This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: wmoK32sBs24dAwkztZNgiY48KdqKIzBxmCY8r9KzD3g= Subject key identifier: DF:18:13:4A:83:A0:94:30:3C:4A:74:2B:01:2F:ED:D8:B6:86:D6:C7 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0CB0 Signing time: Thu 04 Dec 2025 17:45:39 +0000 Manifest this update: Thu 04 Dec 2025 17:45:38 +0000 Manifest next update: Thu 11 Dec 2025 17:45:38 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: eqQe0OWUyBn3WOIz8vlukuO9gokM+C9ubqyqRgL8tbw=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: hMRVZDPhI9uQhHlcLsQL6+B9hhuCOLqR+jjUlDn3sAQ=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: s3U0q40HWyXJCTwtjWa8KKHr421/tnOx6JMPLRqROA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Dec 4 17:45:38 2025 GMT Not After : Dec 11 17:45:38 2025 GMT Subject: CN=6931c8c2-fb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:ed:a2:bd:2c:02:3a:37:de:fb:50:51:ed: 85:1e:e5:78:21:0c:97:65:08:20:24:62:75:94:66: a1:c0:13:5c:ef:59:59:fa:90:81:f7:cb:b8:19:80: f9:df:58:15:e6:02:c6:68:ff:9d:28:d5:c5:5d:db: aa:f8:58:ee:19:ae:31:e4:2a:a5:62:63:b5:9a:2e: ff:56:d2:9b:89:58:c4:8e:27:04:5d:d8:25:90:dc: 07:1b:28:3a:8f:1d:e5:2b:9a:7e:67:3e:e4:0f:06: 4a:bd:28:a8:3e:ef:e4:0b:4c:fa:35:2c:05:61:2f: 58:47:5c:a6:ea:a4:19:65:1a:39:2b:91:c1:38:1b: 93:f7:25:41:3e:c8:ef:98:88:2f:a0:ef:5c:c6:dd: ca:78:44:9d:56:15:d3:5e:ff:cb:b4:dc:4b:74:d4: 86:6f:a7:d1:cd:75:6e:16:85:02:f4:39:e8:89:10: d8:ab:26:d9:6e:72:79:00:e8:ab:65:16:33:fd:a6: 9d:1c:f0:d6:4a:03:bb:1e:95:42:45:18:5b:e0:65: 15:7c:c6:8d:df:e4:b0:cc:f5:48:dd:b5:f1:e4:b0: dc:3a:cd:da:8e:27:72:79:f0:1f:71:32:85:56:f6: a7:a2:ff:7f:a9:8b:c6:ca:2a:40:56:e5:4e:d7:c1: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:18:13:4A:83:A0:94:30:3C:4A:74:2B:01:2F:ED:D8:B6:86:D6:C7 X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:57:df:0b:8f:1a:ce:c7:bc:4c:a3:aa:59:1a:6a:12:b5:93: 09:8b:55:79:8d:44:cb:86:26:9d:99:6e:4a:1a:e2:c3:19:9b: 0a:33:ce:b8:4f:1c:9c:ad:11:97:a4:aa:af:cc:ae:a8:1b:59: a1:c0:9b:4f:99:8c:d2:9d:f4:71:9b:72:75:b7:8a:38:89:81: 73:9e:80:e3:a5:0a:21:f0:27:92:6e:e2:26:ef:8d:ad:ac:5c: af:f1:d2:4f:dc:a8:25:72:5a:6e:3b:43:f1:6d:9e:29:2d:35: d3:3e:95:0e:af:6e:28:ad:ac:7a:3e:1d:5e:ee:26:23:c3:76: 23:b0:84:e9:a2:14:25:58:0f:88:2f:7e:8d:47:0d:e9:10:6d: 88:dd:c8:74:59:c8:e2:f4:f7:88:44:40:9b:55:be:02:a7:d6: 65:b7:4e:6a:66:ff:9d:39:a8:74:a8:0b:06:88:ea:09:9d:c0: a9:33:b1:e0:a8:b4:2f:bf:2a:6c:43:39:f8:99:ab:d0:18:67: 44:c2:5c:e4:de:2c:77:be:6e:c1:a9:48:8f:d2:15:5f:7e:96: a9:cc:31:87:d6:21:d9:4a:3d:39:f5:9c:cd:9b:ff:42:93:88: d4:d8:26:18:98:c2:f5:6c:1b:1d:eb:25:40:bd:68:d5:b6:38: da:13:1f:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjUxMjA0MTc0NTM4WhcNMjUxMjExMTc0NTM4WjAYMRYwFAYD VQQDEw02OTMxYzhjMi1mYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArM/tor0sAjo33vtQUe2FHuV4IQyXZQggJGJ1lGahwBNc71lZ+pCB98u4GYD5 31gV5gLGaP+dKNXFXduq+FjuGa4x5CqlYmO1mi7/VtKbiVjEjicEXdglkNwHGyg6 jx3lK5p+Zz7kDwZKvSioPu/kC0z6NSwFYS9YR1ym6qQZZRo5K5HBOBuT9yVBPsjv mIgvoO9cxt3KeESdVhXTXv/LtNxLdNSGb6fRzXVuFoUC9DnoiRDYqybZbnJ5AOir ZRYz/aadHPDWSgO7HpVCRRhb4GUVfMaN3+SwzPVI3bXx5LDcOs3ajidyefAfcTKF Vvanov9/qYvGyipAVuVO18GbNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8YE0qD oJQwPEp0KwEv7di2htbHMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+V98LjxrOx7xMo6pZGmoStZMJi1V5jUTLhiadmW5KGuLDGZsKM864 TxycrRGXpKqvzK6oG1mhwJtPmYzSnfRxm3J1t4o4iYFznoDjpQoh8CeSbuIm742t rFyv8dJP3KglclpuO0PxbZ4pLTXTPpUOr24orax6Ph1e7iYjw3YjsITpohQlWA+I L36NRw3pEG2I3ch0Wcji9PeIRECbVb4Cp9Zlt05qZv+dOah0qAsGiOoJncCpM7Hg qLQvvypsQzn4mavQGGdEwlzk3ix3vm7BqUiP0hVffpapzDGH1iHZSj059ZzNm/9C k4jU2CYYmML1bBsd6yVAvWjVtjjaEx/i -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:47 2025 by rpki-client