This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: HTSSdeHtCh58Lhey8M+74JRnaYOPPGUiJbokR9XP62I= Subject key identifier: 89:94:AF:7C:6B:2D:F9:4F:54:AF:36:10:5F:54:A0:36:5B:15:C6:13 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0247 Signing time: Fri 19 Dec 2025 01:05:56 +0000 Manifest this update: Fri 19 Dec 2025 01:05:55 +0000 Manifest next update: Fri 26 Dec 2025 01:05:55 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: VOkbbGEIst0hYrYT6oMHI669IYPy45g6XapKfqLWb0o=) 2: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: ZjsRW8EqZpvCIXMwCzwN2hfnGnkK/xWG3xWMJinw25M=) 3: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: 93Fu4NJ+c74voGtnReTAbw0AMG9XfrkIqJTzM1zuS7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Dec 19 01:05:55 2025 GMT Not After : Dec 26 01:05:55 2025 GMT Subject: CN=6944a4f3-f2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:5b:3b:75:d0:00:71:d9:f5:37:b7:17:37: b3:3c:67:b3:ef:13:42:af:83:0e:45:47:75:47:cc: 3a:ab:6c:98:c7:b2:6f:d3:8a:ad:d6:86:c9:9b:fd: 9e:32:9c:5c:54:3e:ba:77:45:75:8d:bb:f8:a9:7d: 7b:74:79:c8:47:54:7d:7d:9d:aa:3d:e6:3f:44:bf: 5e:51:39:e9:9d:da:de:1e:c0:ec:55:5a:9a:7a:51: b1:95:c7:cf:72:32:d1:2e:15:40:60:3d:6d:7e:98: cd:4a:bf:1f:2a:08:fa:f4:f5:74:2d:c3:62:2a:38: 50:21:52:08:aa:ca:13:a6:5e:1e:9c:be:eb:f4:b8: a0:12:46:b3:45:44:80:13:5d:e1:44:3d:b4:a2:b8: ab:1d:18:68:f1:37:df:ee:7d:2d:44:a7:8f:64:ea: a8:16:13:3d:1c:24:d3:05:7a:e0:f4:a8:95:f5:41: e3:84:5c:44:df:da:68:ce:eb:0e:06:85:3b:da:eb: 07:47:e7:5c:37:18:4e:9b:79:ec:cf:e3:64:74:f3: 89:b7:7a:47:51:48:37:6e:01:92:2e:07:98:f5:5f: 8f:e8:78:cc:73:d6:24:61:38:d2:4e:58:94:f6:cd: 90:7a:99:a1:a6:26:e2:90:ba:73:57:77:0e:1e:fb: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:94:AF:7C:6B:2D:F9:4F:54:AF:36:10:5F:54:A0:36:5B:15:C6:13 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5e:f3:9e:f4:75:91:0c:14:a1:d1:d1:b6:13:5b:76:47:3d: 68:c9:09:dc:8a:9a:8b:cd:88:11:08:06:c4:86:1c:4f:ca:1a: 14:23:15:e4:1f:fc:54:56:fe:d5:f9:59:65:7d:9b:68:44:18: 87:da:28:aa:98:2b:86:0b:29:2b:26:7a:d6:c5:28:23:2c:c6: 14:85:51:02:d4:ea:ca:3d:7d:af:e6:15:0c:d3:6a:75:24:6f: 91:2b:f4:0f:5d:8a:a8:4a:76:67:16:30:f6:75:25:b2:da:eb: 0f:9c:3f:5a:5e:bd:db:8c:39:7e:a5:31:d0:77:05:91:cf:f0: 5e:3c:00:9a:21:31:24:98:ff:b7:93:ab:77:6f:db:0a:61:d5: 9b:45:5f:1c:10:73:5c:50:52:11:fa:06:24:4f:52:15:b5:5d: bb:cc:2a:2a:4f:49:c3:00:a1:0f:cf:a6:d4:3e:a9:63:8c:a9: 5d:be:c4:a2:d7:8d:a1:78:20:ff:37:66:12:c7:0d:dc:47:1b: a3:3f:9d:7a:f5:a8:65:a2:f7:d9:74:46:c8:7e:40:84:79:11: 54:3b:78:54:a5:6b:25:72:75:23:a6:f4:a8:e8:d2:30:dd:87: ee:04:05:4d:0e:e9:63:04:61:93:1c:48:e8:c5:86:67:a0:f8: df:9b:ac:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUxMjE5MDEwNTU1WhcNMjUxMjI2MDEwNTU1WjAYMRYwFAYD VQQDDA02OTQ0YTRmMy1mMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLJbO3XQAHHZ9Te3FzezPGez7xNCr4MORUd1R8w6q2yYx7Jv04qt1obJm/2e MpxcVD66d0V1jbv4qX17dHnIR1R9fZ2qPeY/RL9eUTnpndreHsDsVVqaelGxlcfP cjLRLhVAYD1tfpjNSr8fKgj69PV0LcNiKjhQIVIIqsoTpl4enL7r9LigEkazRUSA E13hRD20orirHRho8Tff7n0tRKePZOqoFhM9HCTTBXrg9KiV9UHjhFxE39pozusO BoU72usHR+dcNxhOm3nsz+NkdPOJt3pHUUg3bgGSLgeY9V+P6HjMc9YkYTjSTliU 9s2QepmhpibikLpzV3cOHvshuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImUr3xr LflPVK82EF9UoDZbFcYTMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5XvOe9HWRDBSh0dG2E1t2Rz1oyQncipqLzYgRCAbEhhxPyhoUIxXk H/xUVv7V+VllfZtoRBiH2iiqmCuGCykrJnrWxSgjLMYUhVEC1OrKPX2v5hUM02p1 JG+RK/QPXYqoSnZnFjD2dSWy2usPnD9aXr3bjDl+pTHQdwWRz/BePACaITEkmP+3 k6t3b9sKYdWbRV8cEHNcUFIR+gYkT1IVtV27zCoqT0nDAKEPz6bUPqljjKldvsSi 142heCD/N2YSxw3cRxujP5169ahlovfZdEbIfkCEeRFUO3hUpWslcnUjpvSo6NIw 3YfuBAVNDuljBGGTHEjoxYZnoPjfm6yp -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:29 2025 by rpki-client