This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: mpK9TQ+3K3oVjL+sBqN+EofhoZFuTypy/4SMSRRbqyY= Subject key identifier: 9E:CE:25:EC:54:E6:CF:E6:03:B5:70:FC:60:AF:CA:04:41:FC:9B:E4 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0574 Signing time: Thu 04 Dec 2025 21:58:25 +0000 Manifest this update: Thu 04 Dec 2025 21:58:25 +0000 Manifest next update: Thu 11 Dec 2025 21:58:25 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: 1RVH7TLDSmjTErcIp98IJDSCweVhVwDq5vF21n8MCJ0=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: xqj1Iz7t/A8a80aAwvGG6Txdmfyu0/4YD+uVRfrZJ7U=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: CF/ycti5B8sO9TQT4NkKOcvGvBc1ti1JSzdWtmNe964=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Dec 4 21:58:25 2025 GMT Not After : Dec 11 21:58:25 2025 GMT Subject: CN=69320401-1a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:eb:3c:11:e6:0e:0c:07:d1:c9:3a:ff:fa: 75:e4:a7:cb:23:55:6d:85:7a:cc:79:58:91:bb:3d: c4:8b:29:c9:84:38:d1:72:4c:5e:db:72:cc:b2:e5: 19:c8:41:8c:d6:08:4c:31:e8:9c:d4:35:7d:2d:06: ac:50:2e:34:28:2a:93:aa:63:eb:38:fc:92:07:31: fd:b7:83:92:6a:ea:73:4c:80:5a:c0:fa:3f:d9:c9: 1b:26:3e:fc:95:6f:59:63:4a:df:57:f4:69:cf:ae: 3d:5a:3d:13:7c:85:62:23:a3:6a:9b:1a:b4:4a:7d: c4:0f:9e:ee:00:3e:e0:47:12:e3:1b:d2:90:f3:4a: 79:d5:73:73:52:ce:39:e1:a2:ef:0e:52:1f:ea:2d: fa:cc:14:20:ad:bf:88:13:7a:0d:73:9c:c7:b2:46: 65:5d:24:a2:00:eb:cc:ec:6e:4d:00:3a:ec:0b:1c: 83:7a:3c:c0:c0:7d:48:06:39:e7:1b:61:5f:a0:69: e4:d4:8d:23:7f:4c:fb:ac:22:ac:ac:51:3c:b0:49: 0d:6a:05:f6:1b:92:fe:af:cc:b9:da:0d:41:a9:c5: 08:fe:05:2a:4a:45:03:ef:0a:ed:f9:9e:8b:23:2f: 04:5a:4b:58:56:c6:ed:a0:e7:e4:25:a6:20:52:81: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:25:EC:54:E6:CF:E6:03:B5:70:FC:60:AF:CA:04:41:FC:9B:E4 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a9:43:91:0d:1d:2d:7f:16:75:7c:2d:0b:45:9e:24:bb:7f: ac:45:5b:cb:ff:99:49:03:f3:6b:17:27:6a:55:57:09:8d:ad: 2e:67:f1:72:b2:e7:7f:4a:86:0d:7e:3b:42:34:b7:82:5f:8d: 0c:1f:1b:e1:9e:0e:00:75:89:d2:41:f9:05:63:4a:a5:53:ef: 08:20:f4:89:d8:91:c6:10:15:2f:2b:dc:40:d9:90:46:f5:9d: 66:c8:70:ba:2e:f8:76:3c:f4:d5:71:22:81:08:6d:b9:08:d6: 1f:26:9a:6c:c9:a2:e7:ef:1f:39:cf:56:f1:b3:f6:0c:79:99: 36:b6:e6:1b:45:f0:db:42:2e:ca:bb:2e:76:c4:22:3c:9e:1c: 24:5e:37:54:ac:b4:a9:f7:69:b9:76:ee:d3:3e:10:09:ef:51: 61:79:d5:c2:6c:d0:77:59:79:cd:01:6a:b1:ec:bb:aa:2c:2d: fc:b8:9a:b1:38:dc:f9:31:52:37:14:e9:d0:63:dd:39:09:1a: e9:dc:c2:5a:50:1b:e6:ec:18:6b:d7:d3:cb:3d:8e:62:57:f0: fb:21:3b:cb:3a:2e:ed:04:7f:93:6b:00:a9:0e:68:e8:64:89: 40:18:c0:3f:2a:51:c9:5b:89:83:46:5f:fe:6f:2f:d8:5d:c3: c2:bc:2a:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUxMjA0MjE1ODI1WhcNMjUxMjExMjE1ODI1WjAYMRYwFAYD VQQDEw02OTMyMDQwMS0xYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhvrPBHmDgwH0ck6//p15KfLI1VthXrMeViRuz3EiynJhDjRckxe23LMsuUZ yEGM1ghMMeic1DV9LQasUC40KCqTqmPrOPySBzH9t4OSaupzTIBawPo/2ckbJj78 lW9ZY0rfV/Rpz649Wj0TfIViI6Nqmxq0Sn3ED57uAD7gRxLjG9KQ80p51XNzUs45 4aLvDlIf6i36zBQgrb+IE3oNc5zHskZlXSSiAOvM7G5NADrsCxyDejzAwH1IBjnn G2FfoGnk1I0jf0z7rCKsrFE8sEkNagX2G5L+r8y52g1BqcUI/gUqSkUD7wrt+Z6L Iy8EWktYVsbtoOfkJaYgUoG4IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7OJexU 5s/mA7Vw/GCvygRB/JvkMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHqUORDR0tfxZ1fC0LRZ4ku3+sRVvL/5lJA/NrFydqVVcJja0uZ/Fy sud/SoYNfjtCNLeCX40MHxvhng4AdYnSQfkFY0qlU+8IIPSJ2JHGEBUvK9xA2ZBG 9Z1myHC6Lvh2PPTVcSKBCG25CNYfJppsyaLn7x85z1bxs/YMeZk2tuYbRfDbQi7K uy52xCI8nhwkXjdUrLSp92m5du7TPhAJ71FhedXCbNB3WXnNAWqx7LuqLC38uJqx ONz5MVI3FOnQY905CRrp3MJaUBvm7Bhr19PLPY5iV/D7ITvLOi7tBH+TawCpDmjo ZIlAGMA/KlHJW4mDRl/+by/YXcPCvCqK -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:16 2025 by rpki-client