This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: 4Xx376Z/CIEHUBnaOHiwL+czw4aujshIeuxrP1leaPQ= Subject key identifier: D5:6D:F4:7C:D3:54:46:A0:8E:A9:AF:CD:16:C3:1F:27:9C:90:08:5E Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 01D6 Signing time: Fri 19 Dec 2025 01:59:47 +0000 Manifest this update: Fri 19 Dec 2025 01:59:47 +0000 Manifest next update: Fri 26 Dec 2025 01:59:47 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: 6Or5hiGsGOcHw3naCuRL5SxHIq0rcw8+1nFDj9k/b9g=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: 6xfHA0xOfSf1bsWXYgETgvu/Qg0LpdZ4QedkQYTwxII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Dec 19 01:59:47 2025 GMT Not After : Dec 26 01:59:47 2025 GMT Subject: CN=6944b193-a5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:af:87:28:69:79:6f:72:ca:f0:7a:4b:e7: 50:2d:58:c6:15:2e:c2:06:ad:ad:65:d7:1e:ee:cc: dc:aa:7c:71:59:4a:a8:5f:22:b7:21:f5:ee:2f:68: fa:7a:02:3c:fa:93:a1:7b:0f:b9:24:e7:f9:c7:4e: 93:f7:0e:79:97:84:08:64:93:a2:4a:c6:91:fc:c3: b1:9d:11:81:f0:09:92:0f:97:be:a4:35:12:08:2b: de:0f:d6:51:df:3d:0e:a6:de:56:f5:62:98:e0:1c: 3b:07:51:b5:5f:48:37:bb:74:09:51:c6:56:5d:3c: f5:f5:57:3e:85:e8:c3:f5:bd:25:c4:8f:d2:62:82: c3:81:54:b3:14:c5:27:f5:e9:b8:a1:8c:7c:ae:da: b1:55:69:6f:a3:5d:b0:50:eb:8f:f9:11:66:f3:4a: b4:26:28:59:3b:30:91:58:7e:78:ea:29:77:e3:10: 57:8f:ab:08:a4:23:95:78:67:a9:a9:40:02:52:66: 4e:55:d8:d7:50:bf:99:e2:58:28:4a:b3:3c:6e:5b: ce:d7:74:a3:68:79:04:9b:b0:93:c3:09:39:2f:c4: ff:62:3f:d3:f0:0e:6c:1f:01:f4:ba:b2:4b:44:bb: ef:bc:b7:98:bc:73:2f:f9:f8:cb:eb:2a:04:29:36: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6D:F4:7C:D3:54:46:A0:8E:A9:AF:CD:16:C3:1F:27:9C:90:08:5E X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5d:c2:0b:2f:27:a2:4b:09:5d:e3:6b:f4:e1:a6:69:ae:27: f0:3a:d4:5f:05:fb:df:3e:6f:b2:5c:dd:c9:2d:16:05:2e:dd: 94:b6:98:4e:34:bb:8d:0f:45:22:8f:e4:fa:d0:0a:55:e7:08: 8e:62:4b:bc:00:15:86:ed:37:af:5c:6e:62:4b:e2:6e:94:d3: 9b:2c:61:1a:86:26:87:dd:94:f5:bc:58:95:f7:4d:e2:34:8d: 1d:18:8e:31:fa:74:73:0f:05:08:64:17:ef:96:3c:86:44:ad: e5:de:d8:17:35:85:f4:5d:91:28:13:91:80:75:96:a8:4c:5c: ba:1a:64:32:d6:79:79:fd:1f:1f:1a:8e:72:6e:ea:57:e7:90: 09:bb:4c:52:2d:aa:0f:32:40:22:7b:6d:1b:f5:5f:6c:b1:17: 7a:96:f6:ee:5a:d2:f3:dd:30:79:1b:81:b9:2d:77:19:84:12: 4f:fd:6d:f1:1b:16:58:d2:5d:36:f6:76:82:53:be:ff:f7:25: 84:9d:8d:82:2f:5e:5d:07:a6:ad:e2:98:bb:79:8d:7d:92:aa: ee:9d:ed:bd:85:4a:2e:df:89:19:95:a8:d8:56:d1:cb:9d:d4: b3:3c:2c:65:f4:c6:3e:cd:1f:ae:76:ff:4b:e4:64:d1:64:00: c1:5c:e8:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUxMjE5MDE1OTQ3WhcNMjUxMjI2MDE1OTQ3WjAYMRYwFAYD VQQDDA02OTQ0YjE5My1hNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYqvhyhpeW9yyvB6S+dQLVjGFS7CBq2tZdce7szcqnxxWUqoXyK3IfXuL2j6 egI8+pOhew+5JOf5x06T9w55l4QIZJOiSsaR/MOxnRGB8AmSD5e+pDUSCCveD9ZR 3z0Opt5W9WKY4Bw7B1G1X0g3u3QJUcZWXTz19Vc+hejD9b0lxI/SYoLDgVSzFMUn 9em4oYx8rtqxVWlvo12wUOuP+RFm80q0JihZOzCRWH546il34xBXj6sIpCOVeGep qUACUmZOVdjXUL+Z4lgoSrM8blvO13SjaHkEm7CTwwk5L8T/Yj/T8A5sHwH0urJL RLvvvLeYvHMv+fjL6yoEKTbFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVt9HzT VEagjqmvzRbDHyeckAheMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGXcILLyeiSwld42v04aZprifwOtRfBfvfPm+yXN3JLRYFLt2UtphO NLuND0Uij+T60ApV5wiOYku8ABWG7TevXG5iS+JulNObLGEahiaH3ZT1vFiV903i NI0dGI4x+nRzDwUIZBfvljyGRK3l3tgXNYX0XZEoE5GAdZaoTFy6GmQy1nl5/R8f Go5ybupX55AJu0xSLaoPMkAie20b9V9ssRd6lvbuWtLz3TB5G4G5LXcZhBJP/W3x GxZY0l029naCU77/9yWEnY2CL15dB6at4pi7eY19kqrune29hUou34kZlajYVtHL ndSzPCxl9MY+zR+udv9L5GTRZADBXOib -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:40 2025 by rpki-client