This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: lLv4nYyGIJ0R2yCapDcDk3d2/m9dcO1HY0JSYe71dAs= Subject key identifier: B2:9A:2F:F3:6B:D9:55:6E:04:34:13:79:2B:EC:90:5E:C0:78:EC:DA Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 8E Signing time: Mon 29 Dec 2025 05:37:11 +0000 Manifest this update: Mon 29 Dec 2025 05:37:11 +0000 Manifest next update: Mon 05 Jan 2026 05:37:11 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: J+AmXBpSY73I/Pgz7/PTNORckdl5dUSjPdPFnCfyReQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Dec 29 05:37:11 2025 GMT Not After : Jan 5 05:37:11 2026 GMT Subject: CN=69521387-84fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:b4:14:26:51:66:3d:28:aa:46:c3:5f:f8: 92:c6:27:30:4e:a0:39:47:ca:11:1e:31:1a:47:1a: 00:92:0d:95:03:cf:eb:19:ad:6a:25:f8:a9:93:76: 04:1b:96:dc:54:6d:13:6a:4b:a9:b5:9d:1d:19:6a: e4:c5:9d:92:a0:32:f2:7a:39:0c:4b:58:43:5a:a8: 12:95:1c:d0:90:35:18:34:4f:fb:fa:bc:8b:35:8a: 72:c7:71:9f:f3:89:66:c4:d0:0c:65:22:c8:4f:17: e6:d3:35:10:b5:f0:09:d1:a5:94:c4:ad:62:13:70: bf:e0:df:a0:dc:71:7b:b7:39:d6:df:7b:5e:f0:a9: fe:ef:c3:06:9a:c5:00:56:cc:45:f4:05:c0:22:56: 14:f1:ce:ce:aa:82:fc:42:30:4d:72:ae:8c:2b:ca: 3b:82:d9:01:21:b7:6c:5b:f4:b3:3d:3c:d8:5f:17: f9:41:2c:99:1e:7f:0d:fd:5a:d0:ef:c4:63:86:00: 7f:dc:ba:ad:2f:cd:de:e7:48:98:4c:e0:5c:e7:49: 71:7d:12:2d:e7:6f:95:e3:38:bb:09:99:1b:73:9a: 17:01:a1:e9:a3:9a:9b:b1:51:ab:e4:f1:ce:75:2f: 8a:86:35:45:c2:ba:12:04:8d:b5:84:f8:eb:b9:1c: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:2F:F3:6B:D9:55:6E:04:34:13:79:2B:EC:90:5E:C0:78:EC:DA X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:70:1a:70:e7:62:f9:14:67:5a:8c:f9:be:30:02:27:8a: a7:33:6b:ca:7b:21:e9:96:e4:0e:08:83:7d:bd:4d:3e:d7:20: b9:50:2c:89:ee:35:22:89:92:7c:72:fd:ec:cf:97:84:46:af: b1:84:9e:0f:32:c0:12:39:27:0c:94:04:9e:05:ca:b5:c5:f2: b0:6f:e5:03:e7:89:15:ae:5d:74:8b:d4:ca:7f:86:29:2d:f8: 8b:89:b0:32:3d:6a:4b:ee:60:3b:98:9b:60:43:9e:ea:ab:a2: 82:74:ef:aa:43:f6:9a:c0:82:23:e6:c1:ed:9a:a3:88:99:1d: c6:da:d5:8b:2a:be:83:bf:40:b3:30:cb:09:c5:7d:99:c3:e8: 12:e3:13:48:05:bd:e6:57:97:17:38:4d:22:1f:29:3b:bd:25: 2d:cb:5e:fa:e7:20:50:16:45:a2:20:b2:86:1e:16:45:ac:e3: c6:ae:3d:54:25:a8:5b:f0:2f:99:30:b7:a5:52:f3:ef:10:b6: 47:89:e2:a8:98:b3:01:2c:34:65:49:9d:02:f4:aa:91:a7:ca: 50:d1:de:25:c1:4e:d3:2a:23:ee:5e:f3:c0:42:e7:a8:6b:25: de:20:a5:84:d8:74:2c:a0:ed:6a:56:45:18:ca:86:ca:aa:a7: fc:3e:dd:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFRkExMTAvBgNVBAUTKEM3Q0RCNEVBMTgxNjVFNTk4MkQwQTkxOUZGNDdGNzI2 NzZFMDUwNzMwHhcNMjUxMjI5MDUzNzExWhcNMjYwMTA1MDUzNzExWjAYMRYwFAYD VQQDDA02OTUyMTM4Ny04NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhi0FCZRZj0oqkbDX/iSxicwTqA5R8oRHjEaRxoAkg2VA8/rGa1qJfipk3YE G5bcVG0TakuptZ0dGWrkxZ2SoDLyejkMS1hDWqgSlRzQkDUYNE/7+ryLNYpyx3Gf 84lmxNAMZSLITxfm0zUQtfAJ0aWUxK1iE3C/4N+g3HF7tznW33te8Kn+78MGmsUA VsxF9AXAIlYU8c7OqoL8QjBNcq6MK8o7gtkBIbdsW/SzPTzYXxf5QSyZHn8N/VrQ 78RjhgB/3LqtL83e50iYTOBc50lxfRIt52+V4zi7CZkbc5oXAaHpo5qbsVGr5PHO dS+KhjVFwroSBI21hPjruRw+HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKaL/Nr 2VVuBDQTeSvskF7AeOzaMB8GA1UdIwQYMBaAFMfNtOoYFl5ZgtCpGf9H9yZ24FBz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkVGQS8xNzI1NDZCQzBC MzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hsbUMwS2taXzBmM0puYmdV SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkVGQS8xNzI1NDZCQzBCMzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hs bUMwS2taXzBmM0puYmdVSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvc3AacOdi+RRnWoz5vjACJ4qnM2vKeyHpluQOCIN9vU0+1yC5UCyJ 7jUiiZJ8cv3sz5eERq+xhJ4PMsASOScMlASeBcq1xfKwb+UD54kVrl10i9TKf4Yp LfiLibAyPWpL7mA7mJtgQ57qq6KCdO+qQ/aawIIj5sHtmqOImR3G2tWLKr6Dv0Cz MMsJxX2Zw+gS4xNIBb3mV5cXOE0iHyk7vSUty1765yBQFkWiILKGHhZFrOPGrj1U Jahb8C+ZMLelUvPvELZHieKomLMBLDRlSZ0C9KqRp8pQ0d4lwU7TKiPuXvPAQueo ayXeIKWE2HQsoO1qVkUYyobKqqf8Pt3v -----END CERTIFICATE-----Generated at Tue Dec 30 18:42:24 2025 by rpki-client