This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json) Hash identifier: tyKrKsN13d8qfr2vy3diMAgKfMQQSg7kmE3JeaHQR5w= Subject key identifier: 06:45:7E:6D:E1:E9:A8:42:49:C4:DC:93:8B:DD:06:3C:7E:66:5C:50 Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft Manifest number: 02AC Signing time: Thu 04 Dec 2025 23:52:04 +0000 Manifest this update: Thu 04 Dec 2025 23:52:04 +0000 Manifest next update: Thu 11 Dec 2025 23:52:04 +0000 Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: ZMxHGEzwkqQmJ3MqDjCUgAlRmkgMQz1v5JuU76y3BnU=) 2: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: Pai3Nu3+CpU9xUHwjv55hhEZi3jdFTx+UDy7SG0bPko=) 3: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: /9WwScNnwKtuTN07Iz2vc8yMRAg5E8y5OFcRZD0NbCM=) 4: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: ut+bDFNYD/cDGx/IefSywFEYVi8u+Nng1jjgZBD3c3k=) 5: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: GX+AW8ueL4QUC5f9XTmLIBQG0hxveckbMLPTPWw+Kk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Validity Not Before: Dec 4 23:52:04 2025 GMT Not After : Dec 11 23:52:04 2025 GMT Subject: CN=69321ea4-b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:ab:cf:0f:e8:89:fd:96:2e:05:75:77:e1: a3:8e:bf:63:79:2a:76:65:f9:ef:d9:ad:69:a7:75: 71:f7:48:02:ba:ce:5e:dd:e1:39:60:31:aa:4f:09: 71:d1:3e:86:e5:aa:a3:fb:7a:21:c7:cf:a4:32:4c: de:78:3c:02:99:32:58:a8:86:96:e4:ab:4b:5c:be: 29:d6:f1:2b:0f:f6:af:5f:0a:20:17:61:f1:29:b7: 0a:5a:ad:16:e2:d9:2a:78:7c:68:4a:ac:33:eb:15: 94:6b:30:72:d6:cc:51:3b:25:0e:cd:12:2f:2c:02: 1c:69:eb:0a:d9:a1:31:bc:b0:32:3b:34:25:0b:ac: bf:b3:56:23:98:4e:74:96:f4:c5:de:88:1d:1f:de: f7:20:31:be:26:2b:97:4e:a1:db:d3:fa:25:a7:b4: 7d:f6:91:b2:e9:99:62:54:dd:21:36:01:ca:70:5b: ca:ea:70:70:81:39:2b:db:a6:26:98:37:b7:ca:4a: fd:d4:70:b5:d2:de:b0:ee:d5:70:50:92:fe:0a:2e: 09:f2:7d:d8:6a:5d:04:4c:7e:56:7c:a9:67:2d:14: 26:18:4f:df:6b:f6:54:d7:9a:a8:f4:f9:a7:30:51: 66:e2:97:28:a4:62:ac:f9:e2:b9:8f:4b:bd:06:73: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:45:7E:6D:E1:E9:A8:42:49:C4:DC:93:8B:DD:06:3C:7E:66:5C:50 X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:af:ed:f1:1b:36:f3:b9:6e:5f:fe:32:6a:8a:e1:4e:5c:1c: 36:c6:ef:ec:ee:8b:3f:b5:6a:7c:29:86:7c:f1:c4:57:c3:66: 2d:d0:36:70:d7:85:e6:91:8d:a6:ee:61:94:04:f1:9d:e6:2b: 48:9a:e6:b1:9e:9d:89:ef:f5:1f:c7:87:11:45:17:97:6e:11: d4:9d:6b:a6:8f:bf:d8:84:9e:fd:62:86:70:38:56:91:c8:15: 40:59:13:a3:73:cf:7a:0a:87:af:06:43:4d:2b:0a:48:7a:bc: b1:0b:14:ae:16:ce:18:f9:16:e4:57:cb:bb:46:13:ad:85:9a: 18:f3:d9:8e:2e:66:4d:c1:82:52:68:99:0b:ae:49:f2:5d:1d: 02:cf:19:f6:c2:2a:80:9d:1f:33:c8:70:1d:74:1f:2d:5f:88: aa:b8:9b:08:2e:31:5e:a2:e4:3e:37:18:33:5f:ac:5a:02:de: 32:45:43:52:92:9e:d2:4d:24:ef:45:42:86:1e:c6:50:b4:14: 1e:a8:a9:ac:1a:63:81:b9:c8:dd:6c:fc:3b:e8:e1:18:c4:c8: 60:28:7d:48:6b:a6:40:23:13:cb:b8:3d:b5:7a:d6:b8:56:2c: 15:1a:45:9e:55:2b:b3:b4:ea:eb:3b:25:1d:e7:2d:ad:43:af: 52:5b:7e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjUxMjA0MjM1MjA0WhcNMjUxMjExMjM1MjA0WjAYMRYwFAYD VQQDEw02OTMyMWVhNC1iNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUmrzw/oif2WLgV1d+Gjjr9jeSp2Zfnv2a1pp3Vx90gCus5e3eE5YDGqTwlx 0T6G5aqj+3ohx8+kMkzeeDwCmTJYqIaW5KtLXL4p1vErD/avXwogF2HxKbcKWq0W 4tkqeHxoSqwz6xWUazBy1sxROyUOzRIvLAIcaesK2aExvLAyOzQlC6y/s1YjmE50 lvTF3ogdH973IDG+JiuXTqHb0/olp7R99pGy6ZliVN0hNgHKcFvK6nBwgTkr26Ym mDe3ykr91HC10t6w7tVwUJL+Ci4J8n3Yal0ETH5WfKlnLRQmGE/fa/ZU15qo9Pmn MFFm4pcopGKs+eK5j0u9BnNC7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZFfm3h 6ahCScTck4vdBjx+ZlxQMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/r+3xGzbzuW5f/jJqiuFOXBw2xu/s7os/tWp8KYZ88cRXw2Yt0DZw 14XmkY2m7mGUBPGd5itImuaxnp2J7/Ufx4cRRReXbhHUnWumj7/YhJ79YoZwOFaR yBVAWROjc896CoevBkNNKwpIeryxCxSuFs4Y+RbkV8u7RhOthZoY89mOLmZNwYJS aJkLrknyXR0Czxn2wiqAnR8zyHAddB8tX4iquJsILjFeouQ+NxgzX6xaAt4yRUNS kp7STSTvRUKGHsZQtBQeqKmsGmOBucjdbPw76OEYxMhgKH1Ia6ZAIxPLuD21eta4 ViwVGkWeVSuztOrrOyUd5y2tQ69SW37y -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:54 2025 by rpki-client