This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: /iPfclNCtTbP7qjTqLJeUhw/zpZSZr0de2Z3tXnMvYM= Subject key identifier: BF:42:D8:9A:0C:35:36:31:D6:B8:86:6E:72:64:F4:76:BB:34:6C:3A Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 0263 Signing time: Fri 19 Dec 2025 00:54:05 +0000 Manifest this update: Fri 19 Dec 2025 00:54:05 +0000 Manifest next update: Fri 26 Dec 2025 00:54:05 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: rhamkC7odLs86Aeibp4EDymvDt2DtsLVsuqe3hdl7+k=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: ihV351I75a0GrglkjwfF86QyIuiKEDF+ZafQFopCuwY=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: j7IXQ5Q2k8i6gD+YELiJ+TmWJ3Bz9udTMuVgoo7i3y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: Dec 19 00:54:05 2025 GMT Not After : Dec 26 00:54:05 2025 GMT Subject: CN=6944a22d-b7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:84:38:df:38:e1:a0:36:c2:2f:35:34:9e: f5:cc:62:74:fa:70:f7:48:e1:26:6c:36:bf:3f:46: e2:d0:6e:fd:f2:85:1b:6b:ea:20:4d:ea:89:80:6f: 5a:bf:8e:3b:c8:6c:f1:05:89:48:89:a1:0d:a4:34: 41:38:cf:13:2e:5b:49:5c:3f:73:85:dc:e0:c9:99: e7:a9:19:31:da:eb:24:2b:ae:d4:83:e1:07:ee:df: 0e:05:1d:ac:e3:06:16:b5:b2:c9:e7:a8:69:32:74: 28:6d:4b:7d:da:94:e9:b1:44:93:de:f1:4c:a5:5a: dd:34:d1:65:02:f7:27:7c:5a:62:ea:e1:d3:d3:03: 2b:05:c8:7d:2c:39:72:a0:de:6e:2e:55:83:6f:22: ad:fe:2a:76:fa:85:34:d2:7a:bb:0c:eb:73:8e:c8: d4:55:86:5d:35:82:c6:8c:7f:33:f3:f1:49:98:95: 04:02:11:0a:8c:fa:c2:bf:b4:ee:c1:c5:ed:e7:3e: d3:48:4c:1d:4c:dd:34:85:8d:0b:cc:58:bc:65:d1: fb:b3:76:98:a8:72:c7:d7:b3:a0:a0:7c:33:7e:69: 09:77:17:c8:9a:ba:f9:8c:d2:86:82:bf:d1:c9:30: 0f:19:ec:b5:ce:eb:e4:d3:71:a7:3f:c5:b4:0a:01: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:42:D8:9A:0C:35:36:31:D6:B8:86:6E:72:64:F4:76:BB:34:6C:3A X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9a:78:cf:5e:6a:4f:41:0d:57:28:ce:4a:97:d8:88:2b:ff: f7:8b:69:5c:16:3b:6c:e2:99:eb:5d:4b:77:9d:a9:61:09:99: de:6a:34:5d:bc:75:b6:7a:74:d8:79:5a:6b:25:bb:60:69:4b: 69:7c:e7:f1:e5:60:f9:c3:35:0a:7a:24:2d:48:a0:09:3e:f7: eb:bb:c0:1a:0d:2d:01:0d:80:d3:c4:9f:b5:c1:cb:b9:37:39: c2:5a:89:23:6d:c9:06:a0:39:17:33:52:48:8c:71:93:36:85: 83:15:51:11:ab:55:50:4d:83:68:b5:be:1a:2d:88:e4:69:a7: 02:1f:ba:cf:d6:5f:c6:d9:93:c0:b1:d6:8e:79:53:85:72:98: 55:f5:2d:02:ae:01:5d:97:ee:32:c0:95:1e:c0:93:86:8b:d2: 6b:18:85:96:6f:e5:ac:da:c2:52:33:a2:e6:ce:fb:41:d2:d2: 6b:1a:6e:a9:5b:e2:4d:a6:22:00:74:7b:36:09:5b:23:72:7d: 79:af:80:3a:a6:24:4c:3d:08:b6:98:47:90:5d:45:28:ff:48: 77:c1:55:91:ef:45:86:fd:01:ac:e1:26:bf:28:33:88:76:64: 7c:63:2e:0a:d3:6e:93:e9:28:cf:5e:93:e2:22:68:af:56:fd: 31:02:95:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjUxMjE5MDA1NDA1WhcNMjUxMjI2MDA1NDA1WjAYMRYwFAYD VQQDDA02OTQ0YTIyZC1iN2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv02EON844aA2wi81NJ71zGJ0+nD3SOEmbDa/P0bi0G798oUba+ogTeqJgG9a v447yGzxBYlIiaENpDRBOM8TLltJXD9zhdzgyZnnqRkx2uskK67Ug+EH7t8OBR2s 4wYWtbLJ56hpMnQobUt92pTpsUST3vFMpVrdNNFlAvcnfFpi6uHT0wMrBch9LDly oN5uLlWDbyKt/ip2+oU00nq7DOtzjsjUVYZdNYLGjH8z8/FJmJUEAhEKjPrCv7Tu wcXt5z7TSEwdTN00hY0LzFi8ZdH7s3aYqHLH17OgoHwzfmkJdxfImrr5jNKGgr/R yTAPGey1zuvk03GnP8W0CgFBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9C2JoM NTYx1riGbnJk9Ha7NGw6MB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1mnjPXmpPQQ1XKM5Kl9iIK//3i2lcFjts4pnrXUt3nalhCZneajRd vHW2enTYeVprJbtgaUtpfOfx5WD5wzUKeiQtSKAJPvfru8AaDS0BDYDTxJ+1wcu5 NznCWokjbckGoDkXM1JIjHGTNoWDFVERq1VQTYNotb4aLYjkaacCH7rP1l/G2ZPA sdaOeVOFcphV9S0CrgFdl+4ywJUewJOGi9JrGIWWb+Ws2sJSM6LmzvtB0tJrGm6p W+JNpiIAdHs2CVsjcn15r4A6piRMPQi2mEeQXUUo/0h3wVWR70WG/QGs4Sa/KDOI dmR8Yy4K026T6SjPXpPiImivVv0xApWi -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:20 2025 by rpki-client