This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: lPhnbRt5XjLaFQQQgpvgGZyjJs0nMMF8accdRv3/Xjk= Subject key identifier: 1E:64:4E:3A:77:2D:06:D5:12:AA:77:D5:2F:B9:9A:81:40:78:BA:87 Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: 98 Signing time: Wed 31 Dec 2025 05:28:10 +0000 Manifest this update: Wed 31 Dec 2025 05:28:09 +0000 Manifest next update: Wed 07 Jan 2026 05:28:09 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: /3mW0BDyrE/fwkHr5J0cdSy3PWDs1/hw8oDXx6BliF0=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: 39w+18fUPSiKVB8OhUL0ki9Bi8qUl1J3wP6kCBvBYqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 05:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: Dec 31 05:28:09 2025 GMT Not After : Jan 7 05:28:09 2026 GMT Subject: CN=6954b46a-cb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:cd:54:ea:63:86:4d:26:d0:d2:6d:3b:9e: a6:7c:72:e2:07:31:9a:ce:c0:cf:d4:08:80:21:7a: 8f:21:fb:89:7d:c1:4d:09:97:94:be:da:39:ed:49: ac:fd:a4:98:4a:e9:08:d3:e8:62:dd:84:ac:23:7b: 2c:d3:28:2e:0e:3b:d9:f9:08:e1:62:21:a3:fb:22: a2:6c:74:a0:b3:bb:7e:e6:5e:6e:cb:39:ed:a1:41: 3f:b1:58:73:d4:9a:11:38:5e:d2:cb:d7:f3:cf:55: bb:90:4e:fe:1a:6a:6e:0d:38:9f:f9:c9:e8:99:fd: 34:0a:88:fe:0f:92:20:5c:52:de:54:a7:9c:7e:ed: 49:8e:c0:08:0b:12:e2:26:b7:73:21:cc:27:bc:71: 26:5f:71:0f:9b:1e:26:82:78:54:9c:21:84:78:c1: 83:79:8d:23:6e:cf:1d:50:3c:c8:c6:6b:de:0d:1e: dd:d7:f5:bf:ba:38:3f:f0:2e:12:72:7f:82:11:a2: c6:ad:52:d7:b0:ab:f9:c9:58:1c:68:3c:b8:9d:a0: 32:ae:3c:4c:b4:ef:c1:89:07:4b:a6:bd:fe:a6:11: e7:e3:fc:24:b8:28:e4:7e:b9:fd:cc:e8:34:2e:88: 91:7a:3e:d1:80:5f:4f:5e:9a:17:6f:c6:a6:6c:cb: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:64:4E:3A:77:2D:06:D5:12:AA:77:D5:2F:B9:9A:81:40:78:BA:87 X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a6:8d:03:b6:90:93:aa:9c:86:ec:77:38:bd:15:3b:36:e9: 4a:df:1e:82:51:2d:9e:f7:bc:2e:4b:2e:b7:09:30:5b:36:3c: 90:03:90:2c:a7:65:8b:90:74:d7:e2:1e:26:7b:3e:89:c5:ee: ce:91:f6:b4:50:34:a4:1a:33:ca:41:c4:b3:6e:33:9a:ff:96: f5:17:ab:a5:a2:7a:0b:58:64:59:8b:32:41:57:11:ea:b1:56: b0:47:d2:66:20:fa:bb:5e:6e:3b:35:e6:54:af:c7:20:2b:bd: 95:e1:c4:9b:9e:24:37:3c:d2:fb:23:32:31:9b:a9:a1:2e:2d: 1c:2f:63:76:f1:08:00:f2:a6:d0:3a:cc:ec:b8:8f:ab:85:c3: 89:2d:38:9c:c7:23:a2:f9:f0:61:d8:0e:37:03:c0:5a:88:da: 8c:35:d3:0b:9a:be:9d:42:2c:8b:9b:24:81:cd:32:c9:91:3f: e6:15:09:19:5c:62:d6:65:71:e8:ad:e4:39:7f:11:34:50:ae: 68:8e:ea:95:0f:e5:e3:7e:73:35:fd:50:6d:21:b0:24:70:0d: e7:1c:1f:3f:43:f1:bb:41:93:9a:3c:15:2f:74:fe:93:e7:7f: 93:52:0c:eb:bf:8c:86:65:8c:bc:cc:18:d8:12:a6:76:cc:10: bf:b7:c9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2QzQxMTAvBgNVBAUTKEM3QzMyMzRCRDI2REFENjI5RTJEN0VGNDQ0NDg0RkU1 NDFEODE0OEUwHhcNMjUxMjMxMDUyODA5WhcNMjYwMTA3MDUyODA5WjAYMRYwFAYD VQQDDA02OTU0YjQ2YS1jYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DHNVOpjhk0m0NJtO56mfHLiBzGazsDP1AiAIXqPIfuJfcFNCZeUvto57Ums /aSYSukI0+hi3YSsI3ss0yguDjvZ+QjhYiGj+yKibHSgs7t+5l5uyzntoUE/sVhz 1JoROF7Sy9fzz1W7kE7+GmpuDTif+cnomf00Coj+D5IgXFLeVKecfu1JjsAICxLi JrdzIcwnvHEmX3EPmx4mgnhUnCGEeMGDeY0jbs8dUDzIxmveDR7d1/W/ujg/8C4S cn+CEaLGrVLXsKv5yVgcaDy4naAyrjxMtO/BiQdLpr3+phHn4/wkuCjkfrn9zOg0 LoiRej7RgF9PXpoXb8ambMskpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5kTjp3 LQbVEqp31S+5moFAeLqHMB8GA1UdIwQYMBaAFMfDI0vSba1ini1+9ERIT+VB2BSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzZDNC9DMTYwNTg1MkZF RUQxMUVGOUZGNkNFODBDNEY5QUUwMi94OE1qUzlKdHJXS2VMWDcwUkVoUDVVSFlG STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzZDNC9DMTYwNTg1MkZFRUQxMUVGOUZGNkNFODBDNEY5QUUwMi94OE1qUzlKdHJX S2VMWDcwUkVoUDVVSFlGSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVpo0DtpCTqpyG7Hc4vRU7NulK3x6CUS2e97wuSy63CTBbNjyQA5As p2WLkHTX4h4mez6Jxe7Okfa0UDSkGjPKQcSzbjOa/5b1F6ulonoLWGRZizJBVxHq sVawR9JmIPq7Xm47NeZUr8cgK72V4cSbniQ3PNL7IzIxm6mhLi0cL2N28QgA8qbQ OszsuI+rhcOJLTicxyOi+fBh2A43A8BaiNqMNdMLmr6dQiyLmySBzTLJkT/mFQkZ XGLWZXHoreQ5fxE0UK5ojuqVD+XjfnM1/VBtIbAkcA3nHB8/Q/G7QZOaPBUvdP6T 53+TUgzrv4yGZYy8zBjYEqZ2zBC/t8ka -----END CERTIFICATE-----Generated at Wed Dec 31 10:48:28 2025 by rpki-client