This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: AXQy2/mlU92rDKzPTYI0YsdwBiUcxMCBUcI6pfceMJ8= Subject key identifier: 29:D7:C9:FF:AC:5C:F4:58:58:D0:0C:1B:39:9D:87:19:2C:EC:12:AC Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: C8 Signing time: Fri 05 Dec 2025 03:52:28 +0000 Manifest this update: Fri 05 Dec 2025 03:52:27 +0000 Manifest next update: Fri 12 Dec 2025 03:52:27 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: /0aL0m2wYxp8UpQt8DdXHh5780s+K/VBuUk7PInQ0JY=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Dec 5 03:52:27 2025 GMT Not After : Dec 12 03:52:27 2025 GMT Subject: CN=693256fb-4783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:41:4a:14:af:01:0c:c1:f6:74:06:aa:1f: dd:34:96:67:40:23:c1:01:a9:4c:fc:14:4a:6b:4a: dc:3c:7e:8d:8c:cd:92:44:08:08:e1:5e:77:d1:15: f5:b3:45:74:3a:0f:cb:c8:b3:00:fd:3c:6f:21:dd: bb:30:25:d0:78:e0:29:64:b5:22:8d:c6:37:ca:08: 43:c5:e4:6f:de:b0:af:17:39:cd:6b:cf:56:26:fe: 9c:7e:3d:79:80:2f:81:67:0c:dc:a9:b0:e0:c8:a5: 3d:b5:63:9e:db:09:b7:aa:40:d9:86:52:be:8f:d1: 8b:00:78:35:6c:a8:41:25:87:fa:38:ed:cb:50:bd: 7c:4f:ec:78:19:d0:3f:05:fc:d2:88:c4:85:b7:6c: a9:12:73:51:59:53:fb:a5:35:7b:e1:07:8a:0b:38: 67:61:9c:a9:04:89:31:25:bb:4b:e9:51:c7:c8:65: fd:2b:41:cd:a5:99:e8:2f:f7:0f:22:14:03:19:6a: 40:04:e3:43:8d:88:dd:bc:25:a0:55:53:06:1b:ef: 38:96:80:07:07:0c:ec:06:03:d5:d7:8f:be:80:48: b7:60:80:22:5e:1d:47:6c:cc:ec:3e:db:35:f1:d8: 37:57:fc:b5:93:cc:bf:91:9d:14:33:ce:1d:78:19: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:C9:FF:AC:5C:F4:58:58:D0:0C:1B:39:9D:87:19:2C:EC:12:AC X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a6:18:1e:4c:c6:f2:92:7b:07:f2:46:42:76:ad:ca:a2:fb: 83:1b:33:58:20:a3:51:10:54:e0:bb:cd:bb:bc:fa:70:76:37: 2d:4a:a7:64:10:89:e0:1e:96:8c:21:80:e8:ab:f9:88:9f:6d: e1:c9:20:bb:99:fd:bf:08:6d:c4:2e:be:54:e4:6f:91:fa:a4: 92:ff:c2:cb:06:ef:1c:a6:e9:0f:ea:4c:a8:fe:82:4f:3d:0c: bf:e2:17:0c:f2:ec:96:ef:75:4c:2b:fb:0d:3c:a7:e5:34:69: 16:56:c4:4b:f5:b1:72:2e:92:5c:2e:f3:b6:0b:9d:78:8f:1f: 81:34:f5:3e:6b:64:09:2f:0c:61:da:72:58:f6:8a:a5:81:7e: 17:c8:23:4e:9d:32:ac:c8:2a:cc:2e:0a:50:07:51:e9:93:35: 54:68:d3:fe:e7:f2:b3:05:48:58:a6:8b:f7:fd:db:b9:19:06: b1:07:13:0e:8b:60:d7:9b:c4:65:b9:c3:10:38:0c:e3:2f:21: 13:c1:75:5d:8b:8f:eb:3a:09:e6:f2:7b:2b:ef:52:02:e8:f7: 7f:65:3f:7a:7a:b8:73:2e:28:9e:44:cc:41:c8:af:91:85:d9: 5a:b8:b4:46:0e:8a:40:e9:be:54:ce:1a:a9:d2:5d:15:70:bb: 65:c3:0e:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2 OURDNTc4QTAwHhcNMjUxMjA1MDM1MjI3WhcNMjUxMjEyMDM1MjI3WjAYMRYwFAYD VQQDEw02OTMyNTZmYi00NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2etBShSvAQzB9nQGqh/dNJZnQCPBAalM/BRKa0rcPH6NjM2SRAgI4V530RX1 s0V0Og/LyLMA/TxvId27MCXQeOApZLUijcY3yghDxeRv3rCvFznNa89WJv6cfj15 gC+BZwzcqbDgyKU9tWOe2wm3qkDZhlK+j9GLAHg1bKhBJYf6OO3LUL18T+x4GdA/ BfzSiMSFt2ypEnNRWVP7pTV74QeKCzhnYZypBIkxJbtL6VHHyGX9K0HNpZnoL/cP IhQDGWpABONDjYjdvCWgVVMGG+84loAHBwzsBgPV14++gEi3YIAiXh1HbMzsPts1 8dg3V/y1k8y/kZ0UM84deBlz+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnXyf+s XPRYWNAMGzmdhxks7BKsMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0phgeTMbyknsH8kZCdq3KovuDGzNYIKNREFTgu827vPpwdjctSqdk EIngHpaMIYDoq/mIn23hySC7mf2/CG3ELr5U5G+R+qSS/8LLBu8cpukP6kyo/oJP PQy/4hcM8uyW73VMK/sNPKflNGkWVsRL9bFyLpJcLvO2C514jx+BNPU+a2QJLwxh 2nJY9oqlgX4XyCNOnTKsyCrMLgpQB1HpkzVUaNP+5/KzBUhYpov3/du5GQaxBxMO i2DXm8RlucMQOAzjLyETwXVdi4/rOgnm8nsr71IC6Pd/ZT96erhzLiieRMxByK+R hdlauLRGDopA6b5Uzhqp0l0VcLtlww4B -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:22 2025 by rpki-client