This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: OwVnmEK+sYpVVy0yD7QW1Kfx8SpkoYyPzmrExgXTHmA= Subject key identifier: DA:3F:88:A6:D6:C6:73:5B:EB:C7:C7:B3:78:79:DC:25:98:C8:A4:93 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 0180 Signing time: Fri 19 Dec 2025 02:49:22 +0000 Manifest this update: Fri 19 Dec 2025 02:49:21 +0000 Manifest next update: Fri 26 Dec 2025 02:49:21 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: FjpPaeKnS0vj7pbJTwentL1J5TP6tMHvsilAJ3wy/sc=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Dec 19 02:49:21 2025 GMT Not After : Dec 26 02:49:21 2025 GMT Subject: CN=6944bd32-24c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:1e:88:10:16:4e:19:91:76:07:eb:35:e6: 2e:42:8d:a4:c5:15:fe:b0:ab:27:e0:54:72:4d:80: ae:3b:09:2e:ff:df:f1:e7:21:ed:94:57:b5:07:58: 13:e0:c2:3a:47:c9:7e:4a:7f:b9:cb:82:ae:55:31: 8c:57:47:83:a6:43:e2:55:04:e6:15:3d:70:af:22: fa:1f:45:be:08:6b:db:3c:9d:7a:b6:3d:89:0d:4c: b2:ea:f4:0e:ea:2e:c4:5a:7f:41:1f:53:a5:a8:45: 0e:aa:ec:e0:46:4b:e7:65:90:2b:8a:b4:e0:36:12: bf:0d:64:a8:ff:2e:1c:5e:e4:43:d8:c2:7c:ae:9c: 46:11:74:42:45:ee:f3:cf:a9:3d:c9:10:23:22:c3: ea:b3:7d:d4:27:fb:ef:7c:69:1e:c1:7d:19:19:eb: 9c:8e:39:8f:04:4c:96:1a:1b:df:bf:0f:bc:91:61: d8:4b:43:de:91:5c:72:5f:b6:28:88:c7:e9:0a:21: ed:66:cd:32:33:76:83:c6:27:dc:6c:1b:8f:ea:a2: 8e:2b:c7:ef:50:f1:78:85:2d:fd:e9:5d:01:59:ca: 04:92:67:5d:f8:74:a7:83:d1:4d:1f:3c:af:50:64: 79:fa:e7:64:d4:d6:a6:9b:0d:9e:d6:f6:97:7e:f7: a3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:88:A6:D6:C6:73:5B:EB:C7:C7:B3:78:79:DC:25:98:C8:A4:93 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:90:f9:4a:95:4f:d5:40:55:f5:f2:5d:e5:b2:07:b0:3a:cb: 37:9e:d5:60:e6:98:92:c0:cc:87:c6:c0:0e:39:9b:66:5f:df: ba:b8:1e:ac:a9:a0:32:bc:dd:00:a6:12:7d:6e:48:20:90:1d: 8d:fc:43:ad:b9:62:b5:45:6b:96:43:69:54:43:ea:22:2c:3b: a2:61:25:84:4f:64:14:93:67:12:35:74:65:f9:26:3b:f7:a0: 8d:1c:4e:4d:06:0b:c8:f5:99:e6:ad:75:10:bc:a8:18:2d:3e: 66:8a:e3:49:c2:04:2a:79:47:6e:dc:fc:1a:6c:97:9b:df:b3: b1:38:82:e4:5c:0b:89:3d:78:31:5e:75:37:91:27:27:ae:c6: 0c:a0:58:7d:77:2f:dd:9b:e4:16:b9:e0:76:22:9c:12:63:d1: d8:c1:c7:e6:5e:a7:69:05:b3:b2:63:bf:f3:5e:86:fc:89:31: c2:29:53:05:dc:96:ab:e8:85:af:c0:d3:8d:80:8e:c3:14:de: f9:01:a0:38:f5:78:a9:ce:eb:43:01:2f:9a:d7:bb:a9:40:34: 68:25:89:c0:05:5a:0a:eb:57:de:45:2a:fc:49:8e:87:b2:da: 57:bb:d8:f8:96:d8:5f:03:c7:40:9d:51:de:a6:ac:b0:97:1c: 83:82:bd:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUxMjE5MDI0OTIxWhcNMjUxMjI2MDI0OTIxWjAYMRYwFAYD VQQDDA02OTQ0YmQzMi0yNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygUeiBAWThmRdgfrNeYuQo2kxRX+sKsn4FRyTYCuOwku/9/x5yHtlFe1B1gT 4MI6R8l+Sn+5y4KuVTGMV0eDpkPiVQTmFT1wryL6H0W+CGvbPJ16tj2JDUyy6vQO 6i7EWn9BH1OlqEUOquzgRkvnZZArirTgNhK/DWSo/y4cXuRD2MJ8rpxGEXRCRe7z z6k9yRAjIsPqs33UJ/vvfGkewX0ZGeucjjmPBEyWGhvfvw+8kWHYS0PekVxyX7Yo iMfpCiHtZs0yM3aDxifcbBuP6qKOK8fvUPF4hS396V0BWcoEkmdd+HSng9FNHzyv UGR5+udk1Nammw2e1vaXfvejbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo/iKbW xnNb68fHs3h53CWYyKSTMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPkPlKlU/VQFX18l3lsgewOss3ntVg5piSwMyHxsAOOZtmX9+6uB6s qaAyvN0AphJ9bkggkB2N/EOtuWK1RWuWQ2lUQ+oiLDuiYSWET2QUk2cSNXRl+SY7 96CNHE5NBgvI9ZnmrXUQvKgYLT5miuNJwgQqeUdu3PwabJeb37OxOILkXAuJPXgx XnU3kScnrsYMoFh9dy/dm+QWueB2IpwSY9HYwcfmXqdpBbOyY7/zXob8iTHCKVMF 3Jar6IWvwNONgI7DFN75AaA49XipzutDAS+a17upQDRoJYnABVoK61feRSr8SY6H stpXu9j4lthfA8dAnVHepqywlxyDgr2Z -----END CERTIFICATE-----Generated at Sat Dec 20 04:33:51 2025 by rpki-client