This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: Krbr+JX8yslef/RBUiwLc83BKEElnKJXM+FJ+JdohQE= Subject key identifier: ED:99:CA:AA:27:18:0F:42:30:07:93:B6:4F:78:87:C2:1E:C2:1B:A9 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 01E8 Signing time: Fri 05 Dec 2025 01:07:12 +0000 Manifest this update: Fri 05 Dec 2025 01:07:11 +0000 Manifest next update: Fri 12 Dec 2025 01:07:11 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: 4wWVReUee4coiU+EznORxHQoICE6Qi+vQDGzo1nR4I0=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 3: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI=) 4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Dec 5 01:07:11 2025 GMT Not After : Dec 12 01:07:11 2025 GMT Subject: CN=69323040-94c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:88:bf:22:dd:04:ac:75:0d:47:5f:16:f2: a0:98:58:9f:3f:80:7f:4b:e5:4f:69:33:ac:a7:89: 48:29:d7:ed:ff:ad:52:e0:1b:5e:78:f6:f2:db:1a: fb:76:2a:cd:27:9c:d5:4c:41:6f:ef:0a:70:3f:b3: 8c:ae:7f:c1:ff:b9:a9:3e:be:6c:47:78:42:3a:8b: c9:af:aa:d7:c1:7c:7e:5b:3a:48:9a:2e:c4:13:12: 09:bc:99:78:6e:fe:66:99:31:c1:15:d6:dd:84:2b: 99:ab:84:9e:4c:8f:d1:b5:16:fa:a2:42:66:b4:fd: 0c:32:7c:34:49:1e:50:85:ac:52:6f:e3:0c:ec:f2: b8:95:96:a6:ed:91:ed:6e:91:9d:98:2b:af:58:6b: ff:5b:d4:cf:c0:f8:02:a9:a3:28:a8:36:53:61:d3: f3:bd:92:4d:cf:24:44:78:95:15:78:fb:ea:6d:0e: 49:4d:fb:46:ae:79:ee:13:a2:a8:53:91:b8:43:e5: cf:73:f0:40:f9:8f:b8:c9:4b:50:1f:34:44:43:75: 73:55:85:df:5c:48:6e:ed:94:e5:e6:eb:4d:19:3e: aa:71:71:2b:c9:41:8f:c8:1d:44:d4:49:14:49:34: 6a:6c:78:4b:56:e3:0c:6d:66:7b:22:b8:fe:61:c7: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:99:CA:AA:27:18:0F:42:30:07:93:B6:4F:78:87:C2:1E:C2:1B:A9 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:13:fa:18:d9:fa:3a:4b:fc:d6:b3:82:77:b5:b6:c3:f2:76: 86:53:90:8d:41:3c:1b:59:39:48:71:98:79:3a:86:58:d4:7a: 17:75:dd:ee:e4:73:b3:52:a6:c5:e6:48:56:0d:d2:95:3c:e3: e4:90:cd:66:1b:1b:63:31:e0:63:61:53:ab:bd:cc:aa:29:c6: dc:f6:7b:28:11:5f:76:2a:c8:d2:03:9e:b0:92:09:e2:20:d1: e4:74:b0:78:99:7e:b3:9c:86:95:63:8e:6e:98:51:3a:f9:c6: 18:67:10:d3:94:50:3f:a9:5f:5d:83:e4:13:76:14:7e:f3:78: 0e:29:16:dc:24:45:54:0c:46:f0:12:02:65:d4:b7:a9:43:2f: 95:f5:15:5a:aa:4f:21:31:15:73:94:81:80:f4:4c:d1:60:a6: 05:81:fe:cf:ad:ac:e7:cf:08:73:36:1f:02:6f:e9:b9:ee:60: 84:a4:09:f1:27:2c:45:d0:7b:49:38:79:d1:96:bf:f0:08:77: ba:8d:7a:7e:9f:48:db:73:26:77:23:63:5a:24:eb:b9:f3:ea: f2:ec:9c:1b:85:18:54:c1:0e:cc:ac:61:d0:9f:a1:91:e2:e4: d3:20:cc:da:66:b6:40:ee:dc:30:a3:98:b3:53:5b:49:28:66: 31:3d:ef:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUxMjA1MDEwNzExWhcNMjUxMjEyMDEwNzExWjAYMRYwFAYD VQQDEw02OTMyMzA0MC05NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQyIvyLdBKx1DUdfFvKgmFifP4B/S+VPaTOsp4lIKdft/61S4BteePby2xr7 dirNJ5zVTEFv7wpwP7OMrn/B/7mpPr5sR3hCOovJr6rXwXx+WzpImi7EExIJvJl4 bv5mmTHBFdbdhCuZq4SeTI/RtRb6okJmtP0MMnw0SR5QhaxSb+MM7PK4lZam7ZHt bpGdmCuvWGv/W9TPwPgCqaMoqDZTYdPzvZJNzyREeJUVePvqbQ5JTftGrnnuE6Ko U5G4Q+XPc/BA+Y+4yUtQHzREQ3VzVYXfXEhu7ZTl5utNGT6qcXEryUGPyB1E1EkU STRqbHhLVuMMbWZ7Irj+YcfoRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2Zyqon GA9CMAeTtk94h8IewhupMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqE/oY2fo6S/zWs4J3tbbD8naGU5CNQTwbWTlIcZh5OoZY1HoXdd3u 5HOzUqbF5khWDdKVPOPkkM1mGxtjMeBjYVOrvcyqKcbc9nsoEV92KsjSA56wkgni INHkdLB4mX6znIaVY45umFE6+cYYZxDTlFA/qV9dg+QTdhR+83gOKRbcJEVUDEbw EgJl1LepQy+V9RVaqk8hMRVzlIGA9EzRYKYFgf7PraznzwhzNh8Cb+m57mCEpAnx JyxF0HtJOHnRlr/wCHe6jXp+n0jbcyZ3I2NaJOu58+ry7JwbhRhUwQ7MrGHQn6GR 4uTTIMzaZrZA7twwo5izU1tJKGYxPe9X -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:27 2025 by rpki-client