This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: HMOadKlJNzKaO7SYdcHAPX0jLfuvZGwXd7mAC8rTy1s= Subject key identifier: 19:BB:45:25:91:7E:8F:1B:C3:2E:BB:7F:FA:FB:22:B6:CE:1C:91:8D Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 27BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 2742 Signing time: Thu 04 Dec 2025 15:29:23 +0000 Manifest this update: Thu 04 Dec 2025 15:29:22 +0000 Manifest next update: Thu 11 Dec 2025 15:29:22 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: ReWFzNv3WJNJx2MOKA4buThDJU6ltX8mYAsVz2MJzP0=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10170 (0x27ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Dec 4 15:29:22 2025 GMT Not After : Dec 11 15:29:22 2025 GMT Subject: CN=6931a8d2-8944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:fa:a9:0c:a0:24:b5:71:01:3c:7b:ac:67: 19:99:6f:e4:75:b1:32:85:91:f5:3c:0d:ae:a7:9c: 4e:73:36:79:02:e3:24:42:06:e2:64:33:ce:db:e7: 3f:b2:74:8f:bd:dd:1b:6a:1e:c5:da:4f:61:60:72: b7:45:69:97:97:0f:f6:53:b2:e7:83:a6:6c:48:9b: d3:1d:b9:5c:47:46:47:0f:68:3a:7d:b9:01:c4:56: 6e:f9:d0:31:e1:12:02:b4:65:4b:64:3b:eb:80:0f: ce:fd:9d:62:65:8d:10:d9:0f:e0:35:d7:ed:2d:ee: d9:33:dc:1e:3d:aa:6f:01:72:ae:92:33:58:23:a6: 66:56:26:06:02:0f:14:02:62:27:7c:17:42:81:d8: d8:51:0e:41:10:be:f5:0d:3f:61:12:f0:4d:38:5f: 4d:0d:51:c7:79:7f:c6:45:10:d2:62:4c:75:ab:35: e4:8e:ab:62:a2:c4:b9:ec:0d:a1:60:35:07:27:1d: 01:5f:66:32:28:b8:99:e4:07:3b:4c:5d:d1:83:98: 56:c5:01:0e:83:6b:9d:51:05:76:2f:df:f2:43:19: 1e:03:07:0c:2b:d2:cf:ed:19:97:9b:41:ee:ce:54: ff:5e:45:55:2c:77:a8:47:68:d6:94:72:11:68:57: ae:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BB:45:25:91:7E:8F:1B:C3:2E:BB:7F:FA:FB:22:B6:CE:1C:91:8D X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b0:da:a4:d7:73:ac:d0:2d:84:91:f6:03:29:9b:7c:9a:75: 53:be:f1:8d:3f:53:3f:f2:e9:56:f0:42:dd:fb:5d:9e:e1:27: e1:c9:a9:1f:2a:70:fb:1f:93:0e:45:2a:8a:39:2f:ac:72:7e: 55:1c:d7:36:83:c7:15:90:96:09:b4:45:04:d9:b0:80:ad:1f: ec:db:09:07:3d:4c:17:15:cd:18:17:5d:86:14:05:da:80:1e: 81:af:74:db:f8:40:f3:3c:c5:8d:01:00:8c:42:36:3b:ee:0b: 3f:b9:d3:3c:1f:e6:40:a3:57:2b:a6:bb:af:0f:92:4f:94:b3: 28:74:32:c6:53:23:1f:af:ad:ac:61:3f:74:97:82:c3:cc:d5: 4a:f9:ae:24:ac:cb:ac:ae:4c:52:00:1e:e1:3a:77:d9:b0:99: 30:37:50:ac:3c:d6:4e:29:86:92:94:e9:b9:e0:e3:74:d3:b9: b4:d6:a0:1b:21:51:9e:f2:cc:e3:b5:5e:e8:f6:9c:10:97:c6: b8:b5:1e:95:3a:d2:08:a9:2f:44:e2:4d:d8:8b:86:52:28:fb: a8:9c:0e:9f:e8:cd:a8:2f:ba:69:1a:87:cd:c6:0a:39:09:1c: ee:c7:fb:8e:98:28:bb:d7:ee:9e:53:5a:ce:8d:c8:b7:44:6c: 55:75:e4:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUxMjA0MTUyOTIyWhcNMjUxMjExMTUyOTIyWjAYMRYwFAYD VQQDEw02OTMxYThkMi04OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Hv6qQygJLVxATx7rGcZmW/kdbEyhZH1PA2up5xOczZ5AuMkQgbiZDPO2+c/ snSPvd0bah7F2k9hYHK3RWmXlw/2U7Lng6ZsSJvTHblcR0ZHD2g6fbkBxFZu+dAx 4RICtGVLZDvrgA/O/Z1iZY0Q2Q/gNdftLe7ZM9wePapvAXKukjNYI6ZmViYGAg8U AmInfBdCgdjYUQ5BEL71DT9hEvBNOF9NDVHHeX/GRRDSYkx1qzXkjqtiosS57A2h YDUHJx0BX2YyKLiZ5Ac7TF3Rg5hWxQEOg2udUQV2L9/yQxkeAwcMK9LP7RmXm0Hu zlT/XkVVLHeoR2jWlHIRaFeuswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm7RSWR fo8bwy67f/r7IrbOHJGNMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAsNqk13Os0C2EkfYDKZt8mnVTvvGNP1M/8ulW8ELd+12e4Sfhyakf KnD7H5MORSqKOS+scn5VHNc2g8cVkJYJtEUE2bCArR/s2wkHPUwXFc0YF12GFAXa gB6Br3Tb+EDzPMWNAQCMQjY77gs/udM8H+ZAo1crpruvD5JPlLModDLGUyMfr62s YT90l4LDzNVK+a4krMusrkxSAB7hOnfZsJkwN1CsPNZOKYaSlOm54ON007m01qAb IVGe8szjtV7o9pwQl8a4tR6VOtIIqS9E4k3Yi4ZSKPuonA6f6M2oL7ppGofNxgo5 CRzux/uOmCi71+6eU1rOjci3RGxVdeRS -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:13 2025 by rpki-client