This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: MiYqM05s00GpHX/7cNUZc1BT851nlUdlto8gXHLOQz8= Subject key identifier: CD:DB:DF:AD:67:44:48:35:23:29:1B:52:99:63:59:89:F0:9E:4E:EA Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 0504 Signing time: Wed 31 Dec 2025 23:09:48 +0000 Manifest this update: Wed 31 Dec 2025 23:09:48 +0000 Manifest next update: Wed 07 Jan 2026 23:09:48 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: iZrCP5a9lh6rKUsRmxZH1TYG7rMsN6EACx6L+gJ3+mk=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: ytiI82E6VCnTYlGo/bVg7G4jwjvMMnWPkOJQayi3ook=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 23:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Dec 31 23:09:48 2025 GMT Not After : Jan 7 23:09:48 2026 GMT Subject: CN=6955ad3c-c59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:3f:0c:34:e2:14:a6:8f:db:d6:8f:78:6b: 2f:1a:3a:01:ec:27:5e:62:d1:6e:d6:64:73:dc:33: cc:77:28:55:d8:13:96:7c:ec:72:ab:ea:34:57:1f: e4:aa:13:02:86:ce:86:8e:3f:0b:6c:3d:61:cd:d9: da:27:5a:22:83:82:a2:53:e0:6c:45:10:58:cb:7c: 3d:1e:73:fe:e1:0f:a8:62:ec:cf:01:fe:72:3a:c0: e2:24:e7:0c:1e:59:14:30:ae:1e:b2:f1:8f:ad:67: 05:92:44:a9:8e:c7:a4:c2:ff:e4:aa:a9:43:e8:21: 21:68:d0:02:2b:13:f4:1c:34:66:f7:41:ad:c1:1e: 0c:09:b4:6e:aa:52:2f:ac:c5:3d:75:b3:e0:62:e0: 1a:dd:48:ee:5f:37:27:4a:4c:cc:cf:a5:1a:76:22: cc:c5:6b:04:c5:b0:44:df:94:ae:4c:2d:0d:df:78: 18:22:26:cb:5c:85:fa:ed:b1:7e:09:00:19:fa:2f: a3:ab:8f:c9:01:bb:2e:4b:66:4c:27:ec:24:86:03: 78:9b:89:5c:90:e2:06:53:ff:69:11:06:d6:2e:c4: 6a:a3:28:59:3b:03:01:e5:3b:b4:e0:8b:63:29:d8: 58:b4:1d:c3:b3:c6:e4:86:af:59:81:a1:9c:32:e7: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DB:DF:AD:67:44:48:35:23:29:1B:52:99:63:59:89:F0:9E:4E:EA X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:47:3b:1e:92:40:47:53:89:47:9a:34:4b:02:3c:c5:2c:b3: 2c:44:3d:10:4f:07:9e:a7:0e:70:a7:86:3c:70:22:ce:98:73: 51:5f:a5:69:5b:88:33:44:fa:6b:14:42:a5:2a:17:64:1d:ff: cc:b4:35:bf:dc:4d:02:a4:22:67:95:07:9e:da:74:a8:cb:53: b0:c5:41:85:50:1b:c6:c2:7a:c1:fe:00:a0:e4:19:99:2d:70: 92:9e:80:08:d2:5f:e8:55:04:74:2d:14:47:79:99:30:02:4e: bc:70:30:c4:4a:87:fb:55:0c:0c:09:c6:d5:1f:c2:c4:d6:56: 49:27:16:68:38:1e:a9:e7:94:db:5b:d6:8d:ca:59:4d:27:c6: c0:5f:ab:41:da:ed:5b:af:93:11:d6:f4:93:e6:80:2d:18:fe: 63:05:38:22:3f:e1:61:d6:4e:da:3f:c7:63:e1:fd:a4:80:65: 44:40:6d:65:7f:4f:21:ce:b0:30:12:6a:bc:89:af:89:b9:9b: fd:34:81:12:eb:e8:b1:c7:04:a7:4a:7a:09:b6:08:27:51:15: 9d:1f:f0:19:1d:2c:55:47:b2:18:f2:b1:90:f0:48:6b:11:2d: 9e:6f:de:a3:32:33:10:e8:fb:fc:18:32:70:8c:6e:64:e2:56: 4b:8a:4c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUxMjMxMjMwOTQ4WhcNMjYwMTA3MjMwOTQ4WjAYMRYwFAYD VQQDDA02OTU1YWQzYy1jNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5o/DDTiFKaP29aPeGsvGjoB7CdeYtFu1mRz3DPMdyhV2BOWfOxyq+o0Vx/k qhMChs6Gjj8LbD1hzdnaJ1oig4KiU+BsRRBYy3w9HnP+4Q+oYuzPAf5yOsDiJOcM HlkUMK4esvGPrWcFkkSpjsekwv/kqqlD6CEhaNACKxP0HDRm90GtwR4MCbRuqlIv rMU9dbPgYuAa3UjuXzcnSkzMz6UadiLMxWsExbBE35SuTC0N33gYIibLXIX67bF+ CQAZ+i+jq4/JAbsuS2ZMJ+wkhgN4m4lckOIGU/9pEQbWLsRqoyhZOwMB5Tu04Itj KdhYtB3Ds8bkhq9ZgaGcMufeuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3b361n REg1IykbUpljWYnwnk7qMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlRzsekkBHU4lHmjRLAjzFLLMsRD0QTweepw5wp4Y8cCLOmHNRX6Vp W4gzRPprFEKlKhdkHf/MtDW/3E0CpCJnlQee2nSoy1OwxUGFUBvGwnrB/gCg5BmZ LXCSnoAI0l/oVQR0LRRHeZkwAk68cDDESof7VQwMCcbVH8LE1lZJJxZoOB6p55Tb W9aNyllNJ8bAX6tB2u1br5MR1vST5oAtGP5jBTgiP+Fh1k7aP8dj4f2kgGVEQG1l f08hzrAwEmq8ia+JuZv9NIES6+ixxwSnSnoJtggnURWdH/AZHSxVR7IY8rGQ8Ehr ES2eb96jMjMQ6Pv8GDJwjG5k4lZLikwZ -----END CERTIFICATE-----Generated at Fri Jan 2 09:53:10 2026 by rpki-client