This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: wpBYjBd3QCBkH2JjLuDBxjS9oKxUSGbOFZT9VPOrSSs= Subject key identifier: B5:2C:4C:2F:34:21:3D:8C:26:4B:2D:DE:D5:41:8D:33:AD:F7:13:D1 Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 1206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 11FC Signing time: Sat 20 Dec 2025 16:53:41 +0000 Manifest this update: Sat 20 Dec 2025 16:53:41 +0000 Manifest next update: Sat 27 Dec 2025 16:53:41 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: 7IIRyFtZ7ZEqpA5LPkeVC4luewDY2oUmUCXhCv3vwcM=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4614 (0x1206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: Dec 20 16:53:41 2025 GMT Not After : Dec 27 16:53:41 2025 GMT Subject: CN=6946d495-c650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:81:f4:1d:5b:e0:5d:1a:2b:17:06:c9:e4: 71:74:ee:01:89:4e:59:bb:44:2f:f1:b9:a8:0a:17: 9e:37:68:d3:51:01:0e:14:4d:a9:13:a3:f7:c5:e7: bf:49:20:07:53:45:2f:6f:d6:d4:5d:bb:42:d3:ff: 79:d1:cf:39:8c:f6:29:6a:32:7a:4d:5e:f8:fa:72: 2a:a5:9b:4e:58:28:50:6b:fc:49:9b:66:77:b3:1b: 98:66:76:d3:d1:6c:9a:0c:34:56:3e:3c:a1:e3:97: 2a:d6:91:4b:31:56:7f:2d:21:39:d4:ad:ad:c6:e4: 88:7d:2a:89:de:ff:5a:e1:d6:ad:c4:35:1f:0e:41: a1:76:ed:49:23:bb:66:5c:4a:b6:6f:9d:03:26:12: d4:25:df:6b:3e:f6:d5:6a:13:b2:68:38:0f:31:dc: 81:1b:94:cd:9e:e0:b7:1f:ba:92:9e:8d:d3:3d:3c: 84:8a:53:39:e9:93:11:16:94:79:3b:01:24:32:f7: ab:41:42:06:55:57:ef:e9:e5:10:fe:ce:1e:92:bc: ae:eb:81:45:ed:26:a2:bf:60:a0:1e:4a:f0:7e:33: a9:d7:60:38:41:fa:d1:c0:7d:d2:63:dd:99:9f:cc: 70:df:c1:f1:3b:8d:ce:64:3c:ae:c1:31:80:7e:f8: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2C:4C:2F:34:21:3D:8C:26:4B:2D:DE:D5:41:8D:33:AD:F7:13:D1 X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ec:e9:d0:71:24:28:fd:3f:ed:e5:08:12:ac:69:9e:da:ed: 33:f1:c8:c5:62:08:0f:8b:54:8d:69:03:ab:2b:20:ed:4a:c2: da:d6:7c:da:38:75:d3:22:f9:bb:aa:74:ce:67:d0:96:08:3f: fc:93:e7:fd:43:c0:01:c0:80:1f:d3:65:b9:0a:6f:e5:60:07: 99:42:6b:ec:41:e8:bb:73:3d:52:e2:a7:d3:3f:c7:ab:b8:50: 8a:49:41:b9:90:3c:22:3e:b6:f3:8b:4a:95:da:08:9f:59:8e: 9f:2a:b1:1f:ad:d9:8f:fc:2b:e7:73:23:89:1b:2a:96:ab:60: 2b:c9:6c:a2:e2:7e:ab:00:d0:40:ae:b8:34:93:2c:38:be:06: b8:62:87:86:1c:04:ba:70:aa:d8:fa:1f:9c:7b:ba:0d:37:3b: 90:23:85:df:d9:20:1a:5c:bf:70:c5:98:9a:2e:b6:83:8e:1c: 34:3f:c8:50:b9:c6:fe:fc:26:c6:53:46:e9:1e:e8:9f:e5:0e: 6f:2c:73:ec:ed:17:5d:08:48:21:b8:cd:e6:ac:05:ec:7d:98: cf:fa:c9:31:7a:3e:73:ae:53:b4:7d:ff:0d:f0:3e:2e:00:fc: b8:59:1b:39:a1:b3:f7:68:cc:54:60:1f:35:02:93:83:e8:fd: 32:81:ff:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjUxMjIwMTY1MzQxWhcNMjUxMjI3MTY1MzQxWjAYMRYwFAYD VQQDDA02OTQ2ZDQ5NS1jNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneOB9B1b4F0aKxcGyeRxdO4BiU5Zu0Qv8bmoCheeN2jTUQEOFE2pE6P3xee/ SSAHU0Uvb9bUXbtC0/950c85jPYpajJ6TV74+nIqpZtOWChQa/xJm2Z3sxuYZnbT 0WyaDDRWPjyh45cq1pFLMVZ/LSE51K2txuSIfSqJ3v9a4datxDUfDkGhdu1JI7tm XEq2b50DJhLUJd9rPvbVahOyaDgPMdyBG5TNnuC3H7qSno3TPTyEilM56ZMRFpR5 OwEkMverQUIGVVfv6eUQ/s4ekryu64FF7Saiv2CgHkrwfjOp12A4QfrRwH3SY92Z n8xw38HxO43OZDyuwTGAfvh6rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUsTC80 IT2MJkst3tVBjTOt9xPRMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk7OnQcSQo/T/t5QgSrGme2u0z8cjFYggPi1SNaQOrKyDtSsLa1nza OHXTIvm7qnTOZ9CWCD/8k+f9Q8ABwIAf02W5Cm/lYAeZQmvsQei7cz1S4qfTP8er uFCKSUG5kDwiPrbzi0qV2gifWY6fKrEfrdmP/CvncyOJGyqWq2AryWyi4n6rANBA rrg0kyw4vga4YoeGHAS6cKrY+h+ce7oNNzuQI4Xf2SAaXL9wxZiaLraDjhw0P8hQ ucb+/CbGU0bpHuif5Q5vLHPs7RddCEghuM3mrAXsfZjP+skxej5zrlO0ff8N8D4u APy4WRs5obP3aMxUYB81ApOD6P0ygf/y -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:52 2025 by rpki-client