This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: Ps42Ktwn3H0Zlzab6/4zlG9ada9xArH8VSsgLFohebw= Subject key identifier: B3:D2:1C:99:4B:9F:9F:A5:5C:01:A7:3B:32:64:42:D9:A7:E8:73:0E Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 0253 Signing time: Sun 21 Dec 2025 00:57:47 +0000 Manifest this update: Sun 21 Dec 2025 00:57:46 +0000 Manifest next update: Sun 28 Dec 2025 00:57:46 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: i+PfOq2bV8/EXGjp+j41SKRnFKfgP7g9RCz1XF9h4Hs=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: liB32LHWoTY1DeFXivtb2A9uOYDMDxMmgU/KmD+uViE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: Dec 21 00:57:46 2025 GMT Not After : Dec 28 00:57:46 2025 GMT Subject: CN=6947460b-cbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:1a:40:9f:1f:02:34:1e:7e:59:9a:9b:a3: a8:f1:10:49:5c:9d:e1:b3:cc:c9:39:e4:2b:ca:28: a7:c6:36:a3:37:5a:89:57:f0:84:75:47:07:94:4c: 3f:a1:71:ae:ea:23:ac:ed:19:ab:ad:00:22:cf:43: ed:14:58:40:e4:9f:9f:db:66:bd:c1:dd:12:55:62: 32:76:4c:97:c7:cf:ec:2f:c3:ca:b7:58:05:c1:2d: 69:5a:1e:f9:fe:b4:53:ac:50:44:d3:44:77:9d:11: 60:a2:e5:1f:8e:15:d2:47:93:17:db:d1:fb:16:57: 89:68:7d:df:af:25:86:e6:64:17:5e:d3:a2:6b:92: 4e:2d:47:34:5e:03:54:f2:2b:f7:3f:28:af:bd:bf: b6:f0:e1:f3:d7:43:67:9e:b4:dd:1c:e7:fc:a7:d1: e6:34:7b:1c:34:16:8b:d8:4f:8c:17:34:8e:f7:50: 43:ba:8a:0f:36:01:5b:96:91:86:8f:43:d4:8c:dd: 36:c0:b6:72:4c:7d:9a:74:7a:30:c7:c2:7a:fc:6f: 87:51:7e:71:ae:1a:b6:ea:fd:57:e9:80:f2:96:1e: dc:60:2f:c3:d7:4b:6c:8b:56:fa:d6:26:3c:41:34: c6:e6:15:e0:65:84:a9:dd:b0:e8:4c:0b:55:b4:ea: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D2:1C:99:4B:9F:9F:A5:5C:01:A7:3B:32:64:42:D9:A7:E8:73:0E X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c0:05:b5:c1:d4:ca:c0:b3:55:16:bb:6f:fa:dc:b0:89:45: 5c:f9:e9:26:6b:58:90:82:35:cc:5f:46:44:d7:cd:73:a7:bd: f0:f4:7b:2a:24:69:be:20:15:35:c8:e6:7e:b9:46:38:36:5c: 8e:7a:6d:fb:6e:2c:47:c5:a7:32:61:c4:1b:92:ba:a6:0f:9b: 65:ea:19:1a:c5:8c:f8:a0:f2:73:24:b7:b9:10:fb:d8:c2:a6: ca:6a:26:0d:c2:a3:99:76:5d:ed:c9:52:2f:2f:7d:e1:c7:43: 91:d5:c7:57:eb:68:47:08:26:16:79:69:73:0a:e1:e1:83:a3: a9:7a:da:9d:e3:ff:18:43:16:51:bf:fa:79:8a:01:08:f4:b0: 6a:b9:99:7b:a0:9a:f3:6f:d2:e5:3e:87:a9:89:e7:51:a5:ff: 11:91:ab:58:db:74:25:d4:f5:03:eb:ca:80:70:a3:ee:49:48: 0d:ce:b6:eb:27:4a:c2:4f:e5:e8:c7:73:46:a4:51:7c:30:9f: 58:88:1a:34:2a:7b:2f:44:9f:a2:5c:91:83:da:3e:43:cc:26: 5d:72:b3:72:47:f2:0b:46:e3:4b:05:c7:b5:72:2d:71:d1:f7: 42:44:9a:14:c0:1c:71:13:3d:7d:0a:0b:fe:a7:f3:fe:d6:8e: 15:91:b3:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUxMjIxMDA1NzQ2WhcNMjUxMjI4MDA1NzQ2WjAYMRYwFAYD VQQDDA02OTQ3NDYwYi1jYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD8aQJ8fAjQeflmam6Oo8RBJXJ3hs8zJOeQryiinxjajN1qJV/CEdUcHlEw/ oXGu6iOs7RmrrQAiz0PtFFhA5J+f22a9wd0SVWIydkyXx8/sL8PKt1gFwS1pWh75 /rRTrFBE00R3nRFgouUfjhXSR5MX29H7FleJaH3fryWG5mQXXtOia5JOLUc0XgNU 8iv3Pyivvb+28OHz10NnnrTdHOf8p9HmNHscNBaL2E+MFzSO91BDuooPNgFblpGG j0PUjN02wLZyTH2adHowx8J6/G+HUX5xrhq26v1X6YDylh7cYC/D10tsi1b61iY8 QTTG5hXgZYSp3bDoTAtVtOpL2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPSHJlL n5+lXAGnOzJkQtmn6HMOMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmwAW1wdTKwLNVFrtv+tywiUVc+ekma1iQgjXMX0ZE181zp73w9Hsq JGm+IBU1yOZ+uUY4NlyOem37bixHxacyYcQbkrqmD5tl6hkaxYz4oPJzJLe5EPvY wqbKaiYNwqOZdl3tyVIvL33hx0OR1cdX62hHCCYWeWlzCuHhg6Opetqd4/8YQxZR v/p5igEI9LBquZl7oJrzb9LlPoepiedRpf8RkatY23Ql1PUD68qAcKPuSUgNzrbr J0rCT+Xox3NGpFF8MJ9YiBo0KnsvRJ+iXJGD2j5DzCZdcrNyR/ILRuNLBce1ci1x 0fdCRJoUwBxxEz19Cgv+p/P+1o4VkbOm -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:35 2025 by rpki-client