This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: hZ7rVn+8RdOQdR3uuO9g3EDnhSA/Flj/2Gkjqh194ko= Subject key identifier: AC:31:13:82:97:03:A6:93:E7:52:05:50:7E:C5:D5:3D:51:5C:AF:E4 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 079C Signing time: Sat 06 Dec 2025 20:30:26 +0000 Manifest this update: Sat 06 Dec 2025 20:30:25 +0000 Manifest next update: Sat 13 Dec 2025 20:30:25 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: p2MgG60Z2wI2i5Vsf97bcU7hmFpKc0wlxr4EDeYQnXA=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: LAD7dRCik0KzxFNr8quzKbBZIsig686rpItw8aFMMeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Dec 6 20:30:25 2025 GMT Not After : Dec 13 20:30:25 2025 GMT Subject: CN=69349261-ad66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:28:2c:08:ab:bd:47:b5:af:47:c1:6a:67: e4:ec:54:7f:0e:72:98:44:3c:0b:1f:ca:e7:bb:c4: 98:c5:2c:5e:d1:e4:48:ea:e4:66:ec:de:de:ba:05: f4:96:b5:8b:00:70:89:be:96:a3:e2:7f:79:76:24: 06:e7:df:3c:ec:cd:be:e2:70:3b:a9:65:67:70:04: a6:2f:a0:b7:ae:29:52:44:b5:d9:e7:f9:d9:61:99: 9f:3b:15:6d:26:64:85:9e:46:0f:24:06:16:34:af: 1f:ca:6d:2a:89:3e:6b:f5:eb:73:6a:a2:5e:99:80: 46:84:ee:3d:5c:bd:ec:4b:86:6f:0e:6a:d0:b0:1d: a7:b2:f8:87:ed:31:42:7e:58:a4:fe:13:33:22:d6: 0f:6f:0c:29:8f:cb:98:5a:6c:62:20:c4:b2:d4:15: d6:ed:34:66:15:f7:1f:d4:0d:10:0c:d5:b0:81:39: ac:ac:6e:1e:3b:46:d3:e4:63:7a:7a:94:79:f4:03: 8a:d1:a2:cd:48:a7:97:8b:33:7c:87:88:37:6d:2b: 4c:6b:8b:9e:db:dd:45:35:76:b3:ae:4d:73:99:46: a9:57:d4:c2:77:d7:1a:b2:ff:23:09:e4:75:5c:ce: 4b:02:78:88:00:51:7e:b1:fd:fd:ca:da:23:a2:31: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:31:13:82:97:03:A6:93:E7:52:05:50:7E:C5:D5:3D:51:5C:AF:E4 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:8d:2c:8b:c7:67:96:5c:ef:7e:b2:41:fe:47:94:74:d3:9c: 1f:65:b8:e6:b3:43:9d:62:be:81:68:f2:cd:a5:0a:bb:8d:5b: 65:4d:db:2e:9f:21:ca:d0:8a:c3:2c:5c:a9:6c:1f:8f:14:1e: 3e:d3:8e:be:d3:b9:e0:b5:ee:db:37:34:52:67:d6:0a:f1:91: 7b:70:86:4c:05:07:ef:e8:ac:39:d9:8f:8f:fa:c8:ae:7a:e4: 2d:45:58:77:8c:63:17:48:92:35:ca:49:6c:51:f7:04:36:a3: b2:56:f7:d6:c3:ff:e3:bf:5b:a0:3a:75:de:98:8f:88:d5:b3: 40:a0:64:1b:0f:15:16:90:e7:73:96:30:97:4e:ec:ea:3e:7a: 16:80:85:3d:b6:1b:e4:6d:73:33:34:d0:f5:ee:5a:a2:5b:94: c8:0c:4c:ff:23:55:a0:86:a3:f0:72:89:12:d0:99:83:92:e9: 76:0c:7c:be:3e:f4:fb:c9:55:b1:0b:f5:e2:96:fc:05:66:c1: 56:86:ce:12:50:bd:a4:2b:30:49:ae:ba:41:0b:7f:f8:b6:ba: 90:b9:7f:84:26:0c:ed:e2:46:dc:67:6b:5c:d9:81:15:30:85: 87:d5:a4:fb:5d:38:32:46:ac:c3:7d:65:c3:72:55:ff:db:e9: af:b4:4c:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUxMjA2MjAzMDI1WhcNMjUxMjEzMjAzMDI1WjAYMRYwFAYD VQQDEw02OTM0OTI2MS1hZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA794oLAirvUe1r0fBamfk7FR/DnKYRDwLH8rnu8SYxSxe0eRI6uRm7N7eugX0 lrWLAHCJvpaj4n95diQG59887M2+4nA7qWVncASmL6C3rilSRLXZ5/nZYZmfOxVt JmSFnkYPJAYWNK8fym0qiT5r9etzaqJemYBGhO49XL3sS4ZvDmrQsB2nsviH7TFC flik/hMzItYPbwwpj8uYWmxiIMSy1BXW7TRmFfcf1A0QDNWwgTmsrG4eO0bT5GN6 epR59AOK0aLNSKeXizN8h4g3bStMa4ue291FNXazrk1zmUapV9TCd9casv8jCeR1 XM5LAniIAFF+sf39ytojojHb+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwxE4KX A6aT51IFUH7F1T1RXK/kMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIjSyLx2eWXO9+skH+R5R005wfZbjms0OdYr6BaPLNpQq7jVtlTdsu nyHK0IrDLFypbB+PFB4+046+07ngte7bNzRSZ9YK8ZF7cIZMBQfv6Kw52Y+P+siu euQtRVh3jGMXSJI1yklsUfcENqOyVvfWw//jv1ugOnXemI+I1bNAoGQbDxUWkOdz ljCXTuzqPnoWgIU9thvkbXMzNND17lqiW5TIDEz/I1WghqPwcokS0JmDkul2DHy+ PvT7yVWxC/XilvwFZsFWhs4SUL2kKzBJrrpBC3/4trqQuX+EJgzt4kbcZ2tc2YEV MIWH1aT7XTgyRqzDfWXDclX/2+mvtEx4 -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:24 2025 by rpki-client