This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: fzVTkmlvfBUxW3xUDNRc9BiWy6vIi0MuSIxOkKXWcxE= Subject key identifier: 01:80:EE:61:FC:34:B5:1F:AB:B9:BE:B3:61:92:75:7C:76:6C:27:DC Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 0708 Signing time: Tue 30 Dec 2025 21:12:26 +0000 Manifest this update: Tue 30 Dec 2025 21:12:26 +0000 Manifest next update: Tue 06 Jan 2026 21:12:26 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: sGbDyUlIiyMndkNljeRg7ffePLmrYSVTbx8aSFxaSlg=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Dec 30 21:12:26 2025 GMT Not After : Jan 6 21:12:26 2026 GMT Subject: CN=6954403a-d564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b6:c7:67:92:a5:ee:b1:84:2f:96:4f:e6:f1: 50:b7:af:aa:a2:be:5b:05:5d:8b:da:88:29:e1:97: 6b:b4:a5:43:25:92:15:42:b2:19:84:21:9d:84:c3: 85:d5:a2:14:11:17:ce:63:1c:96:0f:5e:78:98:dd: 29:59:e7:78:bd:e9:4b:43:45:81:06:0e:1f:f8:cf: 7e:c8:f3:19:b9:24:16:18:be:21:a9:49:95:a2:d7: 69:26:7c:f2:8a:dd:b4:e5:7b:cb:bd:97:c6:96:b6: c3:c6:37:bf:ed:6c:46:0c:8b:3c:e3:29:55:43:02: 7e:d8:84:d9:df:e0:d6:85:ab:19:31:45:a8:7b:21: 6d:64:58:15:a5:9b:0b:a3:0e:5a:c3:c8:be:65:f8: 47:d6:36:e9:a2:3c:6f:b1:ce:4d:35:10:ed:9b:93: e6:b5:af:e4:7e:32:a6:5e:c8:13:91:18:4d:a9:c5: 74:48:68:97:ee:3e:56:52:23:76:12:af:d3:e9:76: 3f:23:74:91:fa:4c:32:d7:dd:8b:51:cc:02:2a:77: d5:29:d5:9b:13:50:88:0f:b4:62:8f:44:8b:7f:dd: 32:7e:a9:58:8a:84:e4:07:a6:da:53:71:29:75:46: 71:bc:74:fc:ba:dc:af:09:bd:09:7d:4d:00:5c:f6: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:80:EE:61:FC:34:B5:1F:AB:B9:BE:B3:61:92:75:7C:76:6C:27:DC X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ae:1e:56:83:45:87:f6:03:b7:49:0b:50:26:97:81:d7:ec: ab:45:6b:ee:ca:82:d9:3a:c3:2f:02:45:85:d8:20:12:e6:82: dc:4c:b7:79:37:de:2d:b8:ef:4b:ed:37:44:18:ac:b7:55:d8: 4b:30:01:c6:61:5f:70:1c:7a:78:24:04:f0:ad:29:18:75:4b: 4a:ba:0c:4f:06:e2:69:fc:1b:7e:0f:f9:92:c4:e3:da:66:35: 90:ce:52:5f:e4:fc:50:2d:80:7c:21:3d:0a:a7:4e:cc:c0:2a: 9b:b6:bd:0e:a0:ff:be:a3:97:2f:f7:d3:76:92:aa:a3:21:d3: 0d:43:d1:9b:8a:11:ec:17:37:79:a3:fa:b9:92:33:cd:8a:6e: a6:b4:02:9c:c8:16:b3:74:d8:dc:2b:ef:3f:78:c4:75:6b:31: b0:01:cd:3b:57:cf:5c:cb:e1:91:2b:20:6a:c8:55:36:ae:ff: 6c:3d:9d:c7:c2:32:bf:9d:7f:74:84:ce:72:21:ff:7f:ee:b9: 5e:d5:38:41:81:99:3c:99:40:2e:02:06:a0:56:07:7d:a7:d8: d1:cb:89:e4:ba:46:d1:3d:78:56:28:23:86:a1:fd:18:0c:ff: ed:1c:1b:64:e1:eb:19:55:8d:eb:75:43:3c:fc:19:96:e3:44: 83:08:68:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUxMjMwMjExMjI2WhcNMjYwMTA2MjExMjI2WjAYMRYwFAYD VQQDDA02OTU0NDAzYS1kNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rbHZ5Kl7rGEL5ZP5vFQt6+qor5bBV2L2ogp4ZdrtKVDJZIVQrIZhCGdhMOF 1aIUERfOYxyWD154mN0pWed4velLQ0WBBg4f+M9+yPMZuSQWGL4hqUmVotdpJnzy it205XvLvZfGlrbDxje/7WxGDIs84ylVQwJ+2ITZ3+DWhasZMUWoeyFtZFgVpZsL ow5aw8i+ZfhH1jbpojxvsc5NNRDtm5Pmta/kfjKmXsgTkRhNqcV0SGiX7j5WUiN2 Eq/T6XY/I3SR+kwy192LUcwCKnfVKdWbE1CID7Rij0SLf90yfqlYioTkB6baU3Ep dUZxvHT8utyvCb0JfU0AXPZzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGA7mH8 NLUfq7m+s2GSdXx2bCfcMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVrh5Wg0WH9gO3SQtQJpeB1+yrRWvuyoLZOsMvAkWF2CAS5oLcTLd5 N94tuO9L7TdEGKy3VdhLMAHGYV9wHHp4JATwrSkYdUtKugxPBuJp/Bt+D/mSxOPa ZjWQzlJf5PxQLYB8IT0Kp07MwCqbtr0OoP++o5cv99N2kqqjIdMNQ9GbihHsFzd5 o/q5kjPNim6mtAKcyBazdNjcK+8/eMR1azGwAc07V89cy+GRKyBqyFU2rv9sPZ3H wjK/nX90hM5yIf9/7rle1ThBgZk8mUAuAgagVgd9p9jRy4nkukbRPXhWKCOGof0Y DP/tHBtk4esZVY3rdUM8/BmW40SDCGjw -----END CERTIFICATE-----Generated at Wed Dec 31 02:15:03 2025 by rpki-client