This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: rzYEixkd9BjiJtbnSezhG8h93wBA3qPTBqf4xtCw0cE= Subject key identifier: 6B:B2:78:AC:CA:2B:16:78:FF:05:36:88:DB:03:B5:16:E4:0A:BA:C1 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 019C Signing time: Fri 19 Dec 2025 02:34:21 +0000 Manifest this update: Fri 19 Dec 2025 02:34:21 +0000 Manifest next update: Fri 26 Dec 2025 02:34:21 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: gqW2op7x1fe6QUrqxDBeqWmhBgEwTpnwQOycE5WXF1g=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: Er3/MAuCzoGUHkL9sYAa/oK9eluVmQp9z5pkVAw9cAM=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: smI8KFtozrldpJMIbPknM0ia5ZaENjQghxfBZjdwPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Dec 19 02:34:21 2025 GMT Not After : Dec 26 02:34:21 2025 GMT Subject: CN=6944b9ad-177f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:df:da:ab:49:be:7d:3d:df:cd:94:db:6d: e7:a5:3b:ac:a6:4f:1f:2f:a5:af:2b:2b:f4:78:3f: d4:bd:12:94:53:52:98:f4:87:ed:ce:f9:b5:70:2b: 12:f3:26:a3:77:3b:b3:54:4c:d0:e1:c5:d6:02:b3: ba:32:16:e2:85:b1:69:87:43:c5:0c:f2:c8:7e:f7: e6:b1:90:38:3d:e8:fe:ae:9a:61:30:4a:2f:93:69: 1f:8b:fe:33:ba:f5:6e:08:73:47:c3:9a:c7:55:b6: 2a:d5:cc:9b:e6:34:2b:48:c4:57:27:c5:af:b8:6d: 11:85:87:ac:9c:a1:03:5b:31:6b:e0:da:48:9a:a6: 90:09:dc:36:8f:d1:4c:5a:8a:5c:07:65:97:01:99: 5a:8e:c8:44:11:9f:68:94:4b:11:7c:84:e0:db:8d: 4b:21:fb:01:e5:98:de:a0:01:cc:73:5f:c5:e2:75: de:f8:1b:8d:e0:dc:15:30:c9:ee:ce:de:cf:d2:33: 8d:bc:a2:6e:94:73:3e:e4:6f:f6:05:1f:57:62:4b: 3a:08:f8:38:71:cf:0c:31:8c:ab:bb:ad:f2:fa:e0: 49:83:e5:8b:da:80:b0:a8:63:c3:6d:c0:53:b8:f6: 6b:29:46:0b:4d:35:9e:46:3b:57:a1:e5:a1:61:14: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:78:AC:CA:2B:16:78:FF:05:36:88:DB:03:B5:16:E4:0A:BA:C1 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0b:d9:ea:91:89:7f:eb:8b:a5:4e:13:44:3d:e1:83:ca:df: 9e:45:50:cd:a2:c6:ca:67:d8:c4:ce:0b:82:0b:bf:56:fa:93: 4e:e6:4e:31:7e:00:c8:59:c8:e9:a3:d4:ae:2a:db:ac:d4:49: c4:9e:18:10:95:a7:cc:aa:15:76:ce:ee:2a:ab:be:e2:ac:3d: c4:cf:02:8a:4f:65:6d:8b:b0:50:80:ad:bf:37:e7:76:2c:1b: ba:50:e7:11:a9:0f:f9:f4:91:63:a5:99:ae:f4:a4:fb:b5:b3: 31:b4:3a:c4:34:a2:56:f1:ee:fc:39:19:5a:93:39:ef:47:d6: f0:42:13:6d:58:8f:0b:49:aa:9a:fb:74:24:3b:4f:69:9b:8e: 74:3b:94:f7:cd:b2:63:d3:0e:bb:3f:83:65:b1:a9:47:66:92: cb:d5:4a:96:e5:60:f6:9d:c3:7c:ee:ef:11:46:6c:c3:1b:c9: 7c:40:9b:54:23:c9:9b:d5:51:d6:7d:d8:80:06:75:23:71:fb: 83:c1:b6:91:f5:4b:e0:b0:87:6b:53:4a:0b:d6:59:6f:97:cd: 9a:39:93:3f:1c:bc:a5:40:a6:4a:5b:bb:ef:52:28:aa:a2:3b: 18:06:e7:2a:2e:ca:26:86:1b:bc:13:35:83:3a:ad:56:20:c0: a4:4a:f6:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUxMjE5MDIzNDIxWhcNMjUxMjI2MDIzNDIxWjAYMRYwFAYD VQQDDA02OTQ0YjlhZC0xNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhQXf2qtJvn09382U223npTuspk8fL6WvKyv0eD/UvRKUU1KY9Iftzvm1cCsS 8yajdzuzVEzQ4cXWArO6MhbihbFph0PFDPLIfvfmsZA4Pej+rpphMEovk2kfi/4z uvVuCHNHw5rHVbYq1cyb5jQrSMRXJ8WvuG0RhYesnKEDWzFr4NpImqaQCdw2j9FM WopcB2WXAZlajshEEZ9olEsRfITg241LIfsB5ZjeoAHMc1/F4nXe+BuN4NwVMMnu zt7P0jONvKJulHM+5G/2BR9XYks6CPg4cc8MMYyru63y+uBJg+WL2oCwqGPDbcBT uPZrKUYLTTWeRjtXoeWhYRQ5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuyeKzK KxZ4/wU2iNsDtRbkCrrBMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4C9nqkYl/64ulThNEPeGDyt+eRVDNosbKZ9jEzguCC79W+pNO5k4x fgDIWcjpo9SuKtus1EnEnhgQlafMqhV2zu4qq77irD3EzwKKT2Vti7BQgK2/N+d2 LBu6UOcRqQ/59JFjpZmu9KT7tbMxtDrENKJW8e78ORlakznvR9bwQhNtWI8LSaqa +3QkO09pm450O5T3zbJj0w67P4NlsalHZpLL1UqW5WD2ncN87u8RRmzDG8l8QJtU I8mb1VHWfdiABnUjcfuDwbaR9UvgsIdrU0oL1llvl82aOZM/HLylQKZKW7vvUiiq ojsYBucqLsomhhu8EzWDOq1WIMCkSvbO -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:06 2025 by rpki-client