This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: Fz0HmdlPMAs/hY5Q7b41Jur0JKfGruaGQ03HIwAupiY= Subject key identifier: D2:B5:15:CA:8F:BD:0E:F2:32:A7:D9:0D:36:9F:76:EE:27:DA:8C:E0 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F90 Signing time: Sat 06 Dec 2025 15:42:47 +0000 Manifest this update: Sat 06 Dec 2025 15:42:46 +0000 Manifest next update: Sat 13 Dec 2025 15:42:46 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: Dg3k8j46b/6Wkk5JwpFsslqSI/CHms2Ll9eEBThrGrY=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8120 (0x1fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Dec 6 15:42:46 2025 GMT Not After : Dec 13 15:42:46 2025 GMT Subject: CN=69344ef6-b695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:e6:76:f6:5a:d0:d6:e0:e4:95:bd:3a:25: 89:37:9e:2d:9e:70:91:d1:91:15:aa:7a:84:84:88: 45:b8:1e:f0:2a:3b:5b:99:86:bc:21:c9:d8:bd:7d: a0:d3:79:13:a5:31:d6:e9:e3:48:ee:c2:af:99:a8: 33:1a:48:f2:20:46:0b:ea:d9:4a:ec:98:d4:23:7e: 5c:3f:f5:e3:0b:a9:f3:79:36:8e:a2:ca:f5:51:fb: a6:0a:1b:42:26:37:af:fb:2c:91:94:f5:8b:0a:20: c4:14:c9:c7:9b:d1:61:55:55:b0:b9:64:e6:9a:fe: ef:88:68:34:f9:c0:d7:ab:9f:1b:b0:8f:11:fb:97: 13:66:cb:e2:63:1b:fc:ca:ae:c7:7a:62:90:9b:6d: f5:ad:dc:ce:88:58:d8:ec:88:0e:3a:11:b3:4c:3c: 12:13:68:da:e4:dd:80:0c:35:1d:e6:f9:21:33:04: cf:26:9c:a5:91:65:f5:c7:0d:67:ba:9f:62:75:57: 1a:54:87:ac:97:f6:3b:81:2e:56:3f:96:bd:4c:cf: d8:0a:2b:b7:a8:06:94:f9:23:29:0e:29:9b:ca:68: 03:29:5a:62:a1:2a:00:18:69:2f:91:47:fa:4f:cd: 28:72:a8:75:42:e5:14:52:35:d3:e3:df:96:a7:ae: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B5:15:CA:8F:BD:0E:F2:32:A7:D9:0D:36:9F:76:EE:27:DA:8C:E0 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4f:04:fc:02:75:59:03:38:0a:35:61:e7:d8:8b:b1:b2:af: e4:9b:3b:c7:24:0a:66:60:7e:2b:a4:3d:ba:2e:1d:0a:0a:6b: 81:b5:91:5b:b3:95:2c:e5:4c:9e:0a:65:3c:85:a9:16:60:0b: 52:21:01:24:7f:6e:7c:9b:60:cd:f6:07:09:18:25:36:eb:d1: 8c:0a:c0:d6:8c:c8:dd:26:5d:c9:37:fa:b9:a6:d7:91:12:53: 92:d1:43:f1:a6:63:04:c4:dc:b3:19:80:7a:50:32:b4:3b:f3: df:92:bd:77:cd:62:a3:e3:7d:dc:cb:bc:f1:7d:a0:0f:6c:91: 0a:e2:7e:7b:fb:df:d6:79:2b:e0:fd:5d:29:c9:d6:9d:e4:81: be:a0:41:f8:d8:5f:35:97:95:22:5d:da:1b:eb:2e:c7:17:88: 41:fc:55:4f:07:22:0a:84:2b:ee:41:ca:87:35:86:99:b4:29: 8f:fb:57:ad:f2:03:b9:b7:c7:11:6d:69:d2:90:cf:9e:3b:9f: 0e:68:b0:06:66:19:ef:8a:4a:73:df:d1:6d:5b:c9:b0:46:67: ce:ae:aa:ce:4b:c1:f7:a6:68:82:0c:21:e7:40:23:a7:b7:4c: 3f:2e:09:ce:3a:3a:3a:99:90:12:c0:3c:c4:35:74:7f:f6:56: 78:ff:80:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUxMjA2MTU0MjQ2WhcNMjUxMjEzMTU0MjQ2WjAYMRYwFAYD VQQDEw02OTM0NGVmNi1iNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZXmdvZa0Nbg5JW9OiWJN54tnnCR0ZEVqnqEhIhFuB7wKjtbmYa8IcnYvX2g 03kTpTHW6eNI7sKvmagzGkjyIEYL6tlK7JjUI35cP/XjC6nzeTaOosr1UfumChtC Jjev+yyRlPWLCiDEFMnHm9FhVVWwuWTmmv7viGg0+cDXq58bsI8R+5cTZsviYxv8 yq7HemKQm231rdzOiFjY7IgOOhGzTDwSE2ja5N2ADDUd5vkhMwTPJpylkWX1xw1n up9idVcaVIesl/Y7gS5WP5a9TM/YCiu3qAaU+SMpDimbymgDKVpioSoAGGkvkUf6 T80ocqh1QuUUUjXT49+Wp665DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK1FcqP vQ7yMqfZDTafdu4n2ozgMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTTwT8AnVZAzgKNWHn2Iuxsq/kmzvHJApmYH4rpD26Lh0KCmuBtZFb s5Us5UyeCmU8hakWYAtSIQEkf258m2DN9gcJGCU269GMCsDWjMjdJl3JN/q5pteR ElOS0UPxpmMExNyzGYB6UDK0O/Pfkr13zWKj433cy7zxfaAPbJEK4n57+9/WeSvg /V0pydad5IG+oEH42F81l5UiXdob6y7HF4hB/FVPByIKhCvuQcqHNYaZtCmP+1et 8gO5t8cRbWnSkM+eO58OaLAGZhnvikpz39FtW8mwRmfOrqrOS8H3pmiCDCHnQCOn t0w/LgnOOjo6mZASwDzENXR/9lZ4/4C/ -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:12 2025 by rpki-client