This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: ISemuIZQgBcUJ9jo9Ql+8cDTjMrnhBFSPb27ilqghzw= Subject key identifier: 29:CF:4E:DC:38:4A:14:94:96:1D:14:A4:EB:C6:A7:E1:16:0B:9D:3A Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 04CC Signing time: Mon 22 Dec 2025 22:54:46 +0000 Manifest this update: Mon 22 Dec 2025 22:54:46 +0000 Manifest next update: Mon 29 Dec 2025 22:54:46 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: Hqm5b5CjwccLdOwW2qLbyn66qNMXopIUe+9R57L6RJI=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: h/s9RyXLHAI1sqd9uwegBKrHWXm8UIc8RPznkO0q/SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Dec 22 22:54:46 2025 GMT Not After : Dec 29 22:54:46 2025 GMT Subject: CN=6949cc36-ab80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:ad:dc:b8:a8:9f:79:b3:f4:7f:f3:be:1e: 5c:77:f4:88:08:99:e1:cf:a6:1e:9b:06:be:bc:48: be:42:7d:59:8a:84:9e:67:09:3d:fd:ea:ee:8c:fc: 49:05:d2:b1:cf:e1:47:4e:c0:c8:a4:23:99:f8:5c: 9c:2a:e8:15:7d:2e:52:1a:f0:1d:fd:16:24:54:ee: 24:66:66:5f:bf:a9:19:98:04:84:47:1a:78:98:eb: 8a:6f:ec:5d:32:5c:50:ef:88:b0:8a:14:07:29:3d: f2:16:f4:d5:2a:1a:da:a7:7b:c5:47:07:b7:a2:b1: 6d:9e:b6:74:39:eb:2b:d9:93:f7:5a:d3:9a:ae:d1: 43:53:b8:41:54:33:a9:a8:08:ba:48:75:53:6e:3d: 11:38:3d:fd:06:27:ca:1c:ae:24:7b:5f:e8:bd:40: ca:0e:8b:fe:c4:d8:08:82:ce:cc:04:04:7d:78:12: fe:bb:0f:d1:68:f2:cf:f8:48:90:0f:fe:11:a4:40: 49:c1:6e:35:75:7d:08:d4:b1:3e:5e:c8:32:ea:7e: 6c:89:ad:2e:a7:a5:91:18:38:ba:79:91:ed:2a:30: ae:ec:9e:d5:dd:a1:5c:78:e5:7c:fe:4c:ca:17:41: f5:f2:0b:b8:05:a0:16:5f:41:35:a7:ab:2c:08:ad: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CF:4E:DC:38:4A:14:94:96:1D:14:A4:EB:C6:A7:E1:16:0B:9D:3A X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:76:f3:2a:4e:43:d2:e3:82:c1:b2:e8:bf:cf:56:08:7f:0f: 3b:ec:2a:63:91:b2:e8:21:f3:c6:97:ab:35:82:0b:04:16:36: 6e:60:17:dc:69:3b:af:4c:03:d9:37:1e:9d:6d:49:73:77:45: cc:e7:a8:9d:00:ed:6a:e4:92:c3:ca:5a:42:0d:ba:db:36:b2: c3:ae:6a:60:54:ec:b6:3d:1b:db:7e:a7:ec:cd:54:52:ed:b6: 50:7d:6c:23:00:dc:3c:1b:83:ef:62:a9:b7:59:66:19:49:da: 63:92:82:4d:36:32:a6:98:21:96:d1:c6:11:31:80:fc:75:5d: 8f:b8:76:47:26:05:48:b7:e1:e8:c6:3b:32:9a:01:e6:61:a9: 0b:51:39:1a:24:58:7b:e2:33:58:72:11:9f:89:32:6c:d9:30: d7:72:08:81:3a:78:d2:89:79:16:4c:9f:59:f3:ac:c3:8a:cc: 3b:af:0f:89:32:d5:ca:87:29:da:53:a4:02:cb:43:b3:f4:3b: 58:ef:32:70:fd:82:18:63:6d:76:ae:00:2d:f5:b3:86:a3:30: 44:29:08:ac:62:cf:57:26:03:3d:e1:0c:34:e3:97:f6:f8:8f: 12:f6:c9:53:45:2b:b6:08:cb:88:37:0b:10:30:3a:f2:42:00: 6d:7e:34:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUxMjIyMjI1NDQ2WhcNMjUxMjI5MjI1NDQ2WjAYMRYwFAYD VQQDDA02OTQ5Y2MzNi1hYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLit3Lion3mz9H/zvh5cd/SICJnhz6Yemwa+vEi+Qn1ZioSeZwk9/erujPxJ BdKxz+FHTsDIpCOZ+FycKugVfS5SGvAd/RYkVO4kZmZfv6kZmASERxp4mOuKb+xd MlxQ74iwihQHKT3yFvTVKhrap3vFRwe3orFtnrZ0Oesr2ZP3WtOartFDU7hBVDOp qAi6SHVTbj0ROD39BifKHK4ke1/ovUDKDov+xNgIgs7MBAR9eBL+uw/RaPLP+EiQ D/4RpEBJwW41dX0I1LE+Xsgy6n5sia0up6WRGDi6eZHtKjCu7J7V3aFceOV8/kzK F0H18gu4BaAWX0E1p6ssCK234wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnPTtw4 ShSUlh0UpOvGp+EWC506MB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHdvMqTkPS44LBsui/z1YIfw877CpjkbLoIfPGl6s1ggsEFjZuYBfc aTuvTAPZNx6dbUlzd0XM56idAO1q5JLDylpCDbrbNrLDrmpgVOy2PRvbfqfszVRS 7bZQfWwjANw8G4PvYqm3WWYZSdpjkoJNNjKmmCGW0cYRMYD8dV2PuHZHJgVIt+Ho xjsymgHmYakLUTkaJFh74jNYchGfiTJs2TDXcgiBOnjSiXkWTJ9Z86zDisw7rw+J MtXKhynaU6QCy0Oz9DtY7zJw/YIYY212rgAt9bOGozBEKQisYs9XJgM94Qw045f2 +I8S9slTRSu2CMuINwsQMDryQgBtfjT+ -----END CERTIFICATE-----Generated at Tue Dec 23 22:28:01 2025 by rpki-client