This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: 9hqeYmkkg1JleETSwTRflZH6oKd6mxQPbJxywMtkxa0= Subject key identifier: 2F:07:4C:9A:68:67:5C:05:87:33:FD:F3:F7:CF:66:AA:F4:6D:63:BF Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: 0F Signing time: Sun 07 Dec 2025 05:58:26 +0000 Manifest this update: Sun 07 Dec 2025 05:58:26 +0000 Manifest next update: Sun 14 Dec 2025 05:58:25 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: AgPjlmMkx2VcQjxiptH2L2YY/XGgMWUSRFyWANdGDPk=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: BkprVFwAt62ek1/osfcjd4iYpz4rBk8/YYmw+8qHsBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Dec 7 05:58:26 2025 GMT Not After : Dec 14 05:58:25 2025 GMT Subject: CN=69351782-9fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8c:0d:ee:a5:66:b2:6c:2d:28:99:1e:20:d5: aa:b0:0c:95:34:53:04:6e:78:64:ab:23:ee:58:6d: 7a:8e:1d:f1:ac:40:a8:9f:89:40:94:2a:9d:b1:0b: bf:9d:5c:c2:c7:48:f1:33:e4:c4:22:32:2a:5a:7f: d9:2e:6f:8a:07:39:3e:95:18:74:e9:9f:e2:1f:0c: 40:10:99:76:7b:56:db:b2:43:3b:59:a6:ae:c2:ca: 05:61:8c:61:7b:7e:0b:96:2b:e5:04:75:8c:19:91: 9c:da:06:f5:76:81:30:2f:3a:07:d9:e6:e0:e0:5e: 6d:28:e4:a5:12:11:78:00:fc:2d:cf:31:0f:fd:fb: 49:b3:1d:3e:1d:38:04:dd:e0:f5:62:6c:f0:0a:51: 22:e3:13:53:c0:f1:b3:49:a8:a6:4f:be:f7:93:f5: 0a:35:27:0d:10:86:bc:c6:65:ef:02:ae:d3:e9:41: d3:62:c7:f9:42:b9:37:45:5d:a3:fd:18:7b:c3:b7: 3c:26:f3:22:42:76:db:76:b0:6c:48:4d:b4:71:02: 7c:e3:9c:55:ae:37:7e:18:83:95:df:74:60:85:2d: 86:f9:67:f4:04:c0:27:13:b5:e2:71:fc:f2:a9:1b: df:ac:dc:06:cb:ba:0d:29:88:de:1c:a5:7e:82:cc: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:07:4C:9A:68:67:5C:05:87:33:FD:F3:F7:CF:66:AA:F4:6D:63:BF X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0f:6b:99:43:67:4a:7a:8c:14:0d:6b:61:75:8e:6c:a9:a5: 71:e8:c4:54:79:a5:5c:42:88:46:54:7f:6f:29:63:d9:16:b0: 16:32:94:c2:55:82:76:45:54:9b:ea:97:d1:36:0e:9f:91:40: bc:af:d9:3e:c3:dd:5f:81:6e:51:b1:6a:34:ec:10:df:72:06: 63:1c:5e:8c:cd:64:60:7e:01:ce:5e:37:81:15:6f:e0:c8:03: 4a:88:6a:f1:98:b0:b7:96:8a:29:d0:b3:1f:94:9f:ad:a3:df: 8b:3b:af:2a:d2:43:f6:86:d2:21:d9:9e:5c:b3:ee:04:13:a5: 95:12:16:14:b6:77:a2:a1:8f:4f:49:6b:d6:d8:0c:da:51:1a: f4:62:35:d6:93:81:80:bb:af:ea:9a:0c:ab:a7:0b:2c:c7:f5: 83:f7:4b:ac:02:47:7b:e9:20:a0:9e:6f:27:09:0f:1c:16:bd: f8:6e:e2:d5:80:f3:c3:10:c7:e7:21:c6:f8:b7:87:70:07:fa: 72:a9:20:b7:d2:72:e3:04:d3:73:6e:4a:9a:b7:2f:52:91:a5: 28:7e:74:d1:df:62:47:b3:09:b7:b9:d2:3c:05:14:f2:d2:57: d7:54:d9:75:05:8b:0f:5b:4b:bc:24:c5:3a:b4:f5:c6:f1:f2: 68:a9:99:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNTEyMDcwNTU4MjZaFw0yNTEyMTQwNTU4MjVaMBgxFjAUBgNV BAMTDTY5MzUxNzgyLTlmYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3jA3upWaybC0omR4g1aqwDJU0UwRueGSrI+5YbXqOHfGsQKifiUCUKp2xC7+d XMLHSPEz5MQiMipaf9kub4oHOT6VGHTpn+IfDEAQmXZ7VtuyQztZpq7CygVhjGF7 fguWK+UEdYwZkZzaBvV2gTAvOgfZ5uDgXm0o5KUSEXgA/C3PMQ/9+0mzHT4dOATd 4PVibPAKUSLjE1PA8bNJqKZPvveT9Qo1Jw0QhrzGZe8CrtPpQdNix/lCuTdFXaP9 GHvDtzwm8yJCdtt2sGxITbRxAnzjnFWuN34Yg5XfdGCFLYb5Z/QEwCcTteJx/PKp G9+s3AbLug0piN4cpX6CzPQVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULwdMmmhn XAWHM/3z989mqvRtY78wHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx STRCRV9KUFZocHYzWFFGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4Pa5lDZ0p6jBQNa2F1jmyppXHoxFR5pVxCiEZUf28pY9kWsBYylMJV gnZFVJvql9E2Dp+RQLyv2T7D3V+BblGxajTsEN9yBmMcXozNZGB+Ac5eN4EVb+DI A0qIavGYsLeWiinQsx+Un62j34s7ryrSQ/aG0iHZnlyz7gQTpZUSFhS2d6Khj09J a9bYDNpRGvRiNdaTgYC7r+qaDKunCyzH9YP3S6wCR3vpIKCebycJDxwWvfhu4tWA 88MQx+chxvi3h3AH+nKpILfScuME03NuSpq3L1KRpSh+dNHfYkezCbe50jwFFPLS V9dU2XUFiw9bS7wkxTq09cbx8mipmaw= -----END CERTIFICATE-----Generated at Mon Dec 8 09:35:27 2025 by rpki-client