This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft File: piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json) Hash identifier: T6qtFhir2RbBwOS7dIBI6ntswMOCncy6OqSboV0QcIg= Subject key identifier: 3F:41:05:05:34:83:1A:0D:96:64:61:06:4B:DF:50:61:54:16:9A:F5 Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 Certificate issuer: /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft Manifest number: 07 Signing time: Fri 19 Dec 2025 06:59:58 +0000 Manifest this update: Fri 19 Dec 2025 06:59:58 +0000 Manifest next update: Fri 26 Dec 2025 06:59:58 +0000 Files and hashes: 1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: jLeVaY8sUqEh4o2OOrppKJRSffZphgRCUuFlT021fB4=) 2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: JplNXQO2Wx5ZVsUnY8QzEKP+B0R8iAE4R1iut1PwRdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4 Validity Not Before: Dec 19 06:59:58 2025 GMT Not After : Dec 26 06:59:58 2025 GMT Subject: CN=6944f7ee-9bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ee:9f:4f:54:5b:09:78:f3:92:57:bd:07:8a: c6:87:a7:43:52:23:37:fe:39:42:05:72:f4:ea:f0: 81:dd:5a:28:d7:28:31:da:ac:23:08:2a:79:a1:8a: 73:7e:d3:e2:50:bc:a4:c1:e3:54:1c:2f:75:46:62: c7:91:04:40:42:f4:94:99:9f:60:70:ed:c5:af:5e: 45:49:2f:91:83:93:6a:8c:f9:82:a4:c9:80:0e:68: 57:43:64:0d:5c:c7:20:18:d6:56:85:b2:16:77:75: 88:41:09:b7:9f:f3:37:66:0b:23:e2:a3:0a:ba:61: 9d:dc:d2:27:b7:c0:c0:4c:ef:a6:10:53:fc:2e:cf: 29:db:4c:51:8c:f5:44:b1:ac:a2:91:d7:cd:43:6b: 19:27:59:a9:62:8c:ec:8c:ee:0e:c1:a0:fd:d8:18: 56:39:a2:5c:5f:ef:99:53:a4:16:6e:50:c5:51:f1: d3:1e:c1:2f:e7:bb:ad:6a:63:90:8b:11:f1:7b:a1: e3:ef:92:84:be:17:5a:5e:55:0b:ea:75:30:21:e0: 86:65:6a:9b:97:98:fe:d9:c4:ab:73:51:a7:c8:a0: c8:5c:1b:4f:ba:9e:25:85:df:38:17:ce:36:86:fe: c4:d6:09:79:f4:54:ce:30:48:1e:7c:f2:cd:5c:85: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:41:05:05:34:83:1A:0D:96:64:61:06:4B:DF:50:61:54:16:9A:F5 X509v3 Authority Key Identifier: keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d6:95:67:a8:7a:bc:7c:41:cc:a8:2f:0c:0b:b6:50:15:99: 41:7f:86:18:2e:48:50:96:76:60:8f:10:f6:72:ed:71:71:43: 48:84:e0:3c:9f:95:28:6b:bc:3f:2c:ac:94:d7:24:97:5d:e5: 8d:7f:e6:54:ec:a2:a0:c0:3d:a0:27:da:62:55:dc:e4:f7:de: 39:9c:b1:b6:5c:d5:fe:d5:44:68:f3:ca:87:20:71:c3:19:bb: 70:a6:b5:23:73:e4:7c:48:41:3c:ab:b0:ee:68:f5:5e:9b:84: e5:4c:61:b0:3e:4e:00:16:08:ca:16:1b:0c:5e:20:50:85:4d: f9:d0:d9:21:49:22:71:53:17:c6:cf:a5:19:d7:98:8c:ee:b5: 45:28:e3:7b:0b:58:10:1d:c1:83:a5:14:ff:81:46:69:ec:48: 90:bf:d7:18:78:f5:84:e1:9e:79:d7:d7:b0:d5:b8:84:33:83: d8:33:de:24:6c:40:e8:93:d9:7a:f3:f8:bc:d4:5d:a5:74:59: f1:91:b1:ba:a0:ff:14:93:7d:bf:75:c2:c3:4f:bb:85:91:16: a2:b4:d8:e6:49:ef:bb:06:9c:43:1f:e1:3a:1e:a6:b9:37:0a: f1:cc:6b:c5:17:db:ef:13:01:bc:33:da:be:f7:ab:36:fc:97: ef:f0:71:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhCMzExMC8GA1UEBRMoQTYyMTZGQjFEOEJDNzg1NUY3NzA3MzVENDUxMjhBODdD NzEzQUZDNDAeFw0yNTEyMTkwNjU5NThaFw0yNTEyMjYwNjU5NThaMBgxFjAUBgNV BAMMDTY5NDRmN2VlLTliYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCH7p9PVFsJePOSV70HisaHp0NSIzf+OUIFcvTq8IHdWijXKDHarCMIKnmhinN+ 0+JQvKTB41QcL3VGYseRBEBC9JSZn2Bw7cWvXkVJL5GDk2qM+YKkyYAOaFdDZA1c xyAY1laFshZ3dYhBCbef8zdmCyPiowq6YZ3c0ie3wMBM76YQU/wuzynbTFGM9USx rKKR181DaxknWalijOyM7g7BoP3YGFY5olxf75lTpBZuUMVR8dMewS/nu61qY5CL EfF7oePvkoS+F1peVQvqdTAh4IZlapuXmP7ZxKtzUafIoMhcG0+6niWF3zgXzjaG /sTWCXn0VM4wSB588s1chZV7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP0EFBTSD Gg2WZGEGS99QYVQWmvUwHwYDVR0jBBgwFoAUpiFvsdi8eFX3cHNdRRKKh8cTr8Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEIzLzFFNTMwRkNDRDRC RTExRjBCRjlGRTIxNkM0RjlBRTAyL3BpRnZzZGk4ZUZYM2NITmRSUktLaDhjVHI4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGlGdnNkaThlRlgzY0hOZFJSS0toOGNUcjhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEIzLzFFNTMwRkNDRDRCRTExRjBCRjlGRTIxNkM0RjlBRTAyL3BpRnZzZGk4ZUZY M2NITmRSUktLaDhjVHI4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGzWlWeoerx8QcyoLwwLtlAVmUF/hhguSFCWdmCPEPZy7XFxQ0iE4Dyf lShrvD8srJTXJJdd5Y1/5lTsoqDAPaAn2mJV3OT33jmcsbZc1f7VRGjzyocgccMZ u3CmtSNz5HxIQTyrsO5o9V6bhOVMYbA+TgAWCMoWGwxeIFCFTfnQ2SFJInFTF8bP pRnXmIzutUUo43sLWBAdwYOlFP+BRmnsSJC/1xh49YThnnnX17DVuIQzg9gz3iRs QOiT2Xrz+LzUXaV0WfGRsbqg/xSTfb91wsNPu4WRFqK02OZJ77sGnEMf4Toeprk3 CvHMa8UX2+8TAbwz2r73qzb8l+/wcZE= -----END CERTIFICATE-----Generated at Sat Dec 20 00:37:29 2025 by rpki-client