This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: srkqVdiwKeQ5vF1UFtvLKP+f+eXs2NNAk7PZUl3x9vE= Subject key identifier: 95:71:80:B5:02:31:00:B4:08:25:8F:79:B2:0C:01:A5:CF:6C:07:D3 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 0411 Signing time: Tue 30 Dec 2025 23:40:51 +0000 Manifest this update: Tue 30 Dec 2025 23:40:51 +0000 Manifest next update: Tue 06 Jan 2026 23:40:51 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 6bgzAuZJ4CmS3Cb+xncorO1FQGEAEV86yefOuWGQFKE=) 2: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 3: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) 4: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: 2KodBvrJvVzLG2LbWPZiEGrY7NIy7vzTjdiUIRnC0oY=) 6: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) 7: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 8: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 9: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: NJb7fbLMu5qVuetYwV/WSEDtWyBY5QSeAuqQ8b9b+dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 23:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Dec 30 23:40:51 2025 GMT Not After : Jan 6 23:40:51 2026 GMT Subject: CN=69546303-e543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:ba:37:10:a8:26:f1:34:b2:8f:6d:b5:f4: 5c:f4:b3:04:89:14:35:09:ab:4f:3c:f2:59:f6:80: fe:d5:8e:12:0c:d8:1f:61:94:00:0c:e3:dc:5c:3e: 69:5d:40:68:22:c0:44:4f:64:71:7c:20:c4:87:eb: 29:58:ca:1f:91:cc:53:0e:94:4f:47:a2:75:6f:2f: e1:f5:46:22:a4:04:2d:13:4b:5f:25:7c:91:40:e3: 89:f3:a0:28:86:c5:46:21:cf:c1:b5:ed:e5:04:2b: 5c:bd:38:d6:00:4c:2c:9c:1e:aa:44:7b:e7:a4:0b: 88:49:dc:d3:32:0a:ac:89:73:f5:83:24:bd:91:b1: 74:c2:21:d5:08:17:a6:75:35:5d:ea:68:28:93:5b: f0:13:4f:73:84:64:0a:fb:3c:db:16:9d:db:50:29: 91:56:57:40:c9:b1:c3:9c:17:6a:a3:40:10:f1:e9: 75:5f:ae:50:6c:25:c6:1d:5d:e5:d1:29:5a:85:74: 30:c7:58:cb:35:84:2a:39:eb:b9:19:ba:55:27:43: 77:db:71:34:bb:cd:f3:ee:cc:fb:f7:90:85:a4:7e: 03:40:53:da:98:19:00:24:09:1a:f9:35:ac:83:c7: 10:dd:cf:53:91:64:92:6c:82:9b:2c:ff:00:fb:ac: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:71:80:B5:02:31:00:B4:08:25:8F:79:B2:0C:01:A5:CF:6C:07:D3 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:39:94:a9:c6:c4:92:ed:38:c3:25:cf:17:fc:f9:79:a4:05: 15:f6:30:f7:3a:63:ce:54:d7:b0:b3:90:7f:37:54:3b:2c:ad: 79:62:63:78:84:41:24:65:81:84:9c:62:a4:6a:25:2a:78:2c: d0:57:e4:b2:9f:0a:b5:1d:4a:b1:17:b6:84:f5:d1:a4:eb:da: 25:3b:60:67:8f:74:26:eb:de:ce:cf:89:00:c0:e5:35:5e:e8: b8:0e:8c:e3:0b:b2:bd:6d:ca:f4:01:5e:17:d3:94:33:72:1d: d0:0d:92:b6:ad:98:d5:c0:d7:2b:de:bf:78:88:8b:92:1e:19: 5a:26:91:d7:c8:d3:d9:30:98:bc:75:07:86:9c:37:aa:ad:86: 06:70:b5:41:92:53:f6:8c:f0:4f:29:f4:0f:9e:79:47:51:a7: e0:dc:85:51:e4:43:2c:cb:9b:7b:8a:9e:93:6a:da:01:81:8f: 1d:31:95:6d:bf:4b:dc:dd:2c:da:01:19:ec:ea:68:26:e8:f6: d7:c7:45:78:8f:f1:4d:ae:37:1d:4e:60:41:88:78:96:d9:e3: a4:56:60:31:2b:db:73:8b:26:29:78:10:ea:4d:29:37:5d:d6: c8:34:f7:b7:a3:f3:08:5c:45:34:b8:a8:a5:88:b6:3b:af:c6: 46:82:df:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUxMjMwMjM0MDUxWhcNMjYwMTA2MjM0MDUxWjAYMRYwFAYD VQQDDA02OTU0NjMwMy1lNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb66NxCoJvE0so9ttfRc9LMEiRQ1CatPPPJZ9oD+1Y4SDNgfYZQADOPcXD5p XUBoIsBET2RxfCDEh+spWMofkcxTDpRPR6J1by/h9UYipAQtE0tfJXyRQOOJ86Ao hsVGIc/Bte3lBCtcvTjWAEwsnB6qRHvnpAuISdzTMgqsiXP1gyS9kbF0wiHVCBem dTVd6mgok1vwE09zhGQK+zzbFp3bUCmRVldAybHDnBdqo0AQ8el1X65QbCXGHV3l 0SlahXQwx1jLNYQqOeu5GbpVJ0N323E0u83z7sz795CFpH4DQFPamBkAJAka+TWs g8cQ3c9TkWSSbIKbLP8A+6zWVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVxgLUC MQC0CCWPebIMAaXPbAfTMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzOZSpxsSS7TjDJc8X/Pl5pAUV9jD3OmPOVNews5B/N1Q7LK15YmN4 hEEkZYGEnGKkaiUqeCzQV+Synwq1HUqxF7aE9dGk69olO2Bnj3Qm697Oz4kAwOU1 Xui4DozjC7K9bcr0AV4X05Qzch3QDZK2rZjVwNcr3r94iIuSHhlaJpHXyNPZMJi8 dQeGnDeqrYYGcLVBklP2jPBPKfQPnnlHUafg3IVR5EMsy5t7ip6TatoBgY8dMZVt v0vc3SzaARns6mgm6PbXx0V4j/FNrjcdTmBBiHiW2eOkVmAxK9tziyYpeBDqTSk3 XdbINPe3o/MIXEU0uKiliLY7r8ZGgt/+ -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:30 2025 by rpki-client