This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: 8bwd34CQK65Te+C7gI4PYDEoyQkmCCql2SIUfpWbgA4= Subject key identifier: 11:98:EB:F3:EC:CA:04:94:1F:A7:4F:C5:D4:9D:FC:49:61:3D:B6:C3 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3505 Signing time: Sat 20 Dec 2025 14:19:02 +0000 Manifest this update: Sat 20 Dec 2025 14:19:01 +0000 Manifest next update: Sat 27 Dec 2025 14:19:01 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: SqYidH05ZQnUKWbE+iWZ1Nz4Gawzr0U0zs803swdZX0=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 4: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Dec 20 14:19:01 2025 GMT Not After : Dec 27 14:19:01 2025 GMT Subject: CN=6946b056-392c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c7:ca:0f:18:c9:fb:59:98:81:7d:3f:d7:54: ed:98:07:a0:74:33:38:97:99:bc:3f:d3:f2:ea:24: ae:37:ce:96:89:fe:ae:7d:d6:1e:3e:da:10:05:36: 9a:98:9e:92:bd:d8:ca:5a:9e:95:07:1b:a0:09:5e: 03:be:be:d7:18:2a:9b:35:2f:d7:34:b5:f2:3f:45: 14:b7:44:d3:55:e5:c1:3a:5e:1f:2f:d1:a9:95:49: 41:e0:f5:57:a0:95:69:3d:68:e3:89:66:ae:88:73: b1:aa:57:15:2a:1e:d2:a7:ab:4f:3b:3d:bd:77:5d: 22:5b:36:35:28:2e:ed:61:28:ab:af:e3:12:93:f2: db:a2:57:09:d3:12:e0:fd:d5:75:8b:96:10:73:1a: f1:95:c0:5a:0a:ef:3b:57:a5:43:8c:a9:5a:6a:df: 2d:e9:c5:bf:89:5f:48:86:0e:cb:59:af:84:dd:06: 10:d4:f3:cf:21:9b:c6:cb:97:cf:e5:39:57:d6:ac: cf:a2:fc:55:34:38:0f:ec:aa:33:94:e9:93:31:dc: 5b:df:de:cc:e5:23:16:13:0d:d4:08:31:e4:80:10: 0a:08:50:66:e4:7a:01:d3:ad:f7:99:86:cb:5e:a5: 47:b7:4b:dc:7e:ff:1a:1c:f8:7b:8d:6b:18:af:75: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:98:EB:F3:EC:CA:04:94:1F:A7:4F:C5:D4:9D:FC:49:61:3D:B6:C3 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6d:53:80:10:7b:3c:57:2f:ea:4c:1a:49:74:d6:de:b6:81: 2b:90:52:9d:1e:03:21:fc:13:ed:78:64:0f:1c:49:c7:db:12: 13:fa:8f:18:95:67:f4:ea:da:82:c5:23:4c:1c:d3:ec:19:5c: fc:84:22:1e:84:9a:b6:36:89:7b:14:50:a7:a0:34:28:7a:fd: ff:d7:03:b0:1c:29:82:5d:f1:18:ca:e0:b6:bf:1e:75:05:8d: dc:ba:35:dc:15:a3:44:a9:41:1f:15:93:9e:b8:1a:91:e2:ac: 82:4f:e1:1a:01:2a:1d:70:59:40:0d:4d:b1:cf:53:dd:64:af: 05:34:be:17:39:33:d5:c0:99:06:52:24:8e:63:2f:8e:2e:6f: fa:58:0d:8c:ce:18:b1:fb:33:64:d8:9c:dd:e3:d1:18:0b:54: 80:5f:6d:c1:51:d4:69:c3:0a:71:63:c8:60:64:c8:1e:8d:05: 98:f9:54:d2:75:35:36:d2:e5:e4:ed:46:7e:e6:08:75:bc:e6: 01:5d:ef:42:80:2b:49:7f:fe:a0:ac:15:69:fd:f2:07:c0:60: 04:dd:8d:da:e5:fe:1b:8a:d0:5c:79:6b:a4:ad:42:22:da:ca: 48:cf:a8:16:ec:c6:38:c5:be:51:05:4d:da:dd:dc:53:ea:7c: 8d:c7:78:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUxMjIwMTQxOTAxWhcNMjUxMjI3MTQxOTAxWjAYMRYwFAYD VQQDDA02OTQ2YjA1Ni0zOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MfKDxjJ+1mYgX0/11TtmAegdDM4l5m8P9Py6iSuN86Wif6ufdYePtoQBTaa mJ6SvdjKWp6VBxugCV4Dvr7XGCqbNS/XNLXyP0UUt0TTVeXBOl4fL9GplUlB4PVX oJVpPWjjiWauiHOxqlcVKh7Sp6tPOz29d10iWzY1KC7tYSirr+MSk/LbolcJ0xLg /dV1i5YQcxrxlcBaCu87V6VDjKlaat8t6cW/iV9Ihg7LWa+E3QYQ1PPPIZvGy5fP 5TlX1qzPovxVNDgP7KozlOmTMdxb397M5SMWEw3UCDHkgBAKCFBm5HoB0633mYbL XqVHt0vcfv8aHPh7jWsYr3WZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGY6/Ps ygSUH6dPxdSd/ElhPbbDMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdbVOAEHs8Vy/qTBpJdNbetoErkFKdHgMh/BPteGQPHEnH2xIT+o8Y lWf06tqCxSNMHNPsGVz8hCIehJq2Nol7FFCnoDQoev3/1wOwHCmCXfEYyuC2vx51 BY3cujXcFaNEqUEfFZOeuBqR4qyCT+EaASodcFlADU2xz1PdZK8FNL4XOTPVwJkG UiSOYy+OLm/6WA2Mzhix+zNk2Jzd49EYC1SAX23BUdRpwwpxY8hgZMgejQWY+VTS dTU20uXk7UZ+5gh1vOYBXe9CgCtJf/6grBVp/fIHwGAE3Y3a5f4bitBceWukrUIi 2spIz6gW7MY4xb5RBU3a3dxT6nyNx3hn -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:48 2025 by rpki-client