This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: jVCrKrS0dxkpgla0l3VQLyxqgRF9WXRdFsmOdVezeZI= Subject key identifier: 50:90:5A:DA:AB:AC:2D:E9:A7:10:69:DA:22:CA:28:40:1F:0E:76:E4 Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 0619 Signing time: Thu 04 Dec 2025 21:33:56 +0000 Manifest this update: Thu 04 Dec 2025 21:33:55 +0000 Manifest next update: Thu 11 Dec 2025 21:33:55 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: hOmjPyIYSxTR/i/QO/ZbnDo0ZZ5ko9gfsed6P5e7Ud8=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Dec 4 21:33:55 2025 GMT Not After : Dec 11 21:33:55 2025 GMT Subject: CN=6931fe44-69ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4f:10:f0:e5:f4:f0:d4:13:19:8a:01:36:25: 63:5b:ca:7d:9d:0a:5e:e8:7d:74:e1:d1:46:1f:b7: a2:d5:a2:c9:ee:a2:a7:46:f6:55:92:3e:1e:97:e9: ea:02:f2:cf:1e:a1:f2:15:a8:2e:56:3b:12:bd:a6: c8:77:62:a8:fd:90:50:aa:6d:fa:db:fc:43:ca:61: c8:b4:89:8c:7b:b2:d3:e2:f2:94:62:22:3a:26:96: a5:63:d9:da:05:fa:25:61:53:25:79:e2:7c:4a:09: 63:75:d6:a4:7f:ba:e4:86:80:e7:0b:9d:79:9a:7a: a3:7e:b7:77:e2:bf:6e:e7:4e:e2:b9:ad:0b:53:59: 7d:4d:ad:26:8e:54:de:fa:70:f9:c1:cc:a0:07:74: 79:5e:9d:5a:1c:2f:39:3a:4b:ac:b6:ff:35:dc:6a: 0a:c3:bf:f9:89:e4:ae:b4:fc:a6:f8:7d:05:ba:73: aa:aa:9f:a1:d6:da:92:56:9f:0c:84:20:58:0b:91: 20:3b:4f:f5:22:1a:90:03:db:a0:34:0b:04:b5:30: e9:97:fb:d9:b2:69:0f:de:d8:5c:b0:dc:92:5b:41: b6:79:39:f7:6e:e7:53:b9:f3:fa:0e:c7:d8:a6:28: 4b:30:97:8b:71:d6:d9:2d:d9:8e:ff:7b:6e:4f:ee: 7c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:90:5A:DA:AB:AC:2D:E9:A7:10:69:DA:22:CA:28:40:1F:0E:76:E4 X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:42:de:82:8a:12:20:44:9f:78:d5:9f:e3:49:e4:90:44:3d: 85:f8:47:00:e4:22:29:42:0b:1a:8d:47:8b:ee:d2:33:e9:a0: 76:ec:a3:4f:4a:b1:16:eb:44:38:a2:25:67:a4:e9:41:1f:1d: 07:d6:50:f2:ff:d3:d7:a0:86:1e:25:15:7b:9a:1a:31:4f:13: a9:62:be:f6:50:bb:85:aa:fc:f8:f0:5c:c0:aa:ac:3d:bc:5e: 94:22:8f:88:8c:fc:87:3b:62:3f:06:83:fc:61:f1:2e:21:b8: 4f:81:7e:15:99:55:2b:f0:bc:34:7f:3d:3f:b8:af:6e:18:69: f6:bd:e0:c1:f2:69:f5:69:e8:e5:b9:ec:a2:25:fa:b0:c0:c5: b6:ff:eb:1e:b6:e5:be:70:1b:93:b6:c4:9b:93:7b:ef:fa:1a: dd:51:bf:ea:f9:8a:5a:48:04:31:7c:df:7f:97:39:e7:d2:ad: 71:70:fa:d9:a7:b4:e0:c1:2a:ba:f7:14:cf:cc:07:29:e0:7d: 7e:e6:3d:be:1a:f9:65:7f:86:d2:c2:08:f5:0c:c1:53:28:4f: 56:52:18:d6:eb:3f:03:07:de:fd:1b:5a:61:df:ce:cd:b7:84: 2b:d6:c4:57:84:87:a4:65:95:8d:4e:b1:a2:ef:ae:12:c9:5f: 5e:53:4c:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUxMjA0MjEzMzU1WhcNMjUxMjExMjEzMzU1WjAYMRYwFAYD VQQDEw02OTMxZmU0NC02OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U8Q8OX08NQTGYoBNiVjW8p9nQpe6H104dFGH7ei1aLJ7qKnRvZVkj4el+nq AvLPHqHyFaguVjsSvabId2Ko/ZBQqm362/xDymHItImMe7LT4vKUYiI6JpalY9na BfolYVMleeJ8Sgljddakf7rkhoDnC515mnqjfrd34r9u507iua0LU1l9Ta0mjlTe +nD5wcygB3R5Xp1aHC85Okustv813GoKw7/5ieSutPym+H0FunOqqp+h1tqSVp8M hCBYC5EgO0/1IhqQA9ugNAsEtTDpl/vZsmkP3thcsNySW0G2eTn3budTufP6DsfY pihLMJeLcdbZLdmO/3tuT+58lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCQWtqr rC3ppxBp2iLKKEAfDnbkMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQt6CihIgRJ941Z/jSeSQRD2F+EcA5CIpQgsajUeL7tIz6aB27KNP SrEW60Q4oiVnpOlBHx0H1lDy/9PXoIYeJRV7mhoxTxOpYr72ULuFqvz48FzAqqw9 vF6UIo+IjPyHO2I/BoP8YfEuIbhPgX4VmVUr8Lw0fz0/uK9uGGn2veDB8mn1aejl ueyiJfqwwMW2/+setuW+cBuTtsSbk3vv+hrdUb/q+YpaSAQxfN9/lznn0q1xcPrZ p7TgwSq69xTPzAcp4H1+5j2+Gvllf4bSwgj1DMFTKE9WUhjW6z8DB979G1ph387N t4Qr1sRXhIekZZWNTrGi764SyV9eU0xl -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:25 2025 by rpki-client