This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json) Hash identifier: DF5EEYDXSxLyUTCgrPOQFnzH4DT+lCMvJBj3/VHgTrs= Subject key identifier: 8E:1B:CD:30:80:02:BE:27:28:F1:49:5C:DB:F3:09:F6:0E:8B:A7:27 Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft Manifest number: 0113 Signing time: Sun 21 Dec 2025 04:04:09 +0000 Manifest this update: Sun 21 Dec 2025 04:04:09 +0000 Manifest next update: Sun 28 Dec 2025 04:04:09 +0000 Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: Xl0x7WBmpLy5wQoKOsTg0anqB4Lb5YRB3j4nHleXv/s=) 2: E36214403D0011EFAD623342C4F9AE02.roa (hash: AwYKGbCuVNqR5TnlD+W51Ob1Ci3CK6EmFUtU8criHKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Validity Not Before: Dec 21 04:04:09 2025 GMT Not After : Dec 28 04:04:09 2025 GMT Subject: CN=694771b9-0ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:58:d9:96:b7:2d:ce:ff:6e:11:e4:5c:e8: fb:4f:d1:21:d3:99:4f:73:67:30:f4:7c:50:1c:88: fd:dc:54:50:ce:46:03:ac:fe:fd:c8:b3:92:53:55: 1d:a5:31:4c:bb:2b:90:60:f7:ee:15:65:e3:23:dd: e5:fc:c6:c1:27:17:29:f3:e2:ef:9b:9a:d2:4e:91: 50:1f:2e:d0:61:66:dc:41:c6:34:3a:d5:5c:3b:76: 34:c0:5b:1c:06:50:93:7e:37:be:f4:c1:87:c6:0f: e3:1f:8c:97:ff:be:82:8f:f2:27:da:98:4d:7b:3f: 9a:ab:80:df:57:13:5b:4e:f3:06:cc:9d:f1:d8:17: a2:4c:59:6d:91:ad:6f:37:dc:13:c9:7a:13:4e:fc: 97:23:b1:a3:8b:96:d3:ad:77:ea:0b:21:83:89:0d: af:55:f8:ec:71:ef:dd:17:2a:ef:ec:62:f6:f4:f8: f8:1f:d3:ba:3e:7c:d9:49:f6:b2:3b:cd:21:0e:d9: a6:00:81:8f:b3:ec:50:67:96:3a:5f:f2:7f:3f:b6: ee:07:0c:a3:12:48:a3:5a:c6:68:91:19:09:45:1e: fe:bf:52:01:57:7b:d5:c6:11:cf:37:f8:34:12:10: 1c:04:b4:36:5a:15:8a:f1:8c:00:17:cb:27:c7:0e: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1B:CD:30:80:02:BE:27:28:F1:49:5C:DB:F3:09:F6:0E:8B:A7:27 X509v3 Authority Key Identifier: keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3d:b9:6d:f0:68:85:37:d6:54:dc:d0:b9:6b:1c:da:c8:85: d2:15:9f:c8:1e:14:11:fa:3e:72:8d:dd:76:13:fd:5f:30:b4: a2:e1:45:77:9d:56:36:99:9c:3f:5a:c7:79:5b:38:eb:96:a1: dc:b3:76:94:65:42:79:ec:08:71:fc:d5:c7:a2:f3:9b:5b:22: 50:95:8c:2a:b2:3b:f0:68:fb:c9:e5:07:a3:61:72:e1:6c:8e: b8:8c:01:d5:71:83:6d:0a:1d:c8:0b:4e:f4:3c:d5:18:8a:80: 20:78:0a:02:d4:f1:f3:4a:1e:56:23:fc:d1:7c:ce:b8:26:52: fe:7d:77:82:38:96:bd:cb:08:e8:80:16:1d:a8:30:1d:d1:bd: 3f:6f:9a:e1:4a:8a:3f:04:eb:1a:ec:49:e2:49:71:c3:0a:d6: cd:93:1b:fc:83:8c:71:69:e7:db:f5:c2:b2:c5:e4:9e:b5:86: 68:d3:63:74:91:5c:7d:f4:17:c6:34:e4:57:bd:c5:a3:42:54: a8:46:89:87:e6:c8:d7:4f:3a:b4:37:ec:f5:08:5f:a9:b1:53: 4e:09:3e:c9:af:b2:02:54:f6:58:bc:f3:23:fd:4f:54:5d:59: 26:16:f5:b9:82:48:68:85:b0:11:02:1c:60:3c:15:a9:53:a2: 8f:b2:30:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4 ODYzNTZGNEQwHhcNMjUxMjIxMDQwNDA5WhcNMjUxMjI4MDQwNDA5WjAYMRYwFAYD VQQDDA02OTQ3NzFiOS0wYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQRY2Za3Lc7/bhHkXOj7T9Eh05lPc2cw9HxQHIj93FRQzkYDrP79yLOSU1Ud pTFMuyuQYPfuFWXjI93l/MbBJxcp8+Lvm5rSTpFQHy7QYWbcQcY0OtVcO3Y0wFsc BlCTfje+9MGHxg/jH4yX/76Cj/In2phNez+aq4DfVxNbTvMGzJ3x2BeiTFltka1v N9wTyXoTTvyXI7Gji5bTrXfqCyGDiQ2vVfjsce/dFyrv7GL29Pj4H9O6PnzZSfay O80hDtmmAIGPs+xQZ5Y6X/J/P7buBwyjEkijWsZokRkJRR7+v1IBV3vVxhHPN/g0 EhAcBLQ2WhWK8YwAF8snxw6tywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4bzTCA Ar4nKPFJXNvzCfYOi6cnMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAPblt8GiFN9ZU3NC5axzayIXSFZ/IHhQR+j5yjd12E/1fMLSi4UV3 nVY2mZw/Wsd5WzjrlqHcs3aUZUJ57Ahx/NXHovObWyJQlYwqsjvwaPvJ5QejYXLh bI64jAHVcYNtCh3IC070PNUYioAgeAoC1PHzSh5WI/zRfM64JlL+fXeCOJa9ywjo gBYdqDAd0b0/b5rhSoo/BOsa7EniSXHDCtbNkxv8g4xxaefb9cKyxeSetYZo02N0 kVx99BfGNORXvcWjQlSoRomH5sjXTzq0N+z1CF+psVNOCT7Jr7ICVPZYvPMj/U9U XVkmFvW5gkhohbARAhxgPBWpU6KPsjDK -----END CERTIFICATE-----Generated at Mon Dec 22 10:07:30 2025 by rpki-client