This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: mfB7mL5ExwhFdTZHnU3DPdjoVuzGItVT1+rOjlm8cjE= Subject key identifier: 96:1A:73:E2:E0:EC:66:76:9F:9F:FD:9B:CF:E1:39:49:F4:66:9A:EA Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: AA Signing time: Wed 31 Dec 2025 05:13:30 +0000 Manifest this update: Wed 31 Dec 2025 05:13:30 +0000 Manifest next update: Wed 07 Jan 2026 05:13:30 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: 8K5CYc3csEX3QFfXKUA6OevycCHAEHfEpUsp1PnKp3U=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: mx4Ct5Tnd5YkFq5qkT60Yq1dgh6KZfYC5nrKRxnyy28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 05:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Dec 31 05:13:30 2025 GMT Not After : Jan 7 05:13:30 2026 GMT Subject: CN=6954b0fa-9494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:41:f3:5f:9f:71:ba:4d:4f:be:a6:77:70: eb:74:2c:f5:84:2c:de:92:e1:5d:4f:eb:2e:11:c4: 6e:7a:3e:27:0b:cc:3c:b1:f1:bd:82:3b:0d:04:15: 64:7c:81:86:8d:da:51:f0:39:2c:9c:c2:d4:8c:35: 7d:25:66:b7:b5:04:da:53:71:f5:a1:9a:e7:c5:6a: 91:b7:f1:29:7c:16:1d:97:1c:77:fd:9f:62:80:a9: ab:1e:1f:7f:f0:6a:7d:86:25:40:27:c5:c0:2e:85: 53:8f:f8:de:52:69:37:99:57:4e:f4:49:7f:24:95: 15:fb:c9:8a:a9:87:0b:c4:a9:68:f9:43:37:9f:43: 22:8b:c3:1f:79:59:3f:c2:51:6e:99:e7:1c:9b:e8: c7:17:97:b2:72:9b:dd:ca:60:33:0f:27:92:d2:58: 70:c0:2a:58:d3:c5:09:4f:10:ae:79:92:8c:a6:49: c5:22:96:dd:5e:3c:b8:72:29:34:34:3f:bb:27:fc: 9a:37:9e:87:d7:70:2f:f4:11:02:1f:83:a7:5f:78: ca:98:0d:0b:df:25:1f:e8:a3:96:7e:d9:47:e4:55: 97:f1:75:13:07:4e:77:4a:48:31:16:d3:29:41:ba: be:f6:76:25:1d:ec:49:f7:5d:71:c5:7f:25:3e:27: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1A:73:E2:E0:EC:66:76:9F:9F:FD:9B:CF:E1:39:49:F4:66:9A:EA X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fb:09:50:14:8c:4d:a9:83:a6:d9:af:e2:db:e7:69:4d:37: 72:ff:e9:fd:86:16:2e:70:b6:2c:f9:16:2c:00:f2:89:7a:81: 33:37:8c:03:de:a7:96:41:36:8f:68:40:b8:b0:98:6c:b6:e3: ef:b7:ef:ac:e6:aa:14:14:5f:44:af:19:ff:03:ba:7d:19:c6: c3:2b:4b:3d:99:a3:79:8b:15:fa:91:83:09:fd:5c:32:ad:c7: ec:f3:19:09:c4:33:41:1b:a1:6b:1c:25:13:1b:3a:6d:b5:ed: 9d:15:da:3f:1b:75:99:85:d0:58:bd:2c:0f:85:de:2b:3a:72: bd:57:91:e4:9d:0a:0e:04:29:8e:32:53:70:43:f7:21:fc:d9: 5b:da:8a:54:6d:03:e1:30:a9:48:fb:7e:07:55:48:12:0b:94: fe:4a:b9:1a:2c:16:96:8f:c5:46:1f:f5:7e:b7:f6:1a:fd:67: c9:a4:5f:e1:ab:e1:19:d2:1c:81:7a:01:68:b5:78:f5:f2:5b: 1a:31:08:7d:0d:0a:54:35:72:58:8d:40:4a:55:f3:ac:cd:aa: 3d:1a:85:23:68:6e:8c:a8:60:16:7b:9c:3c:ac:8e:de:df:21: 40:11:9d:3a:f6:4a:4f:d6:a6:29:47:64:11:04:8a:16:2a:f7: 53:db:d3:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjUxMjMxMDUxMzMwWhcNMjYwMTA3MDUxMzMwWjAYMRYwFAYD VQQDDA02OTU0YjBmYS05NDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8ZB81+fcbpNT76md3DrdCz1hCzekuFdT+suEcRuej4nC8w8sfG9gjsNBBVk fIGGjdpR8DksnMLUjDV9JWa3tQTaU3H1oZrnxWqRt/EpfBYdlxx3/Z9igKmrHh9/ 8Gp9hiVAJ8XALoVTj/jeUmk3mVdO9El/JJUV+8mKqYcLxKlo+UM3n0Mii8MfeVk/ wlFumeccm+jHF5eycpvdymAzDyeS0lhwwCpY08UJTxCueZKMpknFIpbdXjy4cik0 ND+7J/yaN56H13Av9BECH4OnX3jKmA0L3yUf6KOWftlH5FWX8XUTB053SkgxFtMp Qbq+9nYlHexJ911xxX8lPifgRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYac+Lg 7GZ2n5/9m8/hOUn0ZprqMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp+wlQFIxNqYOm2a/i2+dpTTdy/+n9hhYucLYs+RYsAPKJeoEzN4wD 3qeWQTaPaEC4sJhstuPvt++s5qoUFF9Erxn/A7p9GcbDK0s9maN5ixX6kYMJ/Vwy rcfs8xkJxDNBG6FrHCUTGzptte2dFdo/G3WZhdBYvSwPhd4rOnK9V5HknQoOBCmO MlNwQ/ch/Nlb2opUbQPhMKlI+34HVUgSC5T+SrkaLBaWj8VGH/V+t/Ya/WfJpF/h q+EZ0hyBegFotXj18lsaMQh9DQpUNXJYjUBKVfOszao9GoUjaG6MqGAWe5w8rI7e 3yFAEZ069kpP1qYpR2QRBIoWKvdT29P5 -----END CERTIFICATE-----Generated at Thu Jan 1 03:51:12 2026 by rpki-client