This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft File: tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json) Hash identifier: XbYQONthtbkleBQb6q/5f+sd6clM7QVVXyWiay7cPYo= Subject key identifier: D5:20:63:13:4C:41:91:F3:A6:83:4C:05:B0:32:D1:7F:8C:45:26:4B Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft Manifest number: 1F Signing time: Fri 05 Dec 2025 05:39:03 +0000 Manifest this update: Fri 05 Dec 2025 05:39:02 +0000 Manifest next update: Fri 12 Dec 2025 05:39:02 +0000 Files and hashes: 1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: 0mhAhrwmdRvWyTW2e6hNMUQSpbx+V4nZ5ciAQYBhhg0=) 2: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: TkA4esTL9Exwr+47F2RMHuvhHZl+fNcFsQRPqVn17vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Validity Not Before: Dec 5 05:39:02 2025 GMT Not After : Dec 12 05:39:02 2025 GMT Subject: CN=69326ff7-081a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:d7:57:7d:71:46:e9:5b:d8:16:0b:d1:2c: c7:a7:e7:b3:00:cb:f0:cb:3a:ee:1f:6b:87:88:bf: cb:e4:b4:e5:32:ac:3c:39:6c:90:44:6c:9c:e5:ed: af:b8:bd:1a:09:7b:07:7d:db:8b:94:7c:01:b4:ce: d2:18:32:fa:b1:fb:f3:22:30:f3:c8:24:ee:8d:5b: 75:7d:ea:60:a1:26:e0:84:f8:d8:e7:f6:4c:3c:ce: a3:2a:2a:ec:dc:99:12:d2:d2:09:31:25:ce:7e:d7: 40:60:ed:d2:e9:99:ed:af:fd:f8:79:e4:dc:f9:cb: 75:af:16:d7:ad:92:8a:f5:b1:4e:b6:8e:79:7e:63: cd:89:80:92:e8:2e:56:25:f2:d3:1e:23:29:2a:87: 6a:b7:75:4e:5b:58:2e:42:24:73:de:97:55:49:cf: 65:4d:e9:f2:6c:e9:4c:65:70:30:e0:d4:d7:f7:de: ae:7b:be:ff:05:0e:a2:f8:60:f1:1f:f9:c5:76:e9: 52:1e:a2:e2:ab:72:fe:72:09:49:d0:76:32:82:ab: 22:92:c1:dc:3e:28:fb:ac:72:3c:01:65:04:84:e2: c9:bc:0f:0e:4f:e8:ff:3c:db:8f:d4:83:ec:37:7b: e1:7e:2e:a7:67:a1:6f:a2:ec:2b:31:5c:d5:ff:d0: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:20:63:13:4C:41:91:F3:A6:83:4C:05:B0:32:D1:7F:8C:45:26:4B X509v3 Authority Key Identifier: keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5b:bf:ac:62:18:49:68:64:da:c6:69:28:cc:8e:d7:91:fe: f8:57:a9:25:08:d9:e6:fb:18:25:c4:7f:ec:e4:cb:7d:70:f2: db:04:29:3e:08:24:62:67:16:bb:c3:0e:06:10:9d:1f:66:b9: b8:a3:a8:d6:03:f2:26:1c:87:9d:06:58:4a:1e:48:93:fd:6c: 12:61:9d:40:fe:a9:b8:8a:9e:3e:73:c1:3c:12:9c:49:a5:73: 22:9c:21:88:10:01:ab:d6:87:5c:85:92:15:97:5f:6f:58:08: bd:5f:28:b0:81:4e:74:75:91:12:14:2d:ff:e2:4e:d1:87:5e: 68:a6:19:84:57:d8:25:26:af:7e:62:ee:df:b6:9d:72:5f:15: fe:c2:16:98:42:f1:8a:3e:ff:c0:fe:23:3c:f1:7c:42:09:a1: d2:f5:eb:34:61:1e:35:cd:65:c0:a9:a4:c6:0a:6f:92:39:df: 1f:1b:f6:cb:4c:41:e9:43:35:f6:94:cf:58:f4:11:5e:46:12: b5:b4:17:30:3d:6e:da:7e:d0:7c:6a:ee:7b:dc:03:a1:96:99: 2e:2b:fe:3c:ef:d1:53:5a:f6:7f:7c:f2:44:2d:eb:ee:1a:32: c9:46:01:94:58:fe:04:86:25:74:61:86:74:e0:55:aa:1f:67: a5:a1:e8:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkI0NjExMC8GA1UEBRMoQjU0RTA4NDY1QjU0NUNFRUYxRTJFMTAwOTc3NUQ5MUJB NDEyQjYzRDAeFw0yNTEyMDUwNTM5MDJaFw0yNTEyMTIwNTM5MDJaMBgxFjAUBgNV BAMTDTY5MzI2ZmY3LTA4MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB5tdXfXFG6VvYFgvRLMen57MAy/DLOu4fa4eIv8vktOUyrDw5bJBEbJzl7a+4 vRoJewd924uUfAG0ztIYMvqx+/MiMPPIJO6NW3V96mChJuCE+Njn9kw8zqMqKuzc mRLS0gkxJc5+10Bg7dLpme2v/fh55Nz5y3WvFtetkor1sU62jnl+Y82JgJLoLlYl 8tMeIykqh2q3dU5bWC5CJHPel1VJz2VN6fJs6UxlcDDg1Nf33q57vv8FDqL4YPEf +cV26VIeouKrcv5yCUnQdjKCqyKSwdw+KPuscjwBZQSE4sm8Dw5P6P8824/Ug+w3 e+F+LqdnoW+i7CsxXNX/0F7lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1SBjE0xB kfOmg0wFsDLRf4xFJkswHwYDVR0jBBgwFoAUtU4IRltUXO7x4uEAl3XZG6QStj0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjQ2LzA4ODcwMUI4QUJC NDExRjBBQkYyMDk0MEM0RjlBRTAyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3Rq MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFU0SVJsdFVYTzd4NHVFQWwzWFpHNlFTdGowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QjQ2LzA4ODcwMUI4QUJCNDExRjBBQkYyMDk0MEM0RjlBRTAyL3RVNElSbHRVWE83 eDR1RUFsM1haRzZRU3RqMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9bv6xiGEloZNrGaSjMjteR/vhXqSUI2eb7GCXEf+zky31w8tsEKT4I JGJnFrvDDgYQnR9mubijqNYD8iYch50GWEoeSJP9bBJhnUD+qbiKnj5zwTwSnEml cyKcIYgQAavWh1yFkhWXX29YCL1fKLCBTnR1kRIULf/iTtGHXmimGYRX2CUmr35i 7t+2nXJfFf7CFphC8Yo+/8D+IzzxfEIJodL16zRhHjXNZcCppMYKb5I53x8b9stM QelDNfaUz1j0EV5GErW0FzA9btp+0Hxq7nvcA6GWmS4r/jzv0VNa9n988kQt6+4a MslGAZRY/gSGJXRhhnTgVaofZ6Wh6AE= -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:53 2025 by rpki-client