This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: elkepe8FXiEecxehLKzw+Ije0RuED3vxigkcQE5rl+A= Subject key identifier: 5A:AF:D8:B6:3F:53:84:EE:29:64:02:50:C3:3E:C5:30:3A:DE:E4:5B Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 03D6 Signing time: Sat 20 Dec 2025 23:50:29 +0000 Manifest this update: Sat 20 Dec 2025 23:50:29 +0000 Manifest next update: Sat 27 Dec 2025 23:50:29 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: W5yhUQDCMS03hZzgKwyV7sezExKRlIJVYIRRKnKWJXo=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Dec 20 23:50:29 2025 GMT Not After : Dec 27 23:50:29 2025 GMT Subject: CN=69473645-7664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:a0:db:25:81:54:4b:06:07:cf:e9:33:b9: 02:46:88:e4:d1:21:64:70:fe:08:77:79:95:8c:99: a1:03:36:bb:4c:3e:68:cd:60:2c:8e:6d:8d:ba:c1: a7:c4:c1:50:97:1d:47:81:17:d1:84:a8:49:d3:5a: 3f:46:76:0f:9a:9d:45:e4:2a:8c:55:8b:e8:4c:71: 0f:5a:06:df:b5:b0:a4:4d:a2:db:d2:fc:0b:00:26: 01:aa:9f:55:67:35:fa:27:f5:08:6c:a4:b7:1b:80: 80:ac:6e:9b:28:33:58:74:d6:51:a4:a6:95:9d:df: a9:d9:06:de:9e:cf:fa:45:c2:80:1d:d8:7c:26:ed: 01:b5:b0:1f:02:2f:10:25:b3:8d:13:05:f4:87:c6: f9:eb:0d:bb:d6:70:c0:d2:f3:7d:f7:38:55:25:4c: f3:36:cb:68:cc:12:0f:19:9f:93:c6:94:d8:ce:cb: a0:24:e5:74:08:ac:69:b8:38:d7:fb:3c:01:70:b8: 2c:b1:0e:7a:80:a1:cc:f7:65:43:db:2f:a9:a2:ff: 05:ba:03:8e:fa:b4:f7:cc:ad:3f:db:ff:d2:2a:00: fe:97:03:5e:88:30:e4:5a:7d:15:3e:6d:eb:87:4f: 88:91:80:b5:d3:4d:6c:45:3a:a2:ac:bd:da:15:91: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AF:D8:B6:3F:53:84:EE:29:64:02:50:C3:3E:C5:30:3A:DE:E4:5B X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ba:38:ef:e4:8c:af:76:e3:7f:08:81:8d:ca:2d:ad:84:26: bb:ff:89:9b:03:1f:0c:f2:f3:d8:ee:7e:6c:d8:d1:dd:86:06: 9c:42:ea:e3:8f:43:8b:65:e3:0e:4b:d0:f8:1a:19:31:50:ff: 59:cd:a8:b3:69:83:36:4b:d5:89:92:31:fc:f6:11:0a:15:dd: d2:a6:7c:24:50:28:44:e4:1b:99:46:2d:60:7d:c3:42:21:0d: e9:3f:7d:40:63:b0:10:e0:49:a4:97:c7:b0:ea:e1:d5:e9:85: 80:56:8c:d2:dc:be:bd:4d:34:d8:95:f1:b8:b0:46:37:4c:52: 32:5a:28:e1:83:11:d8:d9:c1:b0:2c:ed:0f:da:23:bf:61:39: 9e:aa:6e:78:9c:0d:d5:13:5a:4e:bc:d4:7b:0d:39:37:35:8f: cd:65:a3:a9:ff:5c:be:36:33:32:25:be:cf:1f:92:3b:f3:1d: 23:06:cf:85:7d:aa:eb:27:8a:b2:a1:da:29:b3:b4:55:0f:b3: 10:07:b6:95:b5:ed:5f:06:24:c3:02:fe:1f:68:80:66:4d:46: dd:e2:23:26:14:10:05:c0:d3:36:4f:a0:63:04:2e:c5:ef:0c: 95:f4:43:b3:e4:98:6d:0c:9a:32:8e:da:22:6e:15:bf:71:6f: aa:b3:93:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUxMjIwMjM1MDI5WhcNMjUxMjI3MjM1MDI5WjAYMRYwFAYD VQQDDA02OTQ3MzY0NS03NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfmg2yWBVEsGB8/pM7kCRojk0SFkcP4Id3mVjJmhAza7TD5ozWAsjm2NusGn xMFQlx1HgRfRhKhJ01o/RnYPmp1F5CqMVYvoTHEPWgbftbCkTaLb0vwLACYBqp9V ZzX6J/UIbKS3G4CArG6bKDNYdNZRpKaVnd+p2Qbens/6RcKAHdh8Ju0BtbAfAi8Q JbONEwX0h8b56w271nDA0vN99zhVJUzzNstozBIPGZ+TxpTYzsugJOV0CKxpuDjX +zwBcLgssQ56gKHM92VD2y+pov8FugOO+rT3zK0/2//SKgD+lwNeiDDkWn0VPm3r h0+IkYC1001sRTqirL3aFZFRPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqv2LY/ U4TuKWQCUMM+xTA63uRbMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvujjv5IyvduN/CIGNyi2thCa7/4mbAx8M8vPY7n5s2NHdhgacQurj j0OLZeMOS9D4GhkxUP9ZzaizaYM2S9WJkjH89hEKFd3SpnwkUChE5BuZRi1gfcNC IQ3pP31AY7AQ4Emkl8ew6uHV6YWAVozS3L69TTTYlfG4sEY3TFIyWijhgxHY2cGw LO0P2iO/YTmeqm54nA3VE1pOvNR7DTk3NY/NZaOp/1y+NjMyJb7PH5I78x0jBs+F farrJ4qyodops7RVD7MQB7aVte1fBiTDAv4faIBmTUbd4iMmFBAFwNM2T6BjBC7F 7wyV9EOz5JhtDJoyjtoibhW/cW+qs5MB -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:33 2025 by rpki-client