This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: IjfnneVOjd7iqRvYvTyFDhfyHEAPC9pyKrEh5OR5gG8= Subject key identifier: F1:DE:38:66:CD:2F:99:A7:69:5D:29:9B:A3:89:47:01:26:75:AA:1E Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 0670 Signing time: Sat 06 Dec 2025 21:26:55 +0000 Manifest this update: Sat 06 Dec 2025 21:26:55 +0000 Manifest next update: Sat 13 Dec 2025 21:26:55 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: 12YAGYFOEDyDL/IrgUw4uEshngKoT/zDkMAKPJgsTHc=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Dec 6 21:26:55 2025 GMT Not After : Dec 13 21:26:55 2025 GMT Subject: CN=69349f9f-185e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:bd:16:03:cd:bd:01:75:61:9e:f9:2c:5e: e6:e1:ad:fb:8f:e5:48:78:91:45:73:6b:da:54:b8: 40:6b:92:0c:c7:40:5d:57:2b:9b:c3:b8:fa:b1:fb: 0e:b5:a2:34:ca:5b:63:5c:e4:c9:d1:92:9b:e1:d2: 62:cc:0b:9c:99:54:cf:bd:2f:af:31:14:d2:27:b6: 7c:68:50:39:9c:a4:48:9c:df:ee:61:9d:e8:16:15: 15:8a:a2:5a:7b:3c:21:ac:39:75:01:5d:d1:26:96: 72:03:20:6c:24:4b:38:d2:65:9a:ea:48:11:55:3b: 50:f5:56:7c:52:89:61:1d:5d:de:96:97:40:ce:5c: a1:e0:41:9e:de:50:ac:ca:9d:a0:00:27:e3:d3:e4: 8b:c4:82:9a:6a:9f:2d:64:0b:79:4b:2f:5f:67:25: 5f:bc:3b:af:14:b3:33:61:44:ce:7e:ae:08:48:a9: cf:34:20:50:d4:a3:34:f7:29:1b:33:20:6c:cb:79: 90:cd:a9:ce:81:64:e6:cc:52:3a:96:a3:ae:90:f0: 23:ce:4b:a9:b1:c1:15:a3:17:24:d6:51:64:fb:9e: 45:2f:92:91:6c:80:1e:b7:82:49:02:7c:c4:98:45: 15:06:6b:6e:5c:98:66:b4:be:78:f8:20:41:c1:c9: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DE:38:66:CD:2F:99:A7:69:5D:29:9B:A3:89:47:01:26:75:AA:1E X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2a:0d:08:d7:7e:9c:9d:9b:20:de:38:53:dd:79:e5:72:82: 1f:e7:61:ea:9b:4c:90:a5:1f:c0:04:08:b2:fc:ec:2c:4d:85: be:17:a7:a4:b8:32:dc:a0:2e:ee:91:3e:b1:20:1b:cb:f3:26: 17:f1:9e:b1:ab:bd:6c:cb:7c:4a:b1:6c:39:0e:e8:dc:c7:07: 4a:fb:42:dd:47:25:0f:de:6d:66:70:12:c5:96:50:3b:f5:91: 37:b6:3b:ee:a7:8c:33:b7:75:54:04:da:db:fd:aa:9c:f0:d0: 0f:b0:36:8a:af:a9:65:98:f2:f7:fb:cd:ef:a7:5c:95:4f:fa: 49:24:6e:e8:06:c4:5f:be:3b:d3:a3:61:ac:a1:3b:18:74:10: c0:be:c0:7c:fe:c4:ef:a8:a5:e3:23:c8:78:da:6b:20:b1:f0: e8:71:dd:2e:e2:ad:94:4a:08:d4:ae:d1:ac:07:2f:9c:79:7e: 3e:e8:59:8b:16:a8:d3:ea:c6:71:b6:38:4b:7c:2f:95:6b:46: c2:4f:99:8c:62:9e:17:2b:78:0b:e3:2d:7d:34:f3:d4:80:d4: 8b:57:48:8e:9d:e3:d1:30:48:59:9c:d2:48:b4:e1:34:52:05: 85:fb:56:87:38:87:fb:f6:27:99:53:f6:5e:23:89:08:81:23: 07:c4:18:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUxMjA2MjEyNjU1WhcNMjUxMjEzMjEyNjU1WjAYMRYwFAYD VQQDEw02OTM0OWY5Zi0xODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsu9FgPNvQF1YZ75LF7m4a37j+VIeJFFc2vaVLhAa5IMx0BdVyubw7j6sfsO taI0yltjXOTJ0ZKb4dJizAucmVTPvS+vMRTSJ7Z8aFA5nKRInN/uYZ3oFhUViqJa ezwhrDl1AV3RJpZyAyBsJEs40mWa6kgRVTtQ9VZ8UolhHV3elpdAzlyh4EGe3lCs yp2gACfj0+SLxIKaap8tZAt5Sy9fZyVfvDuvFLMzYUTOfq4ISKnPNCBQ1KM09ykb MyBsy3mQzanOgWTmzFI6lqOukPAjzkupscEVoxck1lFk+55FL5KRbIAet4JJAnzE mEUVBmtuXJhmtL54+CBBwckhuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHeOGbN L5mnaV0pm6OJRwEmdaoeMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZKg0I136cnZsg3jhT3XnlcoIf52Hqm0yQpR/ABAiy/OwsTYW+F6ek uDLcoC7ukT6xIBvL8yYX8Z6xq71sy3xKsWw5DujcxwdK+0LdRyUP3m1mcBLFllA7 9ZE3tjvup4wzt3VUBNrb/aqc8NAPsDaKr6llmPL3+83vp1yVT/pJJG7oBsRfvjvT o2GsoTsYdBDAvsB8/sTvqKXjI8h42msgsfDocd0u4q2USgjUrtGsBy+ceX4+6FmL FqjT6sZxtjhLfC+Va0bCT5mMYp4XK3gL4y19NPPUgNSLV0iOnePRMEhZnNJItOE0 UgWF+1aHOIf79ieZU/ZeI4kIgSMHxBhL -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:07 2025 by rpki-client