This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: cQmQPaTajjBj2hWvK1tZuquCpLp5ZYrBrPg8Xb9EJQg= Subject key identifier: DB:10:F9:66:CD:C3:60:42:5C:FA:45:23:27:A8:3C:C6:2D:DA:F2:1D Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: 0132 Signing time: Sun 07 Dec 2025 02:56:14 +0000 Manifest this update: Sun 07 Dec 2025 02:56:13 +0000 Manifest next update: Sun 14 Dec 2025 02:56:13 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: J/pkOEV3SkDrr1o6Eq1GuXWt86yof7p8LsYW15uXbIM=) 2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: SSYQhoePXSEZdBWsz2dSUFdjtoPBSwBZmvZLvzmRmE0=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: P3/wZ7DQvbJJfKWvdajqCfHfPIC9vT8MvrKGyjWYukc=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo=) 5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Dec 7 02:56:13 2025 GMT Not After : Dec 14 02:56:13 2025 GMT Subject: CN=6934ecce-0ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:e3:10:cb:44:71:f1:f9:c7:8d:09:f9:9e: 55:b7:b0:ea:75:df:cb:b3:54:95:60:3a:3e:3a:2f: 68:b1:11:64:da:61:3f:52:7f:2c:67:20:82:71:00: 3f:ca:7f:5a:40:43:5b:fc:b3:13:4c:1b:8a:f7:ed: 47:aa:68:17:e3:da:94:6f:9e:ac:33:4f:a4:aa:46: 88:56:74:86:20:79:fc:4a:70:26:59:39:6c:74:53: 87:9b:64:b5:2c:80:38:bb:34:e2:07:22:41:7e:6d: d9:ec:eb:0e:c8:dd:af:84:ae:4b:35:c5:fb:1a:0b: 35:2e:e0:a6:17:8b:a1:71:87:bb:81:3c:10:5a:a1: 1e:4d:e9:f3:cd:8d:42:d9:da:47:2d:ed:b3:1d:67: 81:4c:92:c7:61:74:2b:da:e6:d6:7b:6d:b8:99:a3: f3:5e:43:a9:f2:b1:9b:e8:4a:1c:15:08:7c:77:da: 54:07:c8:95:bf:08:26:07:fa:c0:03:a1:83:5c:da: ef:14:5e:a7:ea:44:7e:32:3c:97:25:e7:ce:a7:13: a8:c8:f3:46:6c:02:a8:d3:c7:b3:4e:ff:54:35:73: 0b:65:55:d7:0c:8e:ea:fc:7f:65:51:34:9a:f9:8f: fa:3c:f2:6f:80:45:01:8c:57:38:f1:0d:e2:18:6c: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:10:F9:66:CD:C3:60:42:5C:FA:45:23:27:A8:3C:C6:2D:DA:F2:1D X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ef:f0:dc:37:35:30:d3:6e:d2:bf:3a:f7:73:18:1e:ce:02: 1c:6c:a1:0d:c0:9a:11:b3:28:9e:46:5e:b8:4a:b3:9f:cc:56: 42:4f:85:64:fb:e5:7f:c4:c1:fa:bb:57:c8:18:0b:6c:9d:49: 0e:3f:e8:59:9d:5a:e7:7b:70:eb:90:56:6a:9b:cf:78:10:74: 8d:52:07:5a:3e:1e:ab:4e:dd:da:9b:a3:1f:4f:cc:77:af:a3: 56:28:76:73:f7:f4:ba:fc:ba:e4:da:91:16:bb:9f:b3:dc:26: 1b:79:15:fa:00:dd:64:4e:1f:17:4f:9a:df:2f:08:ba:cd:e9: b1:b0:25:0d:90:91:0f:5e:1d:b7:48:0e:21:1c:90:3d:f5:27: ba:46:78:5e:86:89:8f:88:e9:84:00:68:04:69:eb:10:c4:09: 3f:65:71:1f:12:64:48:91:01:42:70:87:7c:44:17:ff:d1:65: 33:4f:b6:e5:d8:10:26:ea:34:e1:eb:e9:f4:34:f6:39:78:19: df:a6:ba:a9:c4:73:f7:c4:9d:87:ef:9b:04:b9:ef:ad:95:db: d2:aa:a5:60:c2:06:b7:a9:46:8e:32:1d:86:98:1b:91:b3:75: 89:e8:20:f0:eb:6c:63:5e:6b:c0:11:e1:94:e1:14:6e:f1:16: 90:ff:84:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUxMjA3MDI1NjEzWhcNMjUxMjE0MDI1NjEzWjAYMRYwFAYD VQQDEw02OTM0ZWNjZS0wYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS7jEMtEcfH5x40J+Z5Vt7Dqdd/Ls1SVYDo+Oi9osRFk2mE/Un8sZyCCcQA/ yn9aQENb/LMTTBuK9+1HqmgX49qUb56sM0+kqkaIVnSGIHn8SnAmWTlsdFOHm2S1 LIA4uzTiByJBfm3Z7OsOyN2vhK5LNcX7Ggs1LuCmF4uhcYe7gTwQWqEeTenzzY1C 2dpHLe2zHWeBTJLHYXQr2ubWe224maPzXkOp8rGb6EocFQh8d9pUB8iVvwgmB/rA A6GDXNrvFF6n6kR+MjyXJefOpxOoyPNGbAKo08ezTv9UNXMLZVXXDI7q/H9lUTSa +Y/6PPJvgEUBjFc48Q3iGGxRUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsQ+WbN w2BCXPpFIyeoPMYt2vIdMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj7/DcNzUw027Svzr3cxgezgIcbKENwJoRsyieRl64SrOfzFZCT4Vk ++V/xMH6u1fIGAtsnUkOP+hZnVrne3DrkFZqm894EHSNUgdaPh6rTt3am6MfT8x3 r6NWKHZz9/S6/Lrk2pEWu5+z3CYbeRX6AN1kTh8XT5rfLwi6zemxsCUNkJEPXh23 SA4hHJA99Se6RnhehomPiOmEAGgEaesQxAk/ZXEfEmRIkQFCcId8RBf/0WUzT7bl 2BAm6jTh6+n0NPY5eBnfprqpxHP3xJ2H75sEue+tldvSqqVgwga3qUaOMh2GmBuR s3WJ6CDw62xjXmvAEeGU4RRu8RaQ/4S3 -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:44 2025 by rpki-client