This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: xX2qaZA/hcJRISI3UHhNOnlq9SD2SRJdzbsYh5J3xtY= Subject key identifier: 07:5F:76:40:4A:49:3D:AE:A7:AB:29:E0:07:0C:80:CE:51:63:A2:98 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04F1 Signing time: Sat 06 Dec 2025 22:26:04 +0000 Manifest this update: Sat 06 Dec 2025 22:26:04 +0000 Manifest next update: Sat 13 Dec 2025 22:26:04 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: 6lQr7ZnKnLVvkNihPN+SWpNaseHdFQLEUeyHB/o1SnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Dec 6 22:26:04 2025 GMT Not After : Dec 13 22:26:04 2025 GMT Subject: CN=6934ad7c-cabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:56:66:56:ec:66:00:d7:10:ae:3f:8c:21: 77:78:19:37:79:06:09:b5:5a:ba:77:db:39:76:ad: 7c:7d:82:e6:ec:1a:9e:71:0a:2f:b6:2e:69:4b:df: 2c:8b:9c:2f:4f:f0:59:97:69:54:25:e4:d5:26:75: 7d:9f:6c:16:d9:7e:4f:fd:59:ba:1b:2f:dc:99:ff: 74:87:94:68:83:c9:25:aa:6c:0d:ae:e4:11:0c:a2: 49:2b:c0:5e:87:c2:3d:94:9c:6b:30:ff:1c:98:53: f5:38:6d:4d:82:1f:a4:3d:ef:90:6d:73:12:78:62: 7b:36:f0:90:97:f3:50:ba:cf:54:c0:6a:c9:f3:f9: 3c:a0:0e:89:8b:ff:5e:53:8f:12:b8:51:4b:2f:1c: 20:9e:f7:80:9e:1d:bf:b1:3f:0c:1b:7d:f2:2b:e1: a5:3a:0b:bd:59:d7:32:11:02:1e:26:31:9f:34:74: 9e:db:1b:95:fa:27:49:b9:d1:78:df:28:76:22:5e: ce:55:32:ae:e4:2e:2b:14:82:e2:96:43:e0:69:33: 87:9e:bb:25:56:e8:23:78:78:27:8e:25:32:bb:11: 95:dd:b4:9c:cc:19:8b:9b:ba:9d:6c:a2:a3:6f:e5: e8:0f:05:20:f5:8e:ae:12:d3:63:50:e6:cc:11:2d: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5F:76:40:4A:49:3D:AE:A7:AB:29:E0:07:0C:80:CE:51:63:A2:98 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:61:91:a0:d4:96:29:2e:ee:8a:c8:73:19:e4:8b:6e:fc:20: aa:41:9d:74:fb:f2:ac:f1:1f:2e:4c:73:fe:e1:06:79:20:1d: 0b:e6:c9:5e:1f:a4:0f:0f:01:ba:3e:53:4e:75:ad:46:0a:d9: 69:19:ff:24:ef:de:a5:b0:53:28:ac:bb:c2:9b:8c:78:e1:26: e1:9f:fd:30:4b:99:70:a0:3a:cb:38:fb:2c:2c:bc:a3:24:06: 33:c0:5e:71:76:18:47:37:d1:61:67:21:d8:1f:78:08:35:6c: a3:9c:a4:d1:82:03:df:6f:1f:09:22:2a:3d:ee:0a:10:16:4d: 6a:28:43:cd:d2:c3:cc:c0:c7:58:c6:e5:4f:2d:8b:f6:61:54: 15:68:0b:8b:45:65:b8:d1:86:88:38:e9:a6:bb:51:36:fc:67: c1:2b:af:b2:be:86:03:5f:bb:16:b9:7b:f6:cd:cc:9f:55:db: eb:ac:f1:61:2e:79:c3:27:03:7b:04:9e:87:65:7d:fd:87:12: 14:b5:b5:74:e2:02:67:86:1b:a9:ba:89:dc:a5:d6:22:49:39: d6:5c:25:d0:1f:3a:98:c6:c8:42:c0:6b:3c:23:95:4d:ab:6b: 9b:c2:cb:93:2a:59:74:4e:2d:88:f4:b8:9f:a6:b5:c5:6b:65: 8e:20:18:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUxMjA2MjIyNjA0WhcNMjUxMjEzMjIyNjA0WjAYMRYwFAYD VQQDEw02OTM0YWQ3Yy1jYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHZWZlbsZgDXEK4/jCF3eBk3eQYJtVq6d9s5dq18fYLm7BqecQovti5pS98s i5wvT/BZl2lUJeTVJnV9n2wW2X5P/Vm6Gy/cmf90h5Rog8klqmwNruQRDKJJK8Be h8I9lJxrMP8cmFP1OG1Ngh+kPe+QbXMSeGJ7NvCQl/NQus9UwGrJ8/k8oA6Ji/9e U48SuFFLLxwgnveAnh2/sT8MG33yK+GlOgu9WdcyEQIeJjGfNHSe2xuV+idJudF4 3yh2Il7OVTKu5C4rFILilkPgaTOHnrslVugjeHgnjiUyuxGV3bSczBmLm7qdbKKj b+XoDwUg9Y6uEtNjUObMES3M+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdfdkBK ST2up6sp4AcMgM5RY6KYMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4YZGg1JYpLu6KyHMZ5Itu/CCqQZ10+/Ks8R8uTHP+4QZ5IB0L5sle H6QPDwG6PlNOda1GCtlpGf8k796lsFMorLvCm4x44Sbhn/0wS5lwoDrLOPssLLyj JAYzwF5xdhhHN9FhZyHYH3gINWyjnKTRggPfbx8JIio97goQFk1qKEPN0sPMwMdY xuVPLYv2YVQVaAuLRWW40YaIOOmmu1E2/GfBK6+yvoYDX7sWuXv2zcyfVdvrrPFh LnnDJwN7BJ6HZX39hxIUtbV04gJnhhupuoncpdYiSTnWXCXQHzqYxshCwGs8I5VN q2ubwsuTKll0Ti2I9LifprXFa2WOIBj7 -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:34 2025 by rpki-client