This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: szd3ZWbceZnUM22nV8RSI2q0DFk2WloUsp+l8ZZollw= Subject key identifier: 27:78:82:B9:24:E9:89:B5:F7:13:E0:F2:E0:19:A0:F6:AB:08:53:D6 Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: 15 Signing time: Fri 19 Dec 2025 06:50:28 +0000 Manifest this update: Fri 19 Dec 2025 06:50:28 +0000 Manifest next update: Fri 26 Dec 2025 06:50:28 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: 77VVRuWtYVD4vE3CYrI9qY/OsQ10qQKCQqBlg0kTd5E=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: BkprVFwAt62ek1/osfcjd4iYpz4rBk8/YYmw+8qHsBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Dec 19 06:50:28 2025 GMT Not After : Dec 26 06:50:28 2025 GMT Subject: CN=6944f5b4-e096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:cb:32:2f:d0:da:fe:7d:92:dc:2c:14:a8: 95:08:74:df:9b:9c:b6:67:b2:81:54:23:5b:9e:03: d4:66:2f:de:9f:40:48:38:8f:9d:ed:c0:82:e2:24: d7:26:a4:c5:26:ea:75:ea:b9:1d:cc:46:25:89:3b: 8d:3a:09:f9:0e:88:96:f6:4e:80:6e:1e:7f:5c:68: 66:d9:4f:ab:04:a8:06:0f:be:76:01:e4:63:81:b0: 89:1a:ed:d2:c6:14:c5:94:87:c9:c0:87:fb:d0:8d: 5d:34:06:16:0c:c4:5b:50:46:42:23:48:11:54:8a: ea:88:77:9f:1b:b2:4d:24:25:36:3d:02:70:73:69: 58:7a:f2:3d:e0:33:1a:f9:e7:be:2a:9d:ca:77:e4: c9:c2:be:02:0a:55:b1:17:e3:59:4a:94:e0:4b:dc: 50:90:df:72:d4:03:ad:d2:9f:b0:79:ab:d8:b5:e4: 06:df:ad:20:e0:98:02:17:2a:6a:14:d7:8e:71:8f: 18:62:79:98:e7:a4:fa:fa:18:95:38:72:50:e9:e2: 34:a7:3e:25:bf:d5:8e:58:b4:02:1c:07:23:4c:04: e8:91:49:ea:ac:1c:61:7c:fb:53:ba:13:13:5b:55: ca:f0:35:90:c0:b3:8c:57:26:32:7d:7f:2b:92:a2: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:82:B9:24:E9:89:B5:F7:13:E0:F2:E0:19:A0:F6:AB:08:53:D6 X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:90:6a:91:1d:19:28:90:0e:94:77:ff:8a:85:6e:98:24:18: 5c:e2:60:8a:ef:8c:f4:80:2d:7e:ce:00:82:dd:d3:34:e1:ec: c1:c2:d0:7f:d5:88:58:cd:73:da:34:85:00:d5:e3:b9:8e:0f: 4f:42:fb:f9:73:ad:bc:9a:80:46:6b:be:0e:15:07:b6:70:37: 88:af:9e:72:c6:ea:e0:de:ab:fe:3c:5a:90:e0:41:8e:fb:86: 1b:de:f3:48:f9:e2:18:60:ee:f9:fc:2a:88:ef:97:40:50:5c: 9d:fb:3e:6f:c4:38:55:b0:11:54:ef:09:b9:2c:86:c3:15:2a: 45:a7:b7:60:0b:9a:89:b7:ee:93:d3:2e:86:35:a9:ca:10:f1: b3:76:ab:eb:9b:cd:6a:f2:42:e6:29:bb:42:12:f5:4c:cc:ac: d8:50:25:fb:62:69:72:b9:7a:a5:66:76:1f:bf:ad:99:e8:91: fe:f4:31:b7:61:f1:99:bf:51:3d:fe:e5:de:f0:1b:28:83:74: 20:cf:2a:24:ea:ad:34:fc:fa:1a:97:07:86:df:24:23:65:f1: 0a:e9:15:41:74:22:d1:e6:9a:93:fb:2f:5f:c0:5d:a0:4b:a7: c1:a7:2b:f5:ce:fe:7e:f5:34:ac:da:f1:5c:c3:32:9b:d4:fc: 4c:fd:da:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNTEyMTkwNjUwMjhaFw0yNTEyMjYwNjUwMjhaMBgxFjAUBgNV BAMMDTY5NDRmNWI0LWUwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNTssyL9Da/n2S3CwUqJUIdN+bnLZnsoFUI1ueA9RmL96fQEg4j53twILiJNcm pMUm6nXquR3MRiWJO406CfkOiJb2ToBuHn9caGbZT6sEqAYPvnYB5GOBsIka7dLG FMWUh8nAh/vQjV00BhYMxFtQRkIjSBFUiuqId58bsk0kJTY9AnBzaVh68j3gMxr5 574qncp35MnCvgIKVbEX41lKlOBL3FCQ33LUA63Sn7B5q9i15AbfrSDgmAIXKmoU 145xjxhieZjnpPr6GJU4clDp4jSnPiW/1Y5YtAIcByNMBOiRSeqsHGF8+1O6ExNb VcrwNZDAs4xXJjJ9fyuSolSnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ3iCuSTp ibX3E+Dy4Bmg9qsIU9YwHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx STRCRV9KUFZocHYzWFFGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK+QapEdGSiQDpR3/4qFbpgkGFziYIrvjPSALX7OAILd0zTh7MHC0H/V iFjNc9o0hQDV47mOD09C+/lzrbyagEZrvg4VB7ZwN4ivnnLG6uDeq/48WpDgQY77 hhve80j54hhg7vn8Kojvl0BQXJ37Pm/EOFWwEVTvCbkshsMVKkWnt2ALmom37pPT LoY1qcoQ8bN2q+ubzWryQuYpu0IS9UzMrNhQJftiaXK5eqVmdh+/rZnokf70Mbdh 8Zm/UT3+5d7wGyiDdCDPKiTqrTT8+hqXB4bfJCNl8QrpFUF0ItHmmpP7L1/AXaBL p8GnK/XO/n71NKza8VzDMpvU/Ez92vw= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:04 2025 by rpki-client