This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: hsfoQ5bylXqCiR1njJ/hrKpATDgLa46mVoK/XIDij1w= Subject key identifier: 4C:4E:C7:55:6F:B3:AC:FE:F7:9D:B1:36:74:E4:1E:DA:09:C1:D4:73 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: D0 Signing time: Sun 21 Dec 2025 04:54:51 +0000 Manifest this update: Sun 21 Dec 2025 04:54:51 +0000 Manifest next update: Sun 28 Dec 2025 04:54:51 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: qcx+QU2DrJjWPjNPT9x0BLfd0CJ62F0PQ65b92m2wxc=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Dec 21 04:54:51 2025 GMT Not After : Dec 28 04:54:51 2025 GMT Subject: CN=69477d9b-ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:7e:12:69:4e:06:19:30:38:60:ac:29:9c: 00:46:d4:42:01:57:3f:70:65:cf:f1:25:3c:28:56: 3f:07:9d:e0:69:e9:6f:59:9a:c7:b7:fd:5f:3c:7b: 2c:67:09:5b:2e:ce:d6:7b:df:fc:11:37:de:3a:6d: e6:b2:bc:ac:92:d9:7a:e1:6c:7e:8b:6a:77:b1:a7: 27:e1:68:6a:5d:6a:c1:e1:b2:14:58:61:13:24:f5: 52:3d:d4:3b:41:6f:14:6f:c8:83:bd:b4:17:76:0b: 9a:14:13:8f:34:fe:a6:3c:ce:72:ce:b5:d7:3d:04: 37:7c:10:ac:a9:1b:2c:4d:0e:54:ab:b1:e7:95:b2: 2f:9b:6d:b5:c5:5c:73:9e:c6:ea:a4:6e:67:7c:85: 9b:f2:a8:55:13:b1:d2:d2:c7:f1:c0:74:ba:eb:17: fc:3b:27:60:16:1b:06:18:24:39:62:4a:89:b8:18: 63:68:53:2c:9e:c0:ca:92:03:33:9d:b6:60:e5:5c: 4e:2f:79:63:f1:1f:96:54:89:dd:16:56:ea:c2:af: a7:7d:16:1b:78:a2:e6:d1:c8:3a:78:b7:44:be:ef: 0e:11:33:18:e1:ba:f6:9c:52:f1:91:54:ef:57:1b: 4d:b1:22:48:86:56:79:ef:5a:bf:98:9f:16:d4:03: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4E:C7:55:6F:B3:AC:FE:F7:9D:B1:36:74:E4:1E:DA:09:C1:D4:73 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a2:17:e3:47:57:2f:7b:36:0a:8e:a6:bf:3f:76:dc:a0:c7: b0:1b:fc:ea:ce:5c:00:80:ef:a2:ce:1e:cd:be:0f:f8:51:14: b8:d5:db:eb:65:6d:96:86:6d:d3:56:55:b6:26:37:ad:a6:96: 91:87:14:b5:04:85:e4:d5:e4:2e:54:ba:1b:20:ac:33:5a:1a: e0:e8:cb:3c:16:44:f6:fa:0b:58:37:80:a7:93:16:f4:fa:7f: 29:36:63:e7:c8:6f:8e:99:8b:24:20:27:13:39:d6:31:30:dd: bd:ab:df:fc:61:68:7e:b8:67:35:7b:5e:28:3f:3f:9e:d8:3c: 62:1a:06:d8:32:ff:5a:32:be:25:37:5e:e9:d6:f2:ba:7f:e8: 1f:c0:a8:ff:0b:38:84:ee:89:73:63:d8:83:78:87:f3:a4:70: 50:ef:3a:70:38:b9:ff:5c:0f:a8:f8:8a:f8:f3:fa:da:cf:09: 94:5c:70:4e:fb:49:5f:18:e2:8b:cb:ba:62:56:1d:da:6c:46: b2:32:99:44:2a:90:9a:43:26:c4:af:8f:91:08:a2:20:59:7a: a2:78:8e:14:5c:23:64:34:b5:e3:b2:17:84:d8:3d:4f:5e:be: 1d:33:4f:94:ed:7e:35:a0:4a:4c:6b:31:b2:54:fc:d0:05:13: 59:96:62:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2 OURDNTc4QTAwHhcNMjUxMjIxMDQ1NDUxWhcNMjUxMjI4MDQ1NDUxWjAYMRYwFAYD VQQDDA02OTQ3N2Q5Yi1mZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0F+EmlOBhkwOGCsKZwARtRCAVc/cGXP8SU8KFY/B53gaelvWZrHt/1fPHss ZwlbLs7We9/8ETfeOm3msrysktl64Wx+i2p3sacn4WhqXWrB4bIUWGETJPVSPdQ7 QW8Ub8iDvbQXdguaFBOPNP6mPM5yzrXXPQQ3fBCsqRssTQ5Uq7HnlbIvm221xVxz nsbqpG5nfIWb8qhVE7HS0sfxwHS66xf8OydgFhsGGCQ5YkqJuBhjaFMsnsDKkgMz nbZg5VxOL3lj8R+WVIndFlbqwq+nfRYbeKLm0cg6eLdEvu8OETMY4br2nFLxkVTv VxtNsSJIhlZ571q/mJ8W1AOSbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExOx1Vv s6z+952xNnTkHtoJwdRzMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIohfjR1cvezYKjqa/P3bcoMewG/zqzlwAgO+izh7Nvg/4URS41dvr ZW2Whm3TVlW2JjetppaRhxS1BIXk1eQuVLobIKwzWhrg6Ms8FkT2+gtYN4Cnkxb0 +n8pNmPnyG+OmYskICcTOdYxMN29q9/8YWh+uGc1e14oPz+e2DxiGgbYMv9aMr4l N17p1vK6f+gfwKj/CziE7olzY9iDeIfzpHBQ7zpwOLn/XA+o+Ir48/razwmUXHBO +0lfGOKLy7piVh3abEayMplEKpCaQybEr4+RCKIgWXqieI4UXCNkNLXjsheE2D1P Xr4dM0+U7X41oEpMazGyVPzQBRNZlmIe -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:46 2025 by rpki-client