This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: KKg1o3bjIGSIJ+c+X6U8/ptCnrUeg2y6/X6c745cz+8= Subject key identifier: BC:8C:EB:EF:B1:39:A7:2B:C1:E0:4A:EF:9B:8D:A0:06:FD:CA:64:B8 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 04F2 Signing time: Thu 04 Dec 2025 22:18:24 +0000 Manifest this update: Thu 04 Dec 2025 22:18:23 +0000 Manifest next update: Thu 11 Dec 2025 22:18:23 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: RA0whHiJBLnjWsBJdO440NCURIPhgbRuQWEGE+hnM6o=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Dec 4 22:18:23 2025 GMT Not After : Dec 11 22:18:23 2025 GMT Subject: CN=693208b0-9a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:a8:f3:fd:42:58:3e:f6:2d:58:ae:e0:d2: 0e:60:4b:af:66:e9:a4:d7:84:bc:f6:97:9e:c6:de: d9:6c:19:51:d1:35:d7:6c:8e:73:f2:ea:74:1f:f2: de:ce:8f:3f:7e:8c:78:fb:19:a3:a0:7a:c8:2b:61: bd:f1:d5:74:9e:71:1b:0e:f1:e2:a0:ef:61:0c:f3: c4:0e:50:ec:65:5b:2e:9e:9b:3e:4b:b9:9e:d3:d7: fc:f8:22:cf:8f:89:21:a2:cd:08:98:97:71:84:10: aa:72:e3:cc:09:68:14:01:fc:4c:6c:f7:a9:c2:18: d5:40:00:16:18:cd:92:9d:01:a6:b3:3c:ad:ff:c1: ad:e2:29:19:88:d6:d1:12:1f:66:d1:a7:88:dc:ff: 8b:63:a4:a4:87:d2:0a:dd:07:21:10:f0:af:4f:a2: 42:2d:20:08:20:4d:55:b2:f1:d6:dd:f9:ec:5c:60: 2f:01:12:dc:05:13:e3:5f:43:64:33:ba:04:f3:05: 60:97:ce:79:29:26:3a:a3:ec:0a:dc:33:3d:68:e0: 3e:7c:cb:ef:28:d5:cf:b4:2b:c1:af:19:28:85:8b: e5:fa:ce:37:a9:30:c4:78:f9:2d:8c:dc:81:f8:b2: 4a:1b:90:06:e6:a6:27:38:46:62:fb:de:02:e9:b8: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8C:EB:EF:B1:39:A7:2B:C1:E0:4A:EF:9B:8D:A0:06:FD:CA:64:B8 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ed:67:e7:d9:da:0b:20:00:56:c5:d3:c2:3f:70:98:24:8d: 17:67:7d:22:e2:98:91:e5:9e:a8:90:ce:e6:b4:3d:64:c6:a1: c8:c6:92:db:21:6f:bf:c6:96:23:59:01:42:1b:13:7d:c0:1a: 90:42:71:b6:04:87:b5:24:e6:09:04:44:d5:1b:38:d1:f6:74: 7d:cf:05:71:38:5a:4d:98:40:72:71:70:f6:c9:90:3f:77:ac: 9f:bd:0e:19:60:16:e2:ad:55:23:ad:d0:44:d5:d6:17:82:15: 7b:30:7e:dc:a9:a4:b9:17:98:94:fe:a5:a4:08:b6:c1:f0:9d: fc:21:56:1a:46:3b:68:c8:a0:4b:b6:f1:41:28:f2:78:ca:46: f2:a6:98:5d:a4:d0:e6:82:b4:d1:aa:58:5d:3d:de:b6:0f:59: 58:6b:29:91:45:c5:02:e8:78:dd:1d:c3:0a:59:e7:9f:22:e0: cd:7f:16:18:19:1e:46:77:12:af:87:d0:80:91:72:97:ce:6e: d3:3e:86:af:d0:8e:15:1b:39:fb:f3:52:70:a0:56:ee:2a:45: 0f:49:6e:bd:11:ab:94:d0:d5:fb:31:f6:a8:35:5f:b9:b0:a0: 53:c2:bb:3d:23:08:a4:b7:ab:b0:8f:a3:1f:7a:27:b0:af:95: 34:6f:fc:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUxMjA0MjIxODIzWhcNMjUxMjExMjIxODIzWjAYMRYwFAYD VQQDEw02OTMyMDhiMC05YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+mo8/1CWD72LViu4NIOYEuvZumk14S89peext7ZbBlR0TXXbI5z8up0H/Le zo8/fox4+xmjoHrIK2G98dV0nnEbDvHioO9hDPPEDlDsZVsunps+S7me09f8+CLP j4khos0ImJdxhBCqcuPMCWgUAfxMbPepwhjVQAAWGM2SnQGmszyt/8Gt4ikZiNbR Eh9m0aeI3P+LY6Skh9IK3QchEPCvT6JCLSAIIE1VsvHW3fnsXGAvARLcBRPjX0Nk M7oE8wVgl855KSY6o+wK3DM9aOA+fMvvKNXPtCvBrxkohYvl+s43qTDEePktjNyB +LJKG5AG5qYnOEZi+94C6bg4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyM6++x OacrweBK75uNoAb9ymS4MB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa7Wfn2doLIABWxdPCP3CYJI0XZ30i4piR5Z6okM7mtD1kxqHIxpLb IW+/xpYjWQFCGxN9wBqQQnG2BIe1JOYJBETVGzjR9nR9zwVxOFpNmEBycXD2yZA/ d6yfvQ4ZYBbirVUjrdBE1dYXghV7MH7cqaS5F5iU/qWkCLbB8J38IVYaRjtoyKBL tvFBKPJ4ykbypphdpNDmgrTRqlhdPd62D1lYaymRRcUC6HjdHcMKWeefIuDNfxYY GR5GdxKvh9CAkXKXzm7TPoav0I4VGzn781JwoFbuKkUPSW69EauU0NX7MfaoNV+5 sKBTwrs9Iwikt6uwj6Mfeiewr5U0b/yi -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:33 2025 by rpki-client