This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: 37Q2bybWYg0fkDzUcSBr2SDYzOFWiCS89Hfg+L/mCtk= Subject key identifier: A1:94:78:E4:83:6C:34:50:F6:A2:DA:9E:48:F1:99:7A:EE:95:B7:42 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 0641 Signing time: Thu 04 Dec 2025 21:27:11 +0000 Manifest this update: Thu 04 Dec 2025 21:27:11 +0000 Manifest next update: Thu 11 Dec 2025 21:27:11 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: o6HJp6YTRXsQQEVkl0U47ybNZtnU5JWRK7q/zQFMQu8=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Dec 4 21:27:11 2025 GMT Not After : Dec 11 21:27:11 2025 GMT Subject: CN=6931fcaf-bfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:17:1a:fd:05:6c:32:5f:d7:3f:f8:02:81: c8:35:47:9c:8a:24:94:48:67:b1:95:a3:ff:b6:0f: d9:04:67:92:ff:c2:8f:c8:2a:ef:fe:1a:bb:69:12: 13:b4:3c:7f:30:cb:e1:03:b7:f3:07:8e:1f:7a:42: 27:f4:b3:66:71:42:71:c7:56:6f:37:be:98:c8:c1: b0:6a:4d:54:72:72:d0:58:c3:90:52:38:fe:63:e4: 06:8b:89:47:62:0a:1d:5b:2c:a6:89:0c:d9:ea:e1: 8d:da:95:be:3c:25:ac:e9:ce:56:6a:ab:08:d3:03: cd:fe:1d:1f:23:75:0e:3f:86:a1:3c:1f:55:ab:52: a6:44:81:2d:cc:6c:09:2d:13:cf:68:24:09:fd:7d: bb:b1:26:3c:f1:20:90:f8:3f:8d:86:33:d9:e4:f8: 9f:b8:e9:68:d8:a2:bf:4d:57:1c:51:5b:8a:48:bb: 1f:0b:40:4d:e3:85:1c:31:67:46:21:af:16:cd:67: 04:f4:cd:64:c9:08:93:5d:4f:1e:46:de:4f:60:00: cf:e3:13:52:ef:23:a5:9d:72:e1:6b:ba:75:db:b4: be:38:b7:30:7f:5a:ff:8a:04:e6:63:15:d2:a2:ce: 8c:58:07:9b:1e:fd:9d:d1:8a:1b:f5:f1:35:25:44: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:78:E4:83:6C:34:50:F6:A2:DA:9E:48:F1:99:7A:EE:95:B7:42 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ca:cc:40:67:34:7f:3c:00:c3:77:a2:ed:7f:82:9f:0c:4d: 96:98:8b:3d:8f:49:db:ea:b3:0f:a3:31:43:31:f9:9f:1e:41: 4b:0b:7a:ed:4c:8a:e4:74:c5:c5:0d:af:e3:f2:6f:6b:56:06: c3:77:bf:5f:5b:c9:96:af:91:a6:96:6b:0a:97:24:35:75:0b: 9c:39:f2:2f:f9:c2:bd:64:9a:96:42:1b:b0:f2:8b:c2:96:88: 4d:fb:a4:39:3c:a6:c1:68:80:6f:81:5a:ef:60:a9:23:10:f9: 0f:44:6e:af:ee:0a:0a:f7:da:0e:6f:71:29:71:53:ae:a1:c6: be:63:d2:df:cf:8b:2c:b2:bb:3f:93:e5:d1:f5:4d:65:db:48: af:d1:62:2d:8e:bc:bd:6c:db:74:8b:fc:ed:9d:d7:16:78:08: bb:e8:f8:ef:3c:7e:0e:8e:d8:51:2c:2d:9d:06:73:2c:fe:42: 67:05:45:1b:6b:65:38:c0:c3:85:55:da:a9:eb:b7:ff:2c:74: cc:8d:cf:1f:88:45:3f:1a:5e:32:e5:dc:a9:ce:45:f3:ac:8f: 16:7a:1f:22:c1:a6:59:e5:b1:47:a5:f8:90:47:b7:8b:ea:11: ec:c0:b4:10:c9:38:f6:45:ae:bd:76:a4:7a:4d:d7:7c:04:bd: 47:7e:8d:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUxMjA0MjEyNzExWhcNMjUxMjExMjEyNzExWjAYMRYwFAYD VQQDEw02OTMxZmNhZi1iZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfYXGv0FbDJf1z/4AoHINUeciiSUSGexlaP/tg/ZBGeS/8KPyCrv/hq7aRIT tDx/MMvhA7fzB44fekIn9LNmcUJxx1ZvN76YyMGwak1UcnLQWMOQUjj+Y+QGi4lH YgodWyymiQzZ6uGN2pW+PCWs6c5WaqsI0wPN/h0fI3UOP4ahPB9Vq1KmRIEtzGwJ LRPPaCQJ/X27sSY88SCQ+D+NhjPZ5PifuOlo2KK/TVccUVuKSLsfC0BN44UcMWdG Ia8WzWcE9M1kyQiTXU8eRt5PYADP4xNS7yOlnXLha7p127S+OLcwf1r/igTmYxXS os6MWAebHv2d0Yob9fE1JURbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGUeOSD bDRQ9qLankjxmXrulbdCMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASysxAZzR/PADDd6Ltf4KfDE2WmIs9j0nb6rMPozFDMfmfHkFLC3rt TIrkdMXFDa/j8m9rVgbDd79fW8mWr5GmlmsKlyQ1dQucOfIv+cK9ZJqWQhuw8ovC lohN+6Q5PKbBaIBvgVrvYKkjEPkPRG6v7goK99oOb3EpcVOuoca+Y9Lfz4sssrs/ k+XR9U1l20iv0WItjry9bNt0i/ztndcWeAi76PjvPH4OjthRLC2dBnMs/kJnBUUb a2U4wMOFVdqp67f/LHTMjc8fiEU/Gl4y5dypzkXzrI8Weh8iwaZZ5bFHpfiQR7eL 6hHswLQQyTj2Ra69dqR6Tdd8BL1Hfo1v -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:43 2025 by rpki-client