This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: 1eWHfSa151Uew3CHnW5y+vFucQu2bMgu8UhQEsSd+mE= Subject key identifier: 81:58:4F:FD:08:8C:1E:3D:A1:73:44:80:11:AB:C1:4F:42:61:E0:FB Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 0743 Signing time: Thu 18 Dec 2025 21:09:06 +0000 Manifest this update: Thu 18 Dec 2025 21:09:05 +0000 Manifest next update: Thu 25 Dec 2025 21:09:05 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: BrrH+UnkV7POW80xSn8FTDsDnmfbbp2r9hmsRkXU+6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: Dec 18 21:09:05 2025 GMT Not After : Dec 25 21:09:05 2025 GMT Subject: CN=69446d71-3021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:94:75:1f:e5:48:2e:8a:3c:5b:38:b6:f0: 10:a9:cc:2d:05:86:43:9e:0f:e7:1c:07:a1:47:ed: ed:a2:cf:c1:df:ec:3e:a8:eb:d2:ec:8c:2e:d5:d2: d7:95:b0:20:b6:10:33:47:f3:f5:eb:dc:02:ec:49: 96:75:9b:5a:b5:47:66:61:75:a0:a3:6a:dc:2e:35: 2e:61:32:f7:81:b5:fe:b5:dc:5c:7c:d6:23:cd:81: b0:cd:f2:07:07:23:7c:f3:27:d2:f5:07:c3:43:b8: 14:1d:3c:30:d0:97:72:ae:e9:ed:a7:c0:5b:74:03: 14:a1:b7:7a:e9:11:ba:7b:7c:d4:1d:c6:8b:a6:e3: dc:3b:dd:b5:a0:8d:a7:08:7e:af:33:0d:6d:73:2a: 6c:57:7a:16:09:3e:13:63:b9:30:4c:2f:55:6a:5e: 75:23:de:86:e7:af:18:9a:23:42:00:9a:10:0f:60: 9b:40:34:da:16:9a:b2:8d:64:69:8b:37:eb:43:e1: 63:6a:8b:2d:d3:cb:0b:d7:22:5f:4f:f3:ba:4f:ae: e2:df:52:10:2b:80:cd:9b:60:24:5f:58:1f:0e:f1: 8e:cd:f2:c4:22:b9:2c:23:8b:60:d5:bb:7d:61:a6: 9b:53:02:46:4a:a8:92:6f:5f:ef:d6:8a:45:0e:4f: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:58:4F:FD:08:8C:1E:3D:A1:73:44:80:11:AB:C1:4F:42:61:E0:FB X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c9:34:8f:23:24:6c:45:34:8a:5d:a9:e3:f5:60:ff:8f:de: d8:eb:6a:11:5b:d9:1c:de:d4:da:b6:c8:12:44:77:12:87:d7: 17:b1:d6:29:95:76:41:ea:af:a0:61:1a:c7:2e:4b:61:5b:b0: bc:fa:ed:ea:c1:3a:28:9d:14:34:9f:43:17:f7:b0:38:e9:07: f0:66:7b:cd:3b:a6:31:29:62:2f:d9:7a:6a:4c:74:33:44:a4: 03:48:4b:76:1c:01:07:4f:85:d7:5b:f8:46:44:d8:23:01:50: 97:2d:c9:17:be:c7:09:9a:2d:2b:a5:6e:3b:cc:6c:07:c2:a5: 42:d5:8f:b6:50:47:7f:d5:34:18:4d:4f:7c:b1:1c:6c:a4:6b: 66:4b:e1:09:8f:ef:3f:de:45:49:7a:46:52:38:c1:a5:44:bb: ea:61:66:80:21:44:da:46:ea:50:ed:fd:c0:e5:d8:ab:18:f7: f8:23:49:80:44:27:5c:4e:58:8e:af:23:bf:38:c7:cb:a4:22: e3:cc:aa:7a:25:9d:45:59:c2:75:0d:02:02:d6:b7:e5:65:20: fa:52:6e:41:c2:b6:43:f9:95:05:66:55:14:05:b7:81:65:22: fa:1f:a0:de:f5:da:c4:85:83:d4:8d:bb:7b:8a:3a:ae:32:be: 40:0d:7a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjUxMjE4MjEwOTA1WhcNMjUxMjI1MjEwOTA1WjAYMRYwFAYD VQQDDA02OTQ0NmQ3MS0zMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkK2UdR/lSC6KPFs4tvAQqcwtBYZDng/nHAehR+3tos/B3+w+qOvS7Iwu1dLX lbAgthAzR/P169wC7EmWdZtatUdmYXWgo2rcLjUuYTL3gbX+tdxcfNYjzYGwzfIH ByN88yfS9QfDQ7gUHTww0Jdyruntp8BbdAMUobd66RG6e3zUHcaLpuPcO921oI2n CH6vMw1tcypsV3oWCT4TY7kwTC9Val51I96G568YmiNCAJoQD2CbQDTaFpqyjWRp izfrQ+Fjaost08sL1yJfT/O6T67i31IQK4DNm2AkX1gfDvGOzfLEIrksI4tg1bt9 YaabUwJGSqiSb1/v1opFDk/PLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFYT/0I jB49oXNEgBGrwU9CYeD7MB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCByTSPIyRsRTSKXanj9WD/j97Y62oRW9kc3tTatsgSRHcSh9cXsdYp lXZB6q+gYRrHLkthW7C8+u3qwToonRQ0n0MX97A46QfwZnvNO6YxKWIv2XpqTHQz RKQDSEt2HAEHT4XXW/hGRNgjAVCXLckXvscJmi0rpW47zGwHwqVC1Y+2UEd/1TQY TU98sRxspGtmS+EJj+8/3kVJekZSOMGlRLvqYWaAIUTaRupQ7f3A5dirGPf4I0mA RCdcTliOryO/OMfLpCLjzKp6JZ1FWcJ1DQIC1rflZSD6Um5BwrZD+ZUFZlUUBbeB ZSL6H6De9drEhYPUjbt7ijquMr5ADXoi -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:56 2025 by rpki-client