12:27: 1b:0a:e1:17:dc:f2:f4:c8:0d:27:9a:8b:13:4c:33:1f:9f:8c: c0:65:4a:d9:7f:c4:63:26:ec:42:f8:48:27:25:ac:0e:e9:3e: 26:68:a3:77:b8:6a:73:91:13:d8:5e:45:d0:78:9f:9f:40:26: 44:47:5c:61:2b:e6:56:cd:d9:94:56:f4:64:b6:cb:fa:e8:ed: 57:83:ea:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUxMjA1MDE1NTI3WhcNMjUxMjEyMDE1NTI3WjAYMRYwFAYD VQQDEw02OTMyM2I5MC0zNWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUmt6eTLK4v7KWyU0Xpz4KOTU0uHg934+twtIF2RNaAo9zSXpYy2H2Bem08y PJT4HNOrHHIlp0Zko3EMtPsWB4v29/n7rOsjyhAk85CIu9Kteam0KKqve0U1n7dW V6nxnA6hhJB0vXlI1kYRJlF/0ueIm3ep7YX83IsltQ4vgwRssW2Af+5dum6IV7jd djPuuNwms3ePSKU1HE/HT72rWQQcfylGHP2RH59WySCs4JK7b8qrM3jk+2KVqSR0 2Wp3prQSvPwye+Cd0f9SjVW9qqDXOMsCAGvi4BqnwPRnT4QZ7BO5MEpAcklTYWlP nhC5w5jGypOqxE82uCjVkZ+xuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOwqix6 IddTvORxA1dXd3R6O6MeMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYQpYHPnQaDoEWIhoGcxVQC7gG0MRAIdovyloo9lcwFxikFM+ipJQh IxrPFyP2LwnTb+E0rkHv6VTkU/aFVgrVND9Acz3igw2ONKEMBsdAiWMOr3Ebp02i UZkLMeaHVvvVp05YEVgTrh52OdcLT6Y2gNbBiz45YCDzMxG47zJCJ2Ju6YNUca76 8FeotiDoVYukXYC3gcYjQdogmHSfwyVnXLfuYUQLaQF7QZJJqdyNdjRwEicbCuEX 3PL0yA0nmosTTDMfn4zAZUrZf8RjJuxC+EgnJawO6T4maKN3uGpzkRPYXkXQeJ+f QCZER1xhK+ZWzdmUVvRktsv66O1Xg+oL -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:59 2025 by rpki-client