This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json) Hash identifier: xxNX436ZUWsU5sAjxy9RL1rjcCkI74tMtgSSddpIISs= Subject key identifier: B5:98:BA:CC:FE:38:2A:47:3B:24:1E:5D:C8:F0:E6:78:D7:22:DC:76 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft Manifest number: 21 Signing time: Fri 05 Dec 2025 05:35:25 +0000 Manifest this update: Fri 05 Dec 2025 05:35:24 +0000 Manifest next update: Fri 12 Dec 2025 05:35:24 +0000 Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: DtFPQD8KzT3+Z06gh/0KR+VXyw3e9ce6vNUa5v1aFrk=) 2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: Qyc81RIKSdu+FLrquo5aMNKuhSqU44VyZkyWHyn1G+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Dec 5 05:35:24 2025 GMT Not After : Dec 12 05:35:24 2025 GMT Subject: CN=69326f1d-37a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1f:60:34:35:c1:2c:f5:45:40:3c:c0:da:6e: 88:43:22:96:8e:7a:8a:7b:54:da:45:3d:8f:a8:ed: ee:2d:ff:f4:67:77:15:d5:c7:22:7c:dc:d2:95:d9: 23:18:f2:25:14:d0:74:a9:b9:8d:13:27:0c:2f:d3: 4c:47:47:8b:5b:cb:56:72:f0:aa:9a:df:a0:5d:b7: fd:74:a1:8c:be:1f:86:d0:89:1e:c2:be:6f:5f:7a: bf:b4:5e:52:03:36:ae:cc:43:da:57:95:5b:a2:1e: 0e:16:09:70:8b:43:b4:9f:b3:e0:b2:50:ee:fc:53: c7:51:99:02:0d:cd:6b:5a:9f:9b:06:4c:b8:d7:25: 65:12:38:2c:eb:9a:6e:ed:10:0a:35:d7:d8:7a:72: 63:a2:c7:c2:c0:51:18:98:c0:b2:49:0d:b3:d0:12: ff:9b:a9:50:01:fa:c7:13:d5:fc:be:01:3a:8d:20: 3b:2d:da:3d:ad:8a:5c:88:84:be:d7:b3:08:3f:86: 09:f6:a9:4b:0a:a0:39:48:ac:e5:28:8f:07:62:ce: c1:95:d6:93:da:72:93:06:bf:c5:f0:1e:e8:17:83: 5f:c5:3d:64:a7:36:37:6b:e4:6b:0a:57:77:e2:14: 85:dc:c0:45:14:6c:50:d8:f1:a6:de:76:b0:c5:f9: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:BA:CC:FE:38:2A:47:3B:24:1E:5D:C8:F0:E6:78:D7:22:DC:76 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:10:21:cb:5d:b7:ca:cc:c7:e5:ad:ce:2e:df:ed:f2:58:b3: 30:02:ee:cc:17:4f:30:9e:6f:35:cf:9c:2b:c1:b7:0f:42:59: e9:65:77:eb:5f:71:37:3d:82:0e:50:c5:17:78:91:d1:58:02: e6:2f:3c:a8:81:25:5a:1a:a2:5b:a5:0f:87:8d:f8:d4:b1:ed: 46:ea:cb:77:71:29:70:b9:24:60:64:b2:a1:d8:e1:b8:ed:fb: 0e:75:79:ea:c6:fa:ae:57:31:7f:05:8e:71:c6:cd:2f:77:73: 12:66:21:8c:42:19:29:24:52:1a:2a:58:32:7b:55:5f:c2:03: 49:8c:cb:55:13:bd:fc:e4:14:b1:59:12:ed:1f:34:a5:12:6f: ce:8e:89:ad:48:15:fd:b8:9c:c1:83:b8:7b:03:6d:6c:cd:4c: 04:d3:c8:88:c7:76:34:f0:7a:13:95:24:45:96:42:a7:77:52: c9:94:21:60:c4:03:a6:9d:4d:25:e0:b5:53:ad:7a:9b:c2:59: d0:a5:f8:01:17:b8:d0:c6:b5:b1:2a:45:a4:95:2e:92:bf:cd: 1c:38:ab:05:12:4b:50:35:c2:a0:91:be:d3:99:bd:86:8f:60: 23:02:e9:8b:38:f5:db:d3:d4:1c:7f:e8:54:a7:cb:7e:86:8e: 35:fb:36:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNTEyMDUwNTM1MjRaFw0yNTEyMTIwNTM1MjRaMBgxFjAUBgNV BAMTDTY5MzI2ZjFkLTM3YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvH2A0NcEs9UVAPMDabohDIpaOeop7VNpFPY+o7e4t//RndxXVxyJ83NKV2SMY 8iUU0HSpuY0TJwwv00xHR4tby1Zy8Kqa36Bdt/10oYy+H4bQiR7Cvm9fer+0XlID Nq7MQ9pXlVuiHg4WCXCLQ7Sfs+CyUO78U8dRmQINzWtan5sGTLjXJWUSOCzrmm7t EAo119h6cmOix8LAURiYwLJJDbPQEv+bqVAB+scT1fy+ATqNIDst2j2tilyIhL7X swg/hgn2qUsKoDlIrOUojwdizsGV1pPacpMGv8XwHugXg1/FPWSnNjdr5GsKV3fi FIXcwEUUbFDY8abedrDF+UWdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtZi6zP44 Kkc7JB5dyPDmeNci3HYwHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr Z25qbjktMVBWRnQzZWVQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACsQIctdt8rMx+Wtzi7f7fJYszAC7swXTzCebzXPnCvBtw9CWelld+tf cTc9gg5QxRd4kdFYAuYvPKiBJVoaolulD4eN+NSx7Ubqy3dxKXC5JGBksqHY4bjt +w51eerG+q5XMX8FjnHGzS93cxJmIYxCGSkkUhoqWDJ7VV/CA0mMy1UTvfzkFLFZ Eu0fNKUSb86Oia1IFf24nMGDuHsDbWzNTATTyIjHdjTwehOVJEWWQqd3UsmUIWDE A6adTSXgtVOtepvCWdCl+AEXuNDGtbEqRaSVLpK/zRw4qwUSS1A1wqCRvtOZvYaP YCMC6Ys49dvT1Bx/6FSny36GjjX7NjE= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:11 2025 by rpki-client