This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: mjHztM3Mt2W7Dw9EYO5kqD3uSK0UWlyQL86lKIHfIwM= Subject key identifier: 3C:C7:D0:F9:63:F0:DB:B9:59:6E:EC:EB:E0:6D:55:69:F6:84:18:91 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 356F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 350B Signing time: Wed 31 Dec 2025 14:18:47 +0000 Manifest this update: Wed 31 Dec 2025 14:18:47 +0000 Manifest next update: Wed 07 Jan 2026 14:18:47 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: sACQQcH32fe7lRl8xFZdgO2TRecgTNZeXwWVRTnR9GU=) 2: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 4: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) 5: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 6: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 14:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13679 (0x356f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Dec 31 14:18:47 2025 GMT Not After : Jan 7 14:18:47 2026 GMT Subject: CN=695530c7-d98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:b7:8e:83:fe:08:e1:01:81:83:b8:98:d6: ed:cc:21:ba:d2:83:bf:9a:cd:2c:a1:f3:a5:2d:1f: 03:f5:e3:2f:59:52:71:79:69:c0:93:be:96:77:6a: 29:57:ae:a0:9f:5c:65:56:02:7c:92:a2:83:49:c7: ba:d8:93:59:a9:91:0b:16:7c:b3:52:01:13:29:2f: 5d:e9:79:af:d9:c8:f6:2f:9b:55:90:da:b9:d6:92: 5c:f2:36:f7:27:77:51:1f:57:28:98:9b:38:c5:63: 14:c2:e4:33:93:1d:aa:fb:84:2d:04:62:eb:30:8c: d1:40:26:9d:4a:65:40:55:09:64:c5:21:f7:44:06: 8c:b5:f5:b6:f8:54:6c:ef:23:db:80:a7:4f:87:36: a4:2a:6c:8f:94:6c:c5:98:5b:4d:f3:ac:0e:90:d0: 34:42:44:db:c1:d6:99:7e:02:8e:c1:54:60:9c:82: 0c:0c:83:31:37:05:ff:41:00:9c:c9:5a:97:67:34: 08:cb:ae:4b:62:c3:e7:ff:56:54:e3:49:6f:8d:23: a2:d8:af:27:9f:1c:32:8b:dd:a7:9a:5c:f1:4a:dc: ff:9a:ab:d5:a9:fa:ce:c0:88:74:38:d2:5b:81:bc: 77:a1:64:82:83:cb:0b:b8:c5:ca:4a:26:a2:57:08: 31:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C7:D0:F9:63:F0:DB:B9:59:6E:EC:EB:E0:6D:55:69:F6:84:18:91 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:7e:9f:ce:94:0a:54:6e:d5:53:1e:a6:ad:f8:97:c6:3f:6a: 8c:97:36:e1:45:99:9b:7b:34:56:d3:e0:62:75:24:8d:9c:a6: 7b:14:64:7e:79:98:ba:32:18:5d:c1:d4:6e:b7:f0:72:24:c0: b0:35:a9:5d:72:c9:49:f9:f9:c6:28:31:4d:7d:77:7b:94:f6: 27:39:38:7a:db:11:dc:ae:72:2a:5d:72:ab:ae:2f:27:b0:72: de:c6:89:e1:d8:e1:8a:6d:d2:97:e3:c1:84:8f:a9:ed:a7:5c: 7d:00:a4:6f:8b:c6:e3:43:ad:1d:4e:31:7f:a6:21:b1:80:66: fc:24:e0:92:38:ba:9c:60:5a:ce:e5:ce:bd:17:dd:8a:9b:20: d1:52:bb:bb:34:57:26:0a:84:ce:b5:ab:6d:49:a3:f2:f5:d2: 2c:8a:49:38:2f:fe:b3:cd:37:c4:97:08:15:2b:82:89:ca:dd: c4:6e:48:59:90:9c:7b:47:6c:73:df:01:d2:5c:2a:49:5c:12: e5:3b:86:c0:52:b9:7a:be:45:aa:ca:70:b6:78:b4:cf:75:51: e1:93:65:e7:46:e8:eb:92:cb:0e:e8:c6:e6:00:38:96:a8:f5: 3a:ca:6c:34:b2:99:9f:5b:a9:89:fa:fb:fd:ee:29:e0:20:4b: c4:43:52:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUxMjMxMTQxODQ3WhcNMjYwMTA3MTQxODQ3WjAYMRYwFAYD VQQDDA02OTU1MzBjNy1kOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeW3joP+COEBgYO4mNbtzCG60oO/ms0sofOlLR8D9eMvWVJxeWnAk76Wd2op V66gn1xlVgJ8kqKDSce62JNZqZELFnyzUgETKS9d6Xmv2cj2L5tVkNq51pJc8jb3 J3dRH1comJs4xWMUwuQzkx2q+4QtBGLrMIzRQCadSmVAVQlkxSH3RAaMtfW2+FRs 7yPbgKdPhzakKmyPlGzFmFtN86wOkNA0QkTbwdaZfgKOwVRgnIIMDIMxNwX/QQCc yVqXZzQIy65LYsPn/1ZU40lvjSOi2K8nnxwyi92nmlzxStz/mqvVqfrOwIh0ONJb gbx3oWSCg8sLuMXKSiaiVwgxTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzH0Plj 8Nu5WW7s6+BtVWn2hBiRMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzfp/OlApUbtVTHqat+JfGP2qMlzbhRZmbezRW0+BidSSNnKZ7FGR+ eZi6MhhdwdRut/ByJMCwNaldcslJ+fnGKDFNfXd7lPYnOTh62xHcrnIqXXKrri8n sHLexonh2OGKbdKX48GEj6ntp1x9AKRvi8bjQ60dTjF/piGxgGb8JOCSOLqcYFrO 5c69F92KmyDRUru7NFcmCoTOtattSaPy9dIsikk4L/6zzTfElwgVK4KJyt3EbkhZ kJx7R2xz3wHSXCpJXBLlO4bAUrl6vkWqynC2eLTPdVHhk2XnRujrkssO6MbmADiW qPU6ymw0spmfW6mJ+vv97ingIEvEQ1Lf -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:02 2026 by rpki-client