This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: QFQoXPdN0fDM7WAIVyMp49ONYJYjsu50WTvd9di0U+Q= Subject key identifier: 3F:C2:56:F4:37:30:C6:EB:A0:54:2F:13:68:FE:25:A1:BD:53:DC:E2 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: CC Signing time: Fri 19 Dec 2025 04:53:17 +0000 Manifest this update: Fri 19 Dec 2025 04:53:16 +0000 Manifest next update: Fri 26 Dec 2025 04:53:16 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: weM/2veAhetd+hl7mlNb0ggoM3CgrrjE5Hgcr87QRfU=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: Vl4anvJxGj00QWX5m+Dlfx86DkUFERQcopj8hiwYg24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Dec 19 04:53:16 2025 GMT Not After : Dec 26 04:53:16 2025 GMT Subject: CN=6944da3d-60ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:cf:38:b6:43:d3:bc:7f:c8:ee:23:08:f8: bb:9d:5a:e8:9c:5b:5e:88:d2:8f:44:f2:fe:43:aa: 10:3d:09:9e:76:a1:a3:db:b4:30:3d:eb:7d:3a:db: 00:20:d8:3a:6a:fd:cc:27:27:24:8b:33:cf:ee:8a: d9:5f:ea:9c:9a:d9:bf:b7:b8:3c:32:af:14:91:f4: 13:ed:5f:df:50:db:84:f3:99:6b:b3:06:0a:c5:54: 6c:f5:09:c0:01:eb:8a:89:10:33:2f:6e:b3:f2:ce: a8:cf:2e:76:44:58:a5:c0:51:80:07:bd:73:c3:3a: 2a:34:14:59:70:a2:e1:55:7f:db:6d:a7:12:3c:7a: c6:5a:8b:cb:cb:a2:aa:c5:d0:ec:93:02:65:0b:d0: 98:fc:85:1d:f1:19:af:44:b5:5c:86:1d:6e:9c:42: 37:74:4b:d7:71:e9:46:86:b7:fc:df:bb:fb:b7:2b: da:f8:30:1d:99:d7:a6:41:08:81:80:5c:7b:54:80: 7c:2b:ab:19:4d:55:04:d7:c0:9e:ca:08:10:73:c1: 82:43:06:b5:24:3f:f5:29:54:cc:e2:5f:3d:8b:f4: fe:10:f4:72:ba:17:23:29:d7:1b:bb:61:64:b7:f6: 66:36:f9:9f:69:db:fe:ab:0c:76:d4:14:5d:f7:1d: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C2:56:F4:37:30:C6:EB:A0:54:2F:13:68:FE:25:A1:BD:53:DC:E2 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ef:34:2b:0b:4f:04:1c:ad:a8:62:2b:b0:88:98:5e:50:0f: 26:86:4f:89:0e:fb:7e:6b:5b:4b:bf:c1:da:06:da:7e:80:81: 67:9e:68:1e:cd:10:c9:94:b8:2a:ed:82:bf:fe:5a:99:64:59: e0:59:d4:f0:88:d5:7e:85:f0:1d:32:39:68:6c:53:25:1c:ad: 89:b7:95:54:b9:d6:60:b9:d3:e5:f5:c9:57:e6:bb:c7:00:b0: b7:16:75:bb:d1:3d:da:ba:1b:3d:e7:af:98:e9:39:62:71:b7: 79:7b:fa:cd:d9:1d:96:71:16:cc:92:0b:eb:c3:b8:22:7f:cd: bd:fe:d8:b2:b8:86:f9:0e:53:0b:a8:4d:e1:a8:93:5d:73:70: 36:5f:e4:cd:54:e5:06:93:43:8f:83:24:77:ff:1d:e7:06:da: 23:83:ac:70:ed:a9:43:af:79:7a:cd:fb:88:53:b8:a3:cb:30: 26:a4:0d:df:3c:ac:00:80:38:be:2c:b1:c6:27:f2:81:7d:89: 5c:b1:6f:1b:73:91:18:39:d4:1a:47:ee:79:a7:a7:e5:79:2b: cc:b4:6f:fc:e3:5e:f3:ec:43:d2:86:8a:d0:54:42:ca:d2:f0: ae:3e:85:85:75:cc:ff:29:c6:b9:ac:c3:0c:2b:6e:d5:01:84: 84:11:3d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKEYwNDkyOUVGNzQzQzU0QzA4QjQ1RTE5Q0ZDNTFCRjJB QTU1OURBQTEwHhcNMjUxMjE5MDQ1MzE2WhcNMjUxMjI2MDQ1MzE2WjAYMRYwFAYD VQQDDA02OTQ0ZGEzZC02MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0obPOLZD07x/yO4jCPi7nVronFteiNKPRPL+Q6oQPQmedqGj27QwPet9OtsA INg6av3MJyckizPP7orZX+qcmtm/t7g8Mq8UkfQT7V/fUNuE85lrswYKxVRs9QnA AeuKiRAzL26z8s6ozy52RFilwFGAB71zwzoqNBRZcKLhVX/bbacSPHrGWovLy6Kq xdDskwJlC9CY/IUd8RmvRLVchh1unEI3dEvXcelGhrf837v7tyva+DAdmdemQQiB gFx7VIB8K6sZTVUE18CeyggQc8GCQwa1JD/1KVTM4l89i/T+EPRyuhcjKdcbu2Fk t/ZmNvmfadv+qwx21BRd9x1EKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/CVvQ3 MMbroFQvE2j+JaG9U9ziMB8GA1UdIwQYMBaAFPBJKe90PFTAi0XhnPxRvyqlWdqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84QzIxNDk3NEE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZNQ0xSZUdjX0ZHX0txVloy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZN Q0xSZUdjX0ZHX0txVloycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX7zQrC08EHK2oYiuwiJheUA8mhk+JDvt+a1tLv8HaBtp+gIFnnmge zRDJlLgq7YK//lqZZFngWdTwiNV+hfAdMjlobFMlHK2Jt5VUudZgudPl9clX5rvH ALC3FnW70T3auhs956+Y6Tlicbd5e/rN2R2WcRbMkgvrw7gif829/tiyuIb5DlML qE3hqJNdc3A2X+TNVOUGk0OPgyR3/x3nBtojg6xw7alDr3l6zfuIU7ijyzAmpA3f PKwAgDi+LLHGJ/KBfYlcsW8bc5EYOdQaR+55p6fleSvMtG/8417z7EPShorQVELK 0vCuPoWFdcz/Kca5rMMMK27VAYSEET38 -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:04 2025 by rpki-client