This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: BjQJqpYXAVqCfHr2nRvLxlMuoHsbMXo8A8dDgbusBrI= Subject key identifier: 9D:6F:C4:27:C6:1B:5D:F5:B7:66:96:9B:12:30:EF:D0:D2:C6:81:EC Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0D60 Signing time: Mon 22 Dec 2025 17:37:26 +0000 Manifest this update: Mon 22 Dec 2025 17:37:26 +0000 Manifest next update: Mon 29 Dec 2025 17:37:26 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: aSIVM074Ap+d+dMLCFRMOSbWBhcHaj44ZgcRaq79dmo=) 2: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=) 3: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: 6tESd18bNlTp7MTJWPASDnQ/QZ789nFYaqEj8964Wuk=) 4: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: EPhvpVKPmBr1gw4zNjYoBtmyt2pNt1yo4gY/5g2PubM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Dec 22 17:37:26 2025 GMT Not After : Dec 29 17:37:26 2025 GMT Subject: CN=694981d6-0280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:e6:0e:79:b2:c7:4c:99:9f:3e:7f:f1:3e: 0e:89:f1:12:e4:15:77:92:c8:e9:20:f1:84:81:fb: 75:c5:f1:62:cb:29:19:10:08:89:13:7e:3f:ec:7d: 1d:c8:c8:2e:b4:fc:2d:45:db:f4:86:c3:63:03:96: be:1a:0b:8d:fb:63:dd:f9:48:85:b6:2a:61:c7:e2: cc:a1:27:a7:ad:5a:7b:c5:8e:9d:53:2a:4c:05:87: 38:85:47:9c:aa:b2:d3:53:e3:25:c9:7e:22:ae:8e: 5e:11:9a:70:68:96:d0:4a:d3:8b:6f:02:7b:e2:20: 53:c1:81:5c:6b:dd:df:63:ed:75:90:3b:f1:7a:e8: 04:06:5c:51:16:59:ea:23:09:a3:f2:79:c2:cc:d6: 9a:4c:0b:af:1e:0d:32:e1:3f:53:0d:2d:55:3c:fe: ad:88:37:2b:45:88:52:b0:1d:ea:57:96:dc:c6:3d: 49:2c:c2:fe:f0:6c:77:bf:c6:32:46:89:db:e4:39: 3b:a5:70:fc:d5:4b:78:40:28:38:0d:02:ce:cb:33: fb:47:f0:20:c7:20:7b:88:39:7e:4a:a9:6e:f9:01: 60:e4:1b:5a:4a:77:28:52:b9:bc:bc:f7:8e:ba:46: 51:02:93:8f:09:e0:b8:fe:bc:c2:69:2c:68:8d:49: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6F:C4:27:C6:1B:5D:F5:B7:66:96:9B:12:30:EF:D0:D2:C6:81:EC X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:53:e8:ef:1d:5f:71:0a:72:8e:8a:cb:88:8e:90:5f:e9:d2: 10:c3:19:66:5d:fe:77:a1:f2:88:25:5f:5e:fa:75:4e:62:53: 9b:d2:41:58:c6:e6:74:b5:a5:52:85:f8:a1:c3:34:29:f5:9f: 32:54:50:43:83:b0:ba:a7:d4:4b:ac:0c:bb:30:6d:12:53:d0: d0:de:1b:5e:54:5c:43:81:e6:97:34:4c:46:77:14:77:3f:99: aa:45:a2:d3:84:29:03:15:bc:5c:07:ce:d2:54:e8:80:81:02: f3:73:c9:53:84:e6:0d:b4:23:02:fe:d8:c6:18:04:76:52:85: e0:7e:37:f5:dc:ea:de:3f:06:94:ab:d4:e2:5a:ea:3c:f7:bf: 87:84:bc:49:e3:df:9a:23:7d:cc:72:ef:e0:b8:9d:e4:32:5c: 90:a1:de:44:2d:60:3f:47:90:2e:b9:d2:5a:27:52:75:06:c3: 2a:31:2a:14:12:5b:04:23:96:94:d8:1f:25:00:84:0b:b1:3c: 1f:e1:ef:64:a4:a1:f6:2f:96:e4:9f:95:df:86:a8:b4:05:7a: 4d:2c:39:4c:18:08:a9:ed:27:a5:16:1d:0e:1b:2c:91:db:f5: a7:e9:c2:9d:af:37:b7:e6:b7:61:c5:e0:48:3d:e8:0c:27:14: ce:bf:fb:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjUxMjIyMTczNzI2WhcNMjUxMjI5MTczNzI2WjAYMRYwFAYD VQQDDA02OTQ5ODFkNi0wMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu73mDnmyx0yZnz5/8T4OifES5BV3ksjpIPGEgft1xfFiyykZEAiJE34/7H0d yMgutPwtRdv0hsNjA5a+GguN+2Pd+UiFtiphx+LMoSenrVp7xY6dUypMBYc4hUec qrLTU+MlyX4iro5eEZpwaJbQStOLbwJ74iBTwYFca93fY+11kDvxeugEBlxRFlnq Iwmj8nnCzNaaTAuvHg0y4T9TDS1VPP6tiDcrRYhSsB3qV5bcxj1JLML+8Gx3v8Yy Ronb5Dk7pXD81Ut4QCg4DQLOyzP7R/AgxyB7iDl+Sqlu+QFg5BtaSncoUrm8vPeO ukZRApOPCeC4/rzCaSxojUlJ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1vxCfG G131t2aWmxIw79DSxoHsMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIU+jvHV9xCnKOisuIjpBf6dIQwxlmXf53ofKIJV9e+nVOYlOb0kFY xuZ0taVShfihwzQp9Z8yVFBDg7C6p9RLrAy7MG0SU9DQ3hteVFxDgeaXNExGdxR3 P5mqRaLThCkDFbxcB87SVOiAgQLzc8lThOYNtCMC/tjGGAR2UoXgfjf13OrePwaU q9TiWuo897+HhLxJ49+aI33Mcu/guJ3kMlyQod5ELWA/R5AuudJaJ1J1BsMqMSoU ElsEI5aU2B8lAIQLsTwf4e9kpKH2L5bkn5Xfhqi0BXpNLDlMGAip7SelFh0OGyyR 2/Wn6cKdrze35rdhxeBIPegMJxTOv/u3 -----END CERTIFICATE-----Generated at Wed Dec 24 13:12:03 2025 by rpki-client