This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: P4wAJ2g1Epyve3LILL+WhFuN7SQwcH+YQu7psf3RAKk= Subject key identifier: 4A:DC:22:16:07:08:96:94:D3:72:EE:44:37:45:55:3E:6D:A6:E2:F0 Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0D0B Signing time: Sat 20 Dec 2025 17:46:54 +0000 Manifest this update: Sat 20 Dec 2025 17:46:53 +0000 Manifest next update: Sat 27 Dec 2025 17:46:53 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: iUlpK/VlUPQIefSpeRTzuNhpOuZBxjuNjSyKOx51+14=) 2: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: PiQ5Nr30+J6cFI8PcO8QaeRngY6br7QeoIsKBt+5WrY=) 3: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: +sG8NbgnYW/5yKj+KS6Bj5dJEC1uPTYbZ5sH5bpsSVc=) 4: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: m0eQJegSB2UL0Yg1NDkzUW3i5WishCBL/vQWvaDkx2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: Dec 20 17:46:53 2025 GMT Not After : Dec 27 17:46:53 2025 GMT Subject: CN=6946e10e-e69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:71:14:46:89:ba:ac:4a:ab:6a:34:63:00: 25:31:8b:88:83:9c:de:b4:da:e8:56:25:39:9b:11: dc:d6:38:f0:7a:11:21:5e:b7:52:55:90:6b:df:e7: a2:63:0c:e4:b6:55:0d:f2:76:58:61:9c:65:28:27: e7:a2:24:9d:fe:30:5a:69:b1:6f:e5:54:f2:57:01: be:44:ad:1c:22:2f:aa:3f:1a:da:f7:e8:d9:99:92: 86:71:c9:1f:4b:be:ca:67:42:0a:2a:74:f6:31:e3: 0b:3a:f7:e7:12:00:54:ca:12:42:57:f8:a3:04:c3: 6d:5a:4d:0a:83:0b:37:ec:62:3b:6f:b7:d6:2e:10: 1f:86:10:64:6f:6c:56:eb:82:06:91:70:b4:f3:9e: 92:8a:c3:fa:9f:b9:52:ae:45:f0:28:f4:30:d9:48: a0:23:d8:f6:dd:73:b1:10:1c:42:10:be:c3:23:e5: 53:7d:af:c4:c0:4e:67:3b:d2:da:f3:52:58:ca:11: b4:57:2a:c6:53:14:65:2b:12:9b:f3:de:52:8a:91: c9:45:1e:c8:03:c7:d9:42:8b:28:7e:00:d1:0d:a7: e3:6a:3f:bf:2f:f7:ef:75:ab:05:f6:24:46:63:fd: c4:d5:ee:c3:b7:bd:58:4d:19:ac:2c:4e:8a:ce:f6: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DC:22:16:07:08:96:94:D3:72:EE:44:37:45:55:3E:6D:A6:E2:F0 X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6b:24:02:75:95:ad:23:27:59:73:44:07:3b:2c:52:1f:3f: 1a:c4:4e:52:9f:5b:ee:3d:f0:bd:68:d4:f8:ab:08:0a:35:8e: 7e:97:0f:13:bc:aa:88:65:a2:86:2e:42:a8:08:e3:3e:39:52: 97:28:5d:1e:f2:eb:0f:26:60:09:43:6c:59:9c:47:4b:f3:f2: 05:11:4f:d2:5f:ab:63:a2:19:7e:9a:81:70:be:b5:e5:6d:34: 35:18:90:77:a8:52:e6:d2:32:08:55:18:08:62:94:42:4e:82: 43:2e:cd:03:81:47:08:d4:a8:55:7a:be:30:fa:2a:55:6a:3e: c1:a1:6f:77:d6:33:e7:2f:ed:67:d0:a1:e4:05:98:57:fc:d9: dd:10:07:79:ab:a6:d3:77:ec:17:40:25:25:61:a4:61:b0:fb: 59:00:10:ac:08:c9:7c:08:41:eb:ca:67:a0:a6:18:d1:72:f8: 2b:c5:55:25:3d:77:7a:69:86:67:29:f5:53:d2:14:6b:71:df: 19:9c:b9:a3:ee:13:44:61:bc:4e:58:73:c7:7f:3c:ef:ee:b3: bd:07:69:88:5e:ea:ef:3f:69:44:fd:3b:8c:b2:ee:69:e0:84: 75:e0:99:37:fe:4f:f4:c6:22:38:29:6d:6d:36:78:3a:70:04: 01:79:36:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjUxMjIwMTc0NjUzWhcNMjUxMjI3MTc0NjUzWjAYMRYwFAYD VQQDDA02OTQ2ZTEwZS1lNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAJxFEaJuqxKq2o0YwAlMYuIg5zetNroViU5mxHc1jjwehEhXrdSVZBr3+ei YwzktlUN8nZYYZxlKCfnoiSd/jBaabFv5VTyVwG+RK0cIi+qPxra9+jZmZKGcckf S77KZ0IKKnT2MeMLOvfnEgBUyhJCV/ijBMNtWk0Kgws37GI7b7fWLhAfhhBkb2xW 64IGkXC0856SisP6n7lSrkXwKPQw2UigI9j23XOxEBxCEL7DI+VTfa/EwE5nO9La 81JYyhG0VyrGUxRlKxKb895SipHJRR7IA8fZQosofgDRDafjaj+/L/fvdasF9iRG Y/3E1e7Dt71YTRmsLE6KzvY00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErcIhYH CJaU03LuRDdFVT5tpuLwMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeayQCdZWtIydZc0QHOyxSHz8axE5Sn1vuPfC9aNT4qwgKNY5+lw8T vKqIZaKGLkKoCOM+OVKXKF0e8usPJmAJQ2xZnEdL8/IFEU/SX6tjohl+moFwvrXl bTQ1GJB3qFLm0jIIVRgIYpRCToJDLs0DgUcI1KhVer4w+ipVaj7BoW931jPnL+1n 0KHkBZhX/NndEAd5q6bTd+wXQCUlYaRhsPtZABCsCMl8CEHrymegphjRcvgrxVUl PXd6aYZnKfVT0hRrcd8ZnLmj7hNEYbxOWHPHfzzv7rO9B2mIXurvP2lE/TuMsu5p 4IR14Jk3/k/0xiI4KW1tNng6cAQBeTaX -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:42 2025 by rpki-client