This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: apjPqxS2VKbXXyRuF+vHSOjbi3SUep0d9d2Vla/lONU= Subject key identifier: 5E:2F:50:CB:FF:1E:8D:F9:99:DE:69:D7:48:F4:54:F7:90:4D:7B:F9 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 014D Signing time: Sat 27 Dec 2025 03:22:10 +0000 Manifest this update: Sat 27 Dec 2025 03:22:10 +0000 Manifest next update: Sat 03 Jan 2026 03:22:10 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: O3t/DEWId+RX23WmhehqXHGdlrXMV/q7V2ZpiBMko+M=) 2: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: fRP3NJ69rLlQTm+x/tKrEfvNNM+dik3rM5J3rzquHdo=) 3: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: v7IuFE0BzPTXRSJLbaCUBczf3498SLFTOxfRoorPtF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 03:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Dec 27 03:22:10 2025 GMT Not After : Jan 3 03:22:10 2026 GMT Subject: CN=694f50e2-1da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:00:28:ee:5f:ce:f7:bd:99:b8:8b:b5:19: 69:df:fa:a1:a5:da:2f:81:a2:e5:25:4c:34:6d:7f: 55:6d:5d:c8:76:ef:55:2d:32:16:6c:8d:c4:b5:f5: b5:8c:8e:4e:07:13:0e:d5:7b:99:6a:a4:e0:50:59: 25:a4:6b:3a:b9:12:2d:e3:bb:5d:a7:ed:71:2a:59: 6d:a8:80:5e:de:56:9b:ba:ae:e8:f9:75:ed:d3:bc: c3:a6:32:63:e0:3b:bb:8b:ca:1b:d6:a8:9e:e0:f2: 5a:5c:0f:54:33:11:aa:a4:c2:05:e9:41:34:1e:22: be:7b:0b:29:6e:0c:18:ba:92:33:a3:6c:7c:a3:9d: c0:f5:ab:46:ad:ce:95:9d:40:f0:c5:ad:bb:e7:d7: b7:61:08:45:f8:28:a4:cf:bb:57:c8:4b:6a:23:0c: 9e:f9:92:85:eb:4c:87:c3:f3:2d:ac:8f:a5:af:87: 6d:5c:9f:99:50:f0:1a:e0:60:4f:14:bd:8a:a8:46: f3:0d:8f:57:81:fa:99:04:34:59:4c:20:ad:77:2b: bc:e4:aa:c8:f3:df:ca:a0:72:1a:18:ba:e9:53:9c: 5e:04:02:3f:92:a3:6e:91:9f:e2:a4:00:8c:52:fe: 4d:1e:90:be:b5:03:c6:80:d7:cd:e4:08:d3:92:1e: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:50:CB:FF:1E:8D:F9:99:DE:69:D7:48:F4:54:F7:90:4D:7B:F9 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2f:f2:f0:ee:3e:da:e8:05:7c:24:a4:ed:18:c7:f3:67:4e: 31:6f:64:8e:a3:ce:a1:c4:25:28:f9:cf:3a:ee:09:65:17:e7: fe:f5:b7:f8:ae:a5:e4:b6:3b:69:bb:99:d8:8f:6c:5d:9e:d8: e5:34:5c:cc:80:e5:17:ef:1d:29:e9:1e:67:09:92:c1:b4:ca: 24:58:7e:2b:44:66:fd:4f:50:53:7a:47:20:02:80:0c:b8:39: ca:99:c5:6b:e5:d5:f4:2f:1f:6f:60:a5:ca:fa:44:e3:32:fa: b8:bf:52:bf:72:ce:a3:d3:99:b1:48:cb:1d:46:bf:e2:6e:08: 87:c4:19:df:5d:f3:44:8c:7c:01:79:04:a8:26:4a:7b:30:81: 67:50:03:db:aa:7e:e6:12:84:df:7d:68:f6:17:d4:31:4b:56: ec:68:df:86:54:21:ec:ed:a7:9f:b1:88:31:2f:6c:d1:72:a4: 89:ef:72:56:9c:4e:f7:b0:82:d4:0c:4b:78:ad:34:87:a5:ca: ee:77:a5:c8:cc:50:05:93:3c:b3:4e:30:be:ee:72:7e:69:cc: 5b:59:4e:b9:11:27:58:67:d9:27:50:12:a6:14:1d:69:f1:2b: ef:8a:6c:69:84:e8:92:c5:87:e3:40:63:ce:cf:4b:2d:64:94: 81:59:16:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUxMjI3MDMyMjEwWhcNMjYwMTAzMDMyMjEwWjAYMRYwFAYD VQQDDA02OTRmNTBlMi0xZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmecAKO5fzve9mbiLtRlp3/qhpdovgaLlJUw0bX9VbV3Idu9VLTIWbI3EtfW1 jI5OBxMO1XuZaqTgUFklpGs6uRIt47tdp+1xKlltqIBe3labuq7o+XXt07zDpjJj 4Du7i8ob1qie4PJaXA9UMxGqpMIF6UE0HiK+ewspbgwYupIzo2x8o53A9atGrc6V nUDwxa2759e3YQhF+Cikz7tXyEtqIwye+ZKF60yHw/MtrI+lr4dtXJ+ZUPAa4GBP FL2KqEbzDY9XgfqZBDRZTCCtdyu85KrI89/KoHIaGLrpU5xeBAI/kqNukZ/ipACM Uv5NHpC+tQPGgNfN5AjTkh53KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4vUMv/ Ho35md5p10j0VPeQTXv5MB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqL/Lw7j7a6AV8JKTtGMfzZ04xb2SOo86hxCUo+c867gllF+f+9bf4 rqXktjtpu5nYj2xdntjlNFzMgOUX7x0p6R5nCZLBtMokWH4rRGb9T1BTekcgAoAM uDnKmcVr5dX0Lx9vYKXK+kTjMvq4v1K/cs6j05mxSMsdRr/ibgiHxBnfXfNEjHwB eQSoJkp7MIFnUAPbqn7mEoTffWj2F9QxS1bsaN+GVCHs7aefsYgxL2zRcqSJ73JW nE73sILUDEt4rTSHpcrud6XIzFAFkzyzTjC+7nJ+acxbWU65ESdYZ9knUBKmFB1p 8SvvimxphOiSxYfjQGPOz0stZJSBWRZO -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:02 2025 by rpki-client