This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json) Hash identifier: OgPxno+o3H0WJT7/B+xf4NcFGLIamqaKgJwKcG+VsjM= Subject key identifier: 26:54:8C:F3:01:EE:97:D1:73:57:3C:D0:98:BC:DB:D7:90:30:F5:52 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft Manifest number: 28 Signing time: Fri 19 Dec 2025 06:36:13 +0000 Manifest this update: Fri 19 Dec 2025 06:36:13 +0000 Manifest next update: Fri 26 Dec 2025 06:36:13 +0000 Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: 69eMT+1SGuOJrtWK9mlwVTPppJeJgewtrZ9ifYXH/IY=) 2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: Qyc81RIKSdu+FLrquo5aMNKuhSqU44VyZkyWHyn1G+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Dec 19 06:36:13 2025 GMT Not After : Dec 26 06:36:13 2025 GMT Subject: CN=6944f25d-e58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:92:ab:d0:07:04:d3:4a:70:ab:e6:4d:dc:16: ea:51:80:47:4c:1d:66:7f:05:79:07:fe:4f:0c:43: c1:a8:16:cf:73:f3:3d:f6:70:e6:44:d3:0f:ad:78: 86:7e:41:ab:a2:2f:4f:e6:f9:c0:02:db:f0:1f:87: 5a:ae:6a:d0:2b:f2:6f:8c:59:ec:66:6e:a6:c7:2a: 7c:3a:1d:54:d0:8f:1c:94:1b:08:3b:5f:4a:c1:58: 1e:63:b5:d5:8c:8e:b3:35:0f:3b:6f:98:7b:2f:d7: 8d:1d:31:20:09:21:b6:18:97:c4:04:7d:98:6e:4b: 9a:b1:2f:f4:04:8c:ec:05:c2:61:98:82:85:54:01: cb:d4:c7:da:dd:ea:bc:27:b3:bb:9e:7e:6e:15:17: d0:c9:7a:d7:da:ad:d5:fd:00:44:30:2d:a7:f3:d2: 5b:8e:15:eb:8f:7c:d7:18:0e:fe:48:64:88:44:d6: b4:f8:06:38:aa:71:0b:e5:38:c6:f1:38:4c:b6:6f: 08:88:11:76:2f:5b:18:8a:46:42:31:5e:b9:bd:60: 60:39:b2:20:7e:38:11:82:b9:8f:17:cb:6a:6b:a2: d8:44:a2:68:f8:66:b3:69:b2:1b:54:d6:0d:63:d2: ec:f8:92:2e:5b:26:5c:b3:b7:8c:ac:93:9b:d6:33: 1a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:54:8C:F3:01:EE:97:D1:73:57:3C:D0:98:BC:DB:D7:90:30:F5:52 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:4b:02:5e:e1:5f:d6:ff:dc:cf:36:25:05:f7:47:0e:5a:19: 41:82:9d:a6:65:4f:51:f0:81:f9:91:bc:c2:53:83:8e:8c:66: 41:82:6c:09:f0:c9:a0:3b:b3:b1:ee:82:04:06:49:63:5a:0b: cd:62:9e:1e:0a:44:44:ef:83:e8:43:a5:51:79:77:ee:e1:61: 5e:55:63:ff:31:30:45:2f:95:af:51:65:62:e7:3a:48:28:95: 74:95:c5:52:04:95:57:a8:10:c7:8b:42:df:f9:81:21:0c:ae: cd:6d:fc:f7:1a:17:c4:08:67:32:52:72:87:92:25:20:0c:ea: 86:2b:c0:b2:e1:de:e8:60:23:a2:5c:17:c2:bf:e6:bb:a4:43: 56:22:6a:d1:dc:6f:e2:07:cf:e0:77:61:50:a2:7b:13:fb:79: 43:71:f4:82:e9:10:2c:5c:0f:54:ca:66:b3:52:aa:25:32:53: 98:6e:7d:5e:4f:de:71:93:ea:6b:1a:60:80:76:d0:65:84:8d: 7b:a1:fc:81:b8:fa:77:f7:57:c1:37:7d:f4:7d:c6:b5:6d:fb: a4:71:44:03:99:ed:f9:d2:bd:94:d3:74:47:20:06:89:44:06: d9:0d:0f:dd:a0:88:63:10:29:5b:0a:1a:be:e2:9d:38:0b:06: 0e:4c:65:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNTEyMTkwNjM2MTNaFw0yNTEyMjYwNjM2MTNaMBgxFjAUBgNV BAMMDTY5NDRmMjVkLWU1OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbkqvQBwTTSnCr5k3cFupRgEdMHWZ/BXkH/k8MQ8GoFs9z8z32cOZE0w+teIZ+ QauiL0/m+cAC2/Afh1quatAr8m+MWexmbqbHKnw6HVTQjxyUGwg7X0rBWB5jtdWM jrM1DztvmHsv140dMSAJIbYYl8QEfZhuS5qxL/QEjOwFwmGYgoVUAcvUx9rd6rwn s7uefm4VF9DJetfardX9AEQwLafz0luOFeuPfNcYDv5IZIhE1rT4BjiqcQvlOMbx OEy2bwiIEXYvWxiKRkIxXrm9YGA5siB+OBGCuY8Xy2prothEomj4ZrNpshtU1g1j 0uz4ki5bJlyzt4ysk5vWMxrLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJlSM8wHu l9FzVzzQmLzb15Aw9VIwHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr Z25qbjktMVBWRnQzZWVQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVLAl7hX9b/3M82JQX3Rw5aGUGCnaZlT1HwgfmRvMJTg46MZkGCbAnw yaA7s7HuggQGSWNaC81inh4KRETvg+hDpVF5d+7hYV5VY/8xMEUvla9RZWLnOkgo lXSVxVIElVeoEMeLQt/5gSEMrs1t/PcaF8QIZzJScoeSJSAM6oYrwLLh3uhgI6Jc F8K/5rukQ1YiatHcb+IHz+B3YVCiexP7eUNx9ILpECxcD1TKZrNSqiUyU5hufV5P 3nGT6msaYIB20GWEjXuh/IG4+nf3V8E3ffR9xrVt+6RxRAOZ7fnSvZTTdEcgBolE BtkND92giGMQKVsKGr7inTgLBg5MZeE= -----END CERTIFICATE-----Generated at Sun Dec 21 01:20:19 2025 by rpki-client