This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: MKDwgnwOJEWnnskpM71tzgFvzIF4gCIBNdPV8pHwbDY= Subject key identifier: 8C:8E:DA:C6:71:C0:E9:44:4E:A6:2D:EB:B3:5E:23:B0:F0:11:AC:EC Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 1172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0F10 Signing time: Sat 06 Dec 2025 18:13:45 +0000 Manifest this update: Sat 06 Dec 2025 18:13:44 +0000 Manifest next update: Sat 13 Dec 2025 18:13:44 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: GxUH0Qi9uAesRcTq+sH14QnWu2YKJiPUihKlnd6p27M=) 2: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: RJWWol/N3kpabs0RDHnKDFjohXYhNv2bTe01qDy5yFA=) 3: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: dENzJEUKeZTxWU/8nd/lAkN4nDmqFnhB+bpqCZU0QcI=) 4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 2DhSKbqHerwHAcJuXyOqA5Uvz8i+b7ElwkCYt1IMjOk=) 5: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: vQLPauYSwIvEKHwtwusEUFZF+gS3JoWhYFZteOt/vY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4466 (0x1172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Dec 6 18:13:44 2025 GMT Not After : Dec 13 18:13:44 2025 GMT Subject: CN=69347259-f261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:13:a7:94:f0:54:c3:f0:40:28:da:44:0b: 1f:99:23:dd:a1:b8:04:e2:8a:4d:4a:44:b0:ff:5b: 67:d4:e3:05:bf:47:9a:37:1f:b0:f7:f7:ff:75:41: 3b:77:82:bf:29:4c:a4:74:58:63:ad:9b:4a:2c:9d: 76:fe:1e:0f:a1:37:2a:e4:1c:a4:e8:83:4c:a8:d9: c6:d3:d4:ab:89:3d:cf:c3:7c:cf:56:a8:b5:73:4e: 11:03:33:e9:75:7c:50:7d:26:b3:2b:cb:00:e5:2b: 4a:12:40:16:e1:99:cd:02:60:f7:31:05:a5:4a:b9: d1:e8:b6:4f:86:4b:27:10:b9:83:37:75:4f:e1:38: 31:69:c0:4b:b8:c1:dd:1f:2f:d4:fb:1a:6d:95:55: cc:c0:4c:79:4d:c3:e5:97:e9:b0:9f:28:2a:12:a8: a2:f7:3d:f7:e3:60:47:54:7c:2b:b8:e1:02:25:5d: cf:2a:c2:c7:0a:30:10:ea:f0:35:ac:df:b4:6f:36: 54:9b:6b:da:4a:00:b2:21:12:e6:4a:7c:cf:06:3a: 52:5b:de:65:8d:7a:55:b1:82:36:3e:ea:66:3b:7a: b8:a6:cc:f6:8a:ec:5c:d1:98:19:bb:41:ee:bf:42: 2a:00:ef:8c:57:91:54:df:8c:6b:1d:d5:f5:fe:46: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8E:DA:C6:71:C0:E9:44:4E:A6:2D:EB:B3:5E:23:B0:F0:11:AC:EC X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:89:ab:9d:56:d4:2e:08:0a:de:bd:40:1e:02:34:c4:3d:13: 5b:8b:28:c2:9e:fc:65:a7:8b:9a:73:5e:75:43:e1:07:a9:68: 89:64:07:94:da:d4:58:df:cd:72:5b:d8:87:ef:17:bc:a5:8b: 8b:fe:a3:5c:3a:7c:6f:0f:5f:10:f6:14:76:80:a8:35:25:65: e4:41:4b:d5:34:7e:29:1e:e4:03:3e:2e:09:f6:50:9a:26:d0: ec:9b:d8:1d:a0:a4:c9:4d:7e:b4:71:3f:b5:f3:1b:16:42:ce: 83:7b:3f:c8:2e:f3:4f:6e:4e:77:74:e2:04:78:99:52:12:41: 7c:92:96:54:c0:8c:55:80:13:c9:62:39:38:c5:f7:66:9f:d1: 65:53:9e:df:80:a5:29:31:98:bc:9a:b4:fb:ec:03:74:4d:d6: 6b:fa:03:9a:7f:55:eb:7b:f6:3a:e8:42:bf:52:95:96:b9:cc: 86:9c:59:ab:80:ba:f5:f1:75:0b:24:7d:00:e1:2f:05:b0:7c: bc:6e:f3:96:7c:a0:db:e1:de:bd:61:73:86:ad:57:e8:ad:96: fe:9d:8f:c3:c9:3a:e5:19:61:19:3c:25:37:a9:c9:f8:f4:a9: 6c:bc:d8:49:ca:b0:c6:7e:1f:d5:28:18:96:8e:68:f0:c9:59: 21:06:a1:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUxMjA2MTgxMzQ0WhcNMjUxMjEzMTgxMzQ0WjAYMRYwFAYD VQQDEw02OTM0NzI1OS1mMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30cTp5TwVMPwQCjaRAsfmSPdobgE4opNSkSw/1tn1OMFv0eaNx+w9/f/dUE7 d4K/KUykdFhjrZtKLJ12/h4PoTcq5Byk6INMqNnG09SriT3Pw3zPVqi1c04RAzPp dXxQfSazK8sA5StKEkAW4ZnNAmD3MQWlSrnR6LZPhksnELmDN3VP4TgxacBLuMHd Hy/U+xptlVXMwEx5TcPll+mwnygqEqii9z3342BHVHwruOECJV3PKsLHCjAQ6vA1 rN+0bzZUm2vaSgCyIRLmSnzPBjpSW95ljXpVsYI2PupmO3q4psz2iuxc0ZgZu0Hu v0IqAO+MV5FU34xrHdX1/kYhSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyO2sZx wOlETqYt67NeI7DwEazsMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxiaudVtQuCArevUAeAjTEPRNbiyjCnvxlp4uac151Q+EHqWiJZAeU 2tRY381yW9iH7xe8pYuL/qNcOnxvD18Q9hR2gKg1JWXkQUvVNH4pHuQDPi4J9lCa JtDsm9gdoKTJTX60cT+18xsWQs6Dez/ILvNPbk53dOIEeJlSEkF8kpZUwIxVgBPJ Yjk4xfdmn9FlU57fgKUpMZi8mrT77AN0TdZr+gOaf1Xre/Y66EK/UpWWucyGnFmr gLr18XULJH0A4S8FsHy8bvOWfKDb4d69YXOGrVforZb+nY/DyTrlGWEZPCU3qcn4 9KlsvNhJyrDGfh/VKBiWjmjwyVkhBqGB -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:43 2025 by rpki-client