This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: aFlmnUki3eZgm6YWPgDnP7PB3eSUmeblwkNN+RKZUug= Subject key identifier: E5:76:64:F2:E9:90:13:A7:E2:26:16:8E:7D:0B:D7:93:56:1A:97:39 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 03D3 Signing time: Thu 04 Dec 2025 23:02:57 +0000 Manifest this update: Thu 04 Dec 2025 23:02:57 +0000 Manifest next update: Thu 11 Dec 2025 23:02:57 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: QOtBNGd99CsKYghoE6sTyxTxV5zJRqQvZwckYXwtyuw=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Dec 4 23:02:57 2025 GMT Not After : Dec 11 23:02:57 2025 GMT Subject: CN=69321321-c8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:6f:24:88:8c:b8:c3:72:bc:18:6c:b5:08: fc:c3:32:20:76:43:0e:ce:b3:9f:f4:9c:ad:a1:a2: be:ae:0b:98:49:15:ee:3f:3c:47:5d:07:18:cb:15: bd:27:b2:49:4d:11:40:f9:ad:80:7e:95:7d:3d:c6: f9:86:89:ab:d1:68:a9:4e:a1:49:db:45:8a:6d:de: 82:3f:41:af:94:81:6e:1c:ef:0d:18:a9:6f:b3:15: 0f:95:60:1f:bb:5c:7c:bd:b6:d8:f5:5a:a5:4e:4d: 66:96:c3:3e:c4:1d:20:bd:5c:40:21:ff:9d:44:01: b8:f6:19:7f:b8:e4:86:13:1e:d1:09:be:e6:bd:de: 95:92:b0:7c:6a:21:62:f4:3d:46:29:a3:47:a8:89: 78:a4:9a:4e:b4:27:51:cb:d5:2d:74:28:31:43:11: 8f:db:14:37:76:5c:f2:10:1a:83:1b:d1:7d:03:9f: a8:9a:5d:89:e6:4b:a8:a7:35:3c:12:d8:8a:29:4c: cc:1b:02:76:c1:13:2c:19:6f:d7:db:e7:96:c3:bf: d1:96:0d:06:48:a8:34:16:fc:2f:e2:12:ba:95:16: 0a:52:23:46:68:e6:41:99:38:13:96:5d:ed:94:22: a0:d8:44:00:5c:95:66:51:35:bc:62:5c:fd:f1:ef: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:76:64:F2:E9:90:13:A7:E2:26:16:8E:7D:0B:D7:93:56:1A:97:39 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8a:5e:13:7e:ba:19:ee:ed:f2:61:d5:39:43:1f:3a:85:8e: 41:9d:a7:52:65:1d:bc:7e:f1:eb:2c:83:8b:c7:80:53:7f:09: 01:cd:73:2a:4b:5b:88:e4:f8:91:ed:96:06:4c:f0:b0:cc:ab: 01:a1:50:0f:6e:f3:cc:2f:36:27:05:16:c4:e7:39:22:cf:19: fa:ff:0f:83:5f:66:48:15:e0:fc:e8:3d:3a:2f:aa:82:9d:cc: 69:b1:f5:69:f6:f4:e6:ed:f6:e1:dd:6d:84:81:e9:d6:b3:d8: 9f:1a:d5:af:a9:d0:13:50:bc:fb:40:d3:9e:69:db:f1:1c:58: d1:9d:bf:43:11:d4:f4:62:5e:04:56:fa:18:16:35:f1:fe:83: a1:b6:29:bd:55:58:10:6c:dc:ab:83:36:d9:01:3b:c2:f1:12: b9:66:1f:ec:99:01:30:83:31:14:bd:90:8b:bb:bf:00:8b:35: 92:cc:a6:54:33:36:13:df:7e:5c:5b:c0:0d:b6:cf:eb:dd:21: cd:b4:b2:c7:f8:31:6b:ba:7d:ff:c3:aa:2c:53:e1:3d:60:65: 92:91:93:ed:53:2d:f5:40:cb:bc:51:58:42:bf:eb:bb:d0:77: 73:6d:ba:1c:8e:95:7f:ae:91:3b:f3:b0:86:3c:8e:c7:e5:fe: 3c:fe:7f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUxMjA0MjMwMjU3WhcNMjUxMjExMjMwMjU3WjAYMRYwFAYD VQQDEw02OTMyMTMyMS1jOGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6FvJIiMuMNyvBhstQj8wzIgdkMOzrOf9JytoaK+rguYSRXuPzxHXQcYyxW9 J7JJTRFA+a2AfpV9Pcb5homr0WipTqFJ20WKbd6CP0GvlIFuHO8NGKlvsxUPlWAf u1x8vbbY9VqlTk1mlsM+xB0gvVxAIf+dRAG49hl/uOSGEx7RCb7mvd6VkrB8aiFi 9D1GKaNHqIl4pJpOtCdRy9UtdCgxQxGP2xQ3dlzyEBqDG9F9A5+oml2J5kuopzU8 EtiKKUzMGwJ2wRMsGW/X2+eWw7/Rlg0GSKg0Fvwv4hK6lRYKUiNGaOZBmTgTll3t lCKg2EQAXJVmUTW8Ylz98e/nGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV2ZPLp kBOn4iYWjn0L15NWGpc5MB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxil4TfroZ7u3yYdU5Qx86hY5BnadSZR28fvHrLIOLx4BTfwkBzXMq S1uI5PiR7ZYGTPCwzKsBoVAPbvPMLzYnBRbE5zkizxn6/w+DX2ZIFeD86D06L6qC ncxpsfVp9vTm7fbh3W2EgenWs9ifGtWvqdATULz7QNOeadvxHFjRnb9DEdT0Yl4E VvoYFjXx/oOhtim9VVgQbNyrgzbZATvC8RK5Zh/smQEwgzEUvZCLu78AizWSzKZU MzYT335cW8ANts/r3SHNtLLH+DFrun3/w6osU+E9YGWSkZPtUy31QMu8UVhCv+u7 0HdzbbocjpV/rpE787CGPI7H5f48/n/Z -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:45 2025 by rpki-client