This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: l5NeInWb9daBS0dE//+OXC9qy+bZbUAvv6YHzMSiAlc= Subject key identifier: C0:D4:FE:CB:31:20:1B:30:8A:30:69:72:A4:ED:A8:C8:E2:F9:92:D6 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: E1 Signing time: Fri 05 Dec 2025 03:39:28 +0000 Manifest this update: Fri 05 Dec 2025 03:39:27 +0000 Manifest next update: Fri 12 Dec 2025 03:39:27 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: fYl76/g+QJ+xvN62SpG+GGj8ZQ5ZINPL+5q9U9c8Eik=) 2: 9B3123BEC38C11F0A8D49A37C4F9AE02.roa (hash: Lzk2R03/ZF2ufkOlf+mVkfGkNvSjsS669eniiKj8mTU=) 3: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=) 5: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=) 6: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Dec 5 03:39:27 2025 GMT Not After : Dec 12 03:39:27 2025 GMT Subject: CN=693253ef-013d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:cf:f6:b8:e2:74:99:88:1f:1e:27:bb:c3: 64:8a:64:6e:95:a7:5c:99:29:08:3f:01:6f:e3:c5: 97:59:f8:06:e6:49:5b:fe:e7:4b:b6:b9:86:c7:2f: c5:52:cf:40:2b:5e:65:f2:4f:8a:84:bc:32:da:1d: 0e:80:d1:6d:cc:f2:8f:93:29:c6:9c:d7:c2:2c:c0: 8b:1d:1c:51:3b:27:bb:05:47:14:91:56:50:58:39: da:e3:e5:4a:95:68:49:61:c0:ac:e9:96:b3:d9:00: b9:c7:32:24:a6:e4:11:aa:ce:56:1a:07:0c:c3:b3: 18:50:28:f8:65:3c:f1:52:d5:7d:19:76:fa:ff:f7: 1b:cc:62:d9:e6:fa:22:1e:5c:dd:f1:5b:af:d9:67: 4e:5e:e6:bc:ec:21:e7:a8:a4:92:93:13:f9:ab:d7: fd:2b:d2:dd:7a:15:c8:e5:54:f3:d4:8a:cd:c0:37: 73:21:62:50:40:3a:a0:1a:dc:1c:0b:32:d2:6b:f3: 68:41:44:1b:b7:1d:29:ca:c5:7b:31:67:e4:34:20: 7a:e8:40:48:b9:9a:c4:14:a0:55:6d:b1:72:16:35: 9f:e7:00:32:8e:e0:57:4a:0f:b6:54:20:02:ce:36: 48:d8:52:e1:e4:52:1d:bb:e8:7f:1c:2c:62:ca:4b: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D4:FE:CB:31:20:1B:30:8A:30:69:72:A4:ED:A8:C8:E2:F9:92:D6 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:0b:85:95:24:4b:b1:dd:d9:e9:b5:a2:e1:5a:e9:67:b1:d0: c7:f7:d4:80:59:34:a2:ba:40:23:cd:83:0a:43:a5:c3:e0:70: 2e:b4:90:41:b3:76:79:81:ed:7e:ce:42:a9:2d:90:d3:ab:8f: 24:05:40:a3:07:78:a8:e4:d0:c2:9e:83:1c:51:b4:57:7d:6f: f6:73:ad:69:e7:bc:10:8c:4f:10:d6:9a:c1:ca:b4:ff:e0:69: a6:fa:45:79:1e:c6:2a:a2:cb:fc:35:e6:bc:47:ac:f0:20:12: ae:b0:92:d1:be:12:1b:6d:2e:57:b5:de:fb:14:17:8c:12:6f: 64:a9:fc:d1:07:c3:1d:23:ea:d5:62:37:5d:8f:80:27:13:0c: c7:91:20:0e:0d:5e:f6:fb:05:eb:c8:78:94:bc:02:ba:8e:f2: aa:ed:ed:cb:50:51:1d:ab:eb:0e:78:1a:82:5d:cc:64:1b:fe: bd:f8:21:dc:ba:04:32:5e:7f:f4:24:f0:0e:42:1e:c5:4b:16: 0b:f8:65:94:13:0e:be:27:f9:d1:75:45:48:4a:a8:9b:a0:eb: e4:ff:42:04:d2:63:9b:5f:cc:5f:24:4b:9b:a5:bb:ad:23:55: e1:fa:07:39:90:86:d9:24:80:f7:6e:55:99:5b:ed:94:8f:69: a3:07:4d:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMjA1MDMzOTI3WhcNMjUxMjEyMDMzOTI3WjAYMRYwFAYD VQQDEw02OTMyNTNlZi0wMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OXP9rjidJmIHx4nu8NkimRuladcmSkIPwFv48WXWfgG5klb/udLtrmGxy/F Us9AK15l8k+KhLwy2h0OgNFtzPKPkynGnNfCLMCLHRxROye7BUcUkVZQWDna4+VK lWhJYcCs6Zaz2QC5xzIkpuQRqs5WGgcMw7MYUCj4ZTzxUtV9GXb6//cbzGLZ5voi Hlzd8Vuv2WdOXua87CHnqKSSkxP5q9f9K9LdehXI5VTz1IrNwDdzIWJQQDqgGtwc CzLSa/NoQUQbtx0pysV7MWfkNCB66EBIuZrEFKBVbbFyFjWf5wAyjuBXSg+2VCAC zjZI2FLh5FIdu+h/HCxiyks0JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDU/ssx IBswijBpcqTtqMji+ZLWMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyC4WVJEux3dnptaLhWulnsdDH99SAWTSiukAjzYMKQ6XD4HAutJBB s3Z5ge1+zkKpLZDTq48kBUCjB3io5NDCnoMcUbRXfW/2c61p57wQjE8Q1prByrT/ 4Gmm+kV5HsYqosv8Nea8R6zwIBKusJLRvhIbbS5Xtd77FBeMEm9kqfzRB8MdI+rV Yjddj4AnEwzHkSAODV72+wXryHiUvAK6jvKq7e3LUFEdq+sOeBqCXcxkG/69+CHc ugQyXn/0JPAOQh7FSxYL+GWUEw6+J/nRdUVISqiboOvk/0IE0mObX8xfJEubpbut I1Xh+gc5kIbZJID3blWZW+2Uj2mjB02l -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:59 2025 by rpki-client