This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: Hxxz31CIfnwNabpjOsmGLTojI0/lwi403bayjuYWDG8= Subject key identifier: FE:C1:87:E2:0F:33:3E:8D:2D:9C:B4:EC:D9:3C:95:D6:B5:9E:5F:49 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 071A Signing time: Fri 02 Jan 2026 21:11:21 +0000 Manifest this update: Fri 02 Jan 2026 21:11:21 +0000 Manifest next update: Fri 09 Jan 2026 21:11:21 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: ckNO+UVlBdDFKz35z+zSfyqaK0d1BJNzT+8Am+/aq2w=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 21:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Jan 2 21:11:21 2026 GMT Not After : Jan 9 21:11:21 2026 GMT Subject: CN=69583479-637e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:8a:65:25:83:32:b0:e5:3a:e2:86:b2:e2: 13:d5:27:ce:b9:73:c7:8b:4b:3b:cf:79:74:c2:f5: c1:e0:60:4e:4c:54:fb:5b:38:6a:8a:c1:19:61:c6: e4:04:48:38:b0:9c:35:c4:b1:d2:e0:10:ba:0a:4e: 81:aa:cb:eb:3d:a7:6d:b4:d5:e7:f1:5d:08:25:0a: 90:89:86:1d:d9:38:42:19:bb:ab:ca:14:3f:34:8f: 69:46:aa:22:95:e5:3a:5e:23:23:c7:b9:94:fc:4f: d1:6d:47:4b:91:1d:b6:35:f8:9a:f8:0b:cf:7d:38: 22:6d:90:be:42:ea:1e:c5:52:ff:69:45:5e:2c:d0: 68:b4:bd:11:c3:72:56:cd:04:0f:de:11:b7:8c:49: 66:d5:1e:a5:8d:f6:41:21:e0:1d:87:c5:78:4a:ce: 57:9b:7d:bb:4c:21:9a:49:8b:3f:f3:a2:71:7d:cc: 9e:d6:b5:1c:a2:da:7c:64:c7:64:0a:56:92:9d:01: 72:fe:2b:c9:5e:8e:df:e0:d8:43:5a:e7:24:19:92: 4a:44:1b:9c:07:84:cf:83:ff:5f:36:a1:83:d8:7a: 30:77:52:20:fc:6d:48:a8:a9:2d:a0:13:42:08:80: eb:33:24:59:2e:2f:63:b2:10:a3:e3:ae:aa:45:9f: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C1:87:E2:0F:33:3E:8D:2D:9C:B4:EC:D9:3C:95:D6:B5:9E:5F:49 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8c:88:65:c5:96:70:42:d0:fa:63:f9:8c:b8:d0:10:ba:e0: 68:9e:6d:8e:d5:3e:e6:65:2a:31:a7:8e:82:88:12:e1:e0:c8: af:5a:8c:bf:3b:83:51:03:1d:9e:02:cc:07:10:bd:e6:e9:d0: c6:bd:c7:47:37:1f:62:ac:d5:5f:c5:54:60:bf:a3:81:3f:e7: 4b:b9:5f:80:bc:b5:cf:08:69:80:44:ba:cb:6e:c1:24:a7:b8: 44:59:f5:a4:de:54:38:e9:f8:d5:2d:8e:d7:17:0c:76:fd:2d: d8:1f:26:77:cf:aa:78:8d:4b:bf:0f:c4:80:e2:b1:f4:3e:e2: 21:0f:f3:a2:33:92:9a:61:3c:de:e9:02:65:bd:b4:17:00:77: 4b:66:77:52:da:7c:20:24:e9:48:6b:91:d3:87:99:26:00:f1: 53:1d:a2:db:e8:5e:72:2d:bd:e8:db:ea:fc:d5:01:73:55:15: d6:47:74:b9:92:28:26:82:b9:12:c1:cf:74:d8:1a:36:43:b5: 36:38:09:b8:73:05:10:22:47:d4:06:51:0b:fe:bd:2a:34:60: 5b:3e:3e:ac:82:f6:8e:06:e3:1d:08:54:9d:ff:ed:eb:b7:b1: 1a:38:44:a8:44:06:60:ae:f2:e6:53:a1:e2:d5:2e:51:d9:4f: 77:9e:6e:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjYwMTAyMjExMTIxWhcNMjYwMTA5MjExMTIxWjAYMRYwFAYD VQQDDA02OTU4MzQ3OS02MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0+KZSWDMrDlOuKGsuIT1SfOuXPHi0s7z3l0wvXB4GBOTFT7WzhqisEZYcbk BEg4sJw1xLHS4BC6Ck6BqsvrPadttNXn8V0IJQqQiYYd2ThCGburyhQ/NI9pRqoi leU6XiMjx7mU/E/RbUdLkR22Nfia+AvPfTgibZC+QuoexVL/aUVeLNBotL0Rw3JW zQQP3hG3jElm1R6ljfZBIeAdh8V4Ss5Xm327TCGaSYs/86Jxfcye1rUcotp8ZMdk ClaSnQFy/ivJXo7f4NhDWuckGZJKRBucB4TPg/9fNqGD2Howd1Ig/G1IqKktoBNC CIDrMyRZLi9jshCj466qRZ93xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7Bh+IP Mz6NLZy07Nk8lda1nl9JMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZjIhlxZZwQtD6Y/mMuNAQuuBonm2O1T7mZSoxp46CiBLh4MivWoy/ O4NRAx2eAswHEL3m6dDGvcdHNx9irNVfxVRgv6OBP+dLuV+AvLXPCGmARLrLbsEk p7hEWfWk3lQ46fjVLY7XFwx2/S3YHyZ3z6p4jUu/D8SA4rH0PuIhD/OiM5KaYTze 6QJlvbQXAHdLZndS2nwgJOlIa5HTh5kmAPFTHaLb6F5yLb3o2+r81QFzVRXWR3S5 kigmgrkSwc902Bo2Q7U2OAm4cwUQIkfUBlEL/r0qNGBbPj6sgvaOBuMdCFSd/+3r t7EaOESoRAZgrvLmU6Hi1S5R2U93nm5E -----END CERTIFICATE-----Generated at Sat Jan 3 02:19:17 2026 by rpki-client