This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: UjuDMJNwXudXbBkh/s6dhEeX74LzvCTI2Ypa34cTC04= Subject key identifier: B4:E5:8A:60:F2:61:08:CF:91:5D:EB:01:78:96:D7:2B:FE:86:30:65 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 0717 Signing time: Sun 28 Dec 2025 21:09:30 +0000 Manifest this update: Sun 28 Dec 2025 21:09:29 +0000 Manifest next update: Sun 04 Jan 2026 21:09:29 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: wNcxZaaCAAqwsvbisq5Y9lJvPZltn44vmiSZOf7fA0Q=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Dec 28 21:09:29 2025 GMT Not After : Jan 4 21:09:29 2026 GMT Subject: CN=69519c8a-4a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:9f:56:8f:85:40:b6:80:2e:7e:5c:1b:8d: 89:b0:96:2c:01:94:15:c9:1c:0e:01:14:09:ee:b8: 6c:13:6e:97:f5:e2:2f:67:ce:70:f7:fd:a5:7e:1c: 6e:37:c9:c8:80:bd:53:ec:b2:a7:99:4d:1c:45:65: 2d:15:51:5e:1a:70:92:4c:6f:a1:8f:c4:80:ac:57: c8:65:a8:98:68:ef:c5:6b:89:76:e1:6a:a8:7f:bc: 00:e7:db:cb:e5:ec:b6:23:8f:b5:ea:a8:2f:c5:2d: fe:8c:cb:e1:58:11:ef:43:6b:89:04:92:2f:0b:ff: 73:1c:d4:55:f1:7f:b4:42:a5:43:4f:73:7f:60:85: 2e:48:fa:4d:a2:c0:fb:39:8a:ea:45:a6:8c:60:f7: 1e:8a:bb:48:11:6d:dc:9e:5d:9d:f6:62:fe:34:80: fe:e5:14:ef:f0:00:1f:f9:bc:7f:18:39:4e:04:dd: 1b:63:25:51:a8:19:b2:85:1c:ea:88:a4:45:98:6c: d4:de:72:7a:aa:94:4f:77:61:6b:fc:21:6d:7d:6d: 9c:cc:22:e5:cb:38:12:41:99:fe:4c:84:95:6e:80: 2e:06:0c:9d:b9:c2:d7:31:31:9d:fb:6c:2a:d5:a3: 22:5e:10:3b:8b:22:45:28:4c:4f:4f:13:a7:4c:87: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E5:8A:60:F2:61:08:CF:91:5D:EB:01:78:96:D7:2B:FE:86:30:65 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:79:f2:8c:46:e9:bb:42:22:06:4b:e9:ad:d4:9a:e2:6d:17: c2:db:12:e9:f9:97:ca:75:3a:9e:7e:af:7f:73:3a:e9:6e:3c: 8a:84:48:19:de:3b:63:20:35:9a:d6:a7:00:e9:a3:a5:5a:38: 7e:50:8c:63:a0:f6:a4:6a:42:c5:8d:97:5f:0b:8c:4f:52:ff: 04:01:56:5a:7b:ce:67:f4:f4:1a:63:d6:57:c7:ce:46:9a:31: 19:3b:c1:17:8b:7d:2d:62:c3:f7:97:18:eb:d2:aa:10:bf:a6: 4b:35:29:a0:d5:c3:7f:e1:10:fb:85:a7:a6:b8:09:ca:77:72: 89:a1:a2:4c:88:fa:8a:50:6d:36:0d:7c:14:6d:3f:f9:40:c9: 34:74:15:3c:28:ac:fc:20:1c:29:e6:af:a3:7e:f3:76:e9:36: 95:66:8d:fb:ee:fa:da:52:49:38:e6:b3:b0:c4:0b:03:a2:06: 36:26:79:07:39:ab:27:c0:bd:32:94:e6:68:b3:6a:aa:56:db: f1:a4:dd:22:8e:b7:1b:34:04:2a:d6:26:b1:49:bf:f6:a5:72: 65:66:8e:d8:6d:0a:8d:03:10:04:cf:69:c1:21:b6:d3:a5:9d: c8:ea:0c:62:08:fd:ff:72:28:c2:71:ae:ac:cf:e8:5a:48:b4: eb:85:a9:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUxMjI4MjEwOTI5WhcNMjYwMTA0MjEwOTI5WjAYMRYwFAYD VQQDDA02OTUxOWM4YS00YTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAOfVo+FQLaALn5cG42JsJYsAZQVyRwOARQJ7rhsE26X9eIvZ85w9/2lfhxu N8nIgL1T7LKnmU0cRWUtFVFeGnCSTG+hj8SArFfIZaiYaO/Fa4l24Wqof7wA59vL 5ey2I4+16qgvxS3+jMvhWBHvQ2uJBJIvC/9zHNRV8X+0QqVDT3N/YIUuSPpNosD7 OYrqRaaMYPceirtIEW3cnl2d9mL+NID+5RTv8AAf+bx/GDlOBN0bYyVRqBmyhRzq iKRFmGzU3nJ6qpRPd2Fr/CFtfW2czCLlyzgSQZn+TISVboAuBgyducLXMTGd+2wq 1aMiXhA7iyJFKExPTxOnTIcaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTlimDy YQjPkV3rAXiW1yv+hjBlMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/efKMRum7QiIGS+mt1JribRfC2xLp+ZfKdTqefq9/czrpbjyKhEgZ 3jtjIDWa1qcA6aOlWjh+UIxjoPakakLFjZdfC4xPUv8EAVZae85n9PQaY9ZXx85G mjEZO8EXi30tYsP3lxjr0qoQv6ZLNSmg1cN/4RD7haemuAnKd3KJoaJMiPqKUG02 DXwUbT/5QMk0dBU8KKz8IBwp5q+jfvN26TaVZo377vraUkk45rOwxAsDogY2JnkH OasnwL0ylOZos2qqVtvxpN0ijrcbNAQq1iaxSb/2pXJlZo7YbQqNAxAEz2nBIbbT pZ3I6gxiCP3/cijCca6sz+haSLTrhakv -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:50 2025 by rpki-client