This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json) Hash identifier: gKZ5NvVrVqnTP3+yJsR265z+B5n45gYQk0slTKwkii4= Subject key identifier: 90:56:14:44:81:CA:F2:63:BA:E2:87:5E:12:29:BC:F0:FC:44:01:7C Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft Manifest number: 2D Signing time: Fri 05 Dec 2025 05:28:07 +0000 Manifest this update: Fri 05 Dec 2025 05:28:07 +0000 Manifest next update: Fri 12 Dec 2025 05:28:07 +0000 Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: g61DCJpi9GxOd2jdsUcKAUPcPA8HOGDshOOFIt2GJaE=) 2: 006500928EE611F094A24C77C4F9AE02.roa (hash: DbkaOgwAriP/Mwbxrm6lRAhlKWJ1+3EkIPcc3uOwQSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Validity Not Before: Dec 5 05:28:07 2025 GMT Not After : Dec 12 05:28:07 2025 GMT Subject: CN=69326d67-bfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:ab:91:ab:1e:47:20:26:4a:8e:1a:ad:a8: 40:34:2e:31:51:9f:02:cd:cf:4a:15:72:97:50:8e: 51:1f:f0:7d:c0:f9:bf:76:dd:a3:4a:25:15:4b:09: 7c:0f:4f:5c:09:ff:84:41:d3:af:54:36:0c:27:b4: 02:d0:a9:08:66:52:3a:be:d8:89:1c:5d:73:83:15: 46:ed:79:3f:0f:9f:98:ee:23:1e:9b:65:be:c0:ee: 75:a7:6d:8c:93:62:cc:1a:85:a0:6d:2d:d5:46:43: 79:75:67:f2:0e:cd:6e:e2:8a:76:a4:ea:18:0f:22: 6a:51:b1:63:18:bb:02:96:3c:fe:48:58:3f:f4:b4: 00:4d:d5:97:7f:41:c5:18:b8:e3:b2:aa:8e:9a:18: ac:ab:8e:f1:e5:73:11:c9:c6:ec:1b:05:0b:d0:8f: bb:25:c4:8b:b2:92:65:d2:e6:70:5c:7f:b4:21:9b: 74:d0:8c:14:14:48:2e:fb:a0:8f:25:4b:7c:f1:41: 5f:17:aa:b4:4b:32:af:8d:ac:24:18:54:6b:52:b9: 47:9c:17:96:a4:5d:ea:fd:cb:53:1f:08:a1:9d:da: 0c:f5:66:66:19:21:5a:d6:b5:af:bc:76:71:1a:2e: 11:cf:0f:e1:d5:19:cb:11:dc:df:d7:c5:0b:52:ff: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:56:14:44:81:CA:F2:63:BA:E2:87:5E:12:29:BC:F0:FC:44:01:7C X509v3 Authority Key Identifier: keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1c:a2:68:6c:40:37:5c:15:80:14:20:62:38:18:5d:54:58: 5d:0f:87:3a:b4:a2:8b:cc:18:44:7f:cd:87:98:47:d9:5b:72: 7d:75:e3:88:ad:20:33:c3:dc:c7:b3:9b:2c:ed:48:bf:be:5a: dc:d5:9a:7c:8a:1f:c1:34:75:f5:11:4a:38:f3:20:a5:be:14: b2:3d:be:7d:8c:17:4d:4a:a6:c2:58:4e:6e:99:80:e2:21:67: f5:8b:ad:36:49:3f:ef:07:27:4d:e2:8c:44:0c:4b:cf:13:b4: ef:8b:45:7a:14:49:c5:06:af:2d:50:3b:dc:d5:05:20:b3:54: 61:63:ea:d5:86:a8:a1:3e:97:ed:93:7f:9d:fb:c3:93:6b:8e: 65:6b:dd:16:6a:cc:a9:9c:86:56:fb:89:09:64:2e:92:f2:06: 7f:d3:1d:cd:93:30:23:e1:2f:7a:97:55:95:d7:c5:55:80:e6: 5e:d4:cf:7e:00:57:e4:2a:08:39:e0:ad:c3:48:e2:81:b7:c4: 87:9c:48:68:c8:47:c8:83:8c:e2:87:f0:61:b0:e5:a3:84:be: 7a:43:9c:ab:ee:cc:36:19:ba:79:33:81:2f:b2:dd:50:ee:81: f9:fc:6b:8a:73:8b:92:bc:c3:47:9c:3a:a4:c1:a0:24:99:a2: 26:5b:13:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODBBNDExMC8GA1UEBRMoNEM3MDhDOUVCMUE3MjA0NDMyQTc3RTI1OEMxNkNEMTgy MDdDNTU3MzAeFw0yNTEyMDUwNTI4MDdaFw0yNTEyMTIwNTI4MDdaMBgxFjAUBgNV BAMTDTY5MzI2ZDY3LWJmZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWMauRqx5HICZKjhqtqEA0LjFRnwLNz0oVcpdQjlEf8H3A+b923aNKJRVLCXwP T1wJ/4RB069UNgwntALQqQhmUjq+2IkcXXODFUbteT8Pn5juIx6bZb7A7nWnbYyT YswahaBtLdVGQ3l1Z/IOzW7iinak6hgPImpRsWMYuwKWPP5IWD/0tABN1Zd/QcUY uOOyqo6aGKyrjvHlcxHJxuwbBQvQj7slxIuykmXS5nBcf7Qhm3TQjBQUSC77oI8l S3zxQV8XqrRLMq+NrCQYVGtSuUecF5akXer9y1MfCKGd2gz1ZmYZIVrWta+8dnEa LhHPD+HVGcsR3N/XxQtS/2XzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkFYURIHK 8mO64odeEim88PxEAXwwHwYDVR0jBBgwFoAUTHCMnrGnIEQyp34ljBbNGCB8VXMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MEE0Lzc4RDI2OTNFOEU1 MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVReXAzNGxqQmJOR0NCOFZY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEhDTW5yR25JRVF5cDM0bGpCYk5HQ0I4VlhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MEE0Lzc4RDI2OTNFOEU1MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVR eXAzNGxqQmJOR0NCOFZYTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHAcomhsQDdcFYAUIGI4GF1UWF0Phzq0oovMGER/zYeYR9lbcn1144it IDPD3MezmyztSL++WtzVmnyKH8E0dfURSjjzIKW+FLI9vn2MF01KpsJYTm6ZgOIh Z/WLrTZJP+8HJ03ijEQMS88TtO+LRXoUScUGry1QO9zVBSCzVGFj6tWGqKE+l+2T f537w5NrjmVr3RZqzKmchlb7iQlkLpLyBn/THc2TMCPhL3qXVZXXxVWA5l7Uz34A V+QqCDngrcNI4oG3xIecSGjIR8iDjOKH8GGw5aOEvnpDnKvuzDYZunkzgS+y3VDu gfn8a4pzi5K8w0ecOqTBoCSZoiZbE4w= -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:48 2025 by rpki-client