This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: CPgPhGZuFMHGio9dLg7erveHE6p0YAD5lgaWEwEibsY= Subject key identifier: 14:7F:0F:56:83:4C:58:DD:58:B3:22:DA:44:F3:F0:B5:A3:94:3D:B8 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0CAD Signing time: Thu 04 Dec 2025 17:46:01 +0000 Manifest this update: Thu 04 Dec 2025 17:46:01 +0000 Manifest next update: Thu 11 Dec 2025 17:46:01 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: q9yHdd6AqNygKuzVpRlH9Bq1NNZ1c3NNLmYBhWX9PQM=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Dec 4 17:46:01 2025 GMT Not After : Dec 11 17:46:01 2025 GMT Subject: CN=6931c8d9-89ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:a5:91:45:37:57:5e:76:28:32:a0:f1:31: b6:48:1f:6c:1a:05:a3:09:07:4f:46:68:62:7d:12: f8:f7:67:9f:31:88:0c:90:3d:67:98:7c:ff:e1:70: 07:e0:bf:f1:4c:04:cb:1a:71:73:b6:52:59:10:3b: af:49:bf:39:73:66:6e:79:64:24:ed:f7:58:d0:26: 75:7b:6d:71:fb:22:a3:20:06:03:5d:07:cf:3d:41: 1b:f6:09:cd:84:e7:c1:34:b0:56:42:a8:65:97:1d: da:48:26:36:f8:42:aa:00:6e:fe:6e:59:f3:fa:1f: 51:9e:96:77:a6:84:9b:58:89:5d:4c:5f:68:51:97: ea:78:fe:16:11:da:71:14:b6:fa:6a:02:63:d0:d5: a6:41:c8:16:1a:b3:8a:38:c0:cf:12:b3:cc:78:2d: 54:24:bc:c1:df:23:43:b7:9f:08:54:ea:64:d1:a7: a1:7b:df:a1:cb:50:9b:d2:9e:29:1d:93:3d:d4:2a: a7:8f:9e:20:cd:7a:74:16:c4:ac:8e:70:89:24:49: 7f:66:4c:9c:27:2b:90:64:31:b9:8d:48:3a:e3:73: 18:f2:00:1b:ef:ec:fe:48:95:38:ef:29:27:f1:88: 22:c8:46:13:89:1f:a7:17:39:b4:d0:32:d2:2c:05: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:0F:56:83:4C:58:DD:58:B3:22:DA:44:F3:F0:B5:A3:94:3D:B8 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c2:34:44:49:34:e1:de:bd:b8:dd:a3:47:1e:07:e6:65:35: 97:b7:c5:ea:dc:44:65:9d:50:24:3d:d0:96:c1:31:44:a4:9e: ff:e8:df:d3:65:7e:c6:9c:d8:12:c8:1d:c9:15:33:ec:54:65: 04:49:7e:70:be:48:bf:e4:e3:99:60:09:ba:ee:1b:9b:ef:c0: d5:a5:71:8c:0e:f6:0e:c2:67:f5:d3:66:90:8a:c5:71:23:8c: 9b:68:41:79:0b:06:25:3d:0d:57:22:4f:fb:cb:39:25:e2:dd: aa:d6:05:e0:86:e3:b5:86:dd:95:e2:37:34:49:35:08:a3:9d: a1:59:e6:e1:b8:f4:9b:2f:11:4d:a1:88:3e:9e:d8:15:46:3f: 36:ca:e6:ba:78:5e:9a:89:43:5f:34:43:e0:b4:b2:fd:a0:ba: 19:af:be:01:a6:db:79:12:11:e5:6e:4f:d2:12:58:69:58:a9: 0e:cf:cb:60:6c:70:61:2e:96:33:37:08:f6:88:af:29:bf:3a: 28:03:ec:9c:60:91:95:f5:6e:b1:37:ce:ef:fe:ff:5f:d4:6f: df:0a:3c:21:8c:74:16:26:13:b1:bd:f8:f9:54:f0:c6:21:60: 80:21:e3:95:86:0d:17:1f:61:c9:1e:c7:99:86:ab:12:96:86: b0:f0:1b:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUxMjA0MTc0NjAxWhcNMjUxMjExMTc0NjAxWjAYMRYwFAYD VQQDEw02OTMxYzhkOS04OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyualkUU3V152KDKg8TG2SB9sGgWjCQdPRmhifRL492efMYgMkD1nmHz/4XAH 4L/xTATLGnFztlJZEDuvSb85c2ZueWQk7fdY0CZ1e21x+yKjIAYDXQfPPUEb9gnN hOfBNLBWQqhllx3aSCY2+EKqAG7+blnz+h9RnpZ3poSbWIldTF9oUZfqeP4WEdpx FLb6agJj0NWmQcgWGrOKOMDPErPMeC1UJLzB3yNDt58IVOpk0aehe9+hy1Cb0p4p HZM91Cqnj54gzXp0FsSsjnCJJEl/ZkycJyuQZDG5jUg643MY8gAb7+z+SJU47ykn 8YgiyEYTiR+nFzm00DLSLAUYowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR/D1aD TFjdWLMi2kTz8LWjlD24MB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXwjRESTTh3r243aNHHgfmZTWXt8Xq3ERlnVAkPdCWwTFEpJ7/6N/T ZX7GnNgSyB3JFTPsVGUESX5wvki/5OOZYAm67hub78DVpXGMDvYOwmf102aQisVx I4ybaEF5CwYlPQ1XIk/7yzkl4t2q1gXghuO1ht2V4jc0STUIo52hWebhuPSbLxFN oYg+ntgVRj82yua6eF6aiUNfNEPgtLL9oLoZr74Bptt5EhHlbk/SElhpWKkOz8tg bHBhLpYzNwj2iK8pvzooA+ycYJGV9W6xN87v/v9f1G/fCjwhjHQWJhOxvfj5VPDG IWCAIeOVhg0XH2HJHseZhqsSloaw8Bsp -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:49 2025 by rpki-client