This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft File: TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft (raw, json) Hash identifier: /LTATcAbNNcon/D8gpHBe6ytt+JQ8BD9yvk7S4ym5lk= Subject key identifier: 0E:0F:AC:9B:4B:FA:88:18:3F:75:F5:9F:BA:28:BC:6C:91:6A:3B:B7 Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft Manifest number: 33 Signing time: Fri 05 Dec 2025 05:23:23 +0000 Manifest this update: Fri 05 Dec 2025 05:23:22 +0000 Manifest next update: Fri 12 Dec 2025 05:23:22 +0000 Files and hashes: 1: TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl (hash: l+BciVp+oYJ62LxnVXibDo9PY5GTleSFpsDE5yjflII=) 2: 24C9831E83E611F0AF39BE57C4F9AE02.roa (hash: eoWky/ushFlFPOAMp9hbU/1xEcSwmCQfGQqBxUKHPn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Validity Not Before: Dec 5 05:23:22 2025 GMT Not After : Dec 12 05:23:22 2025 GMT Subject: CN=69326c4a-ad11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:1b:ba:a4:26:f8:d6:6d:7b:0b:97:97:1c: 71:fb:5d:fe:42:52:01:32:ac:e5:5e:23:d7:f9:ed: 32:5a:95:23:94:72:da:1e:5d:90:20:c5:b4:25:41: 83:80:40:16:79:b9:3f:a0:68:c2:8e:c0:b7:cf:96: fa:c8:c8:68:9d:d9:ae:c5:31:ce:aa:75:54:b0:97: 82:35:c1:30:6f:1c:9a:8c:34:05:c8:a7:09:52:78: 51:af:80:42:4e:e5:c9:d5:7b:a5:da:d7:97:63:02: fb:03:96:80:11:0d:71:e9:d3:56:80:7f:82:f2:95: cf:a5:40:66:0a:af:f5:94:2a:fb:b8:58:8b:81:39: ea:fb:82:20:b6:4e:19:c8:25:52:1e:d7:f9:a6:f4: 9c:a3:33:85:47:26:46:8b:c4:44:bc:18:89:4c:ce: 92:3d:2c:2b:72:d9:50:0c:23:fb:53:a6:d8:ac:87: f7:a4:01:c8:db:c1:e6:1b:db:41:1b:51:ec:ac:12: 8f:28:aa:0a:86:08:c4:b9:73:7a:02:5d:2c:74:19: 5c:ef:c4:e9:33:0d:ff:5e:e3:d7:1c:0f:3d:b7:75: 5c:5b:bb:cb:f5:66:cc:c2:00:5e:84:51:db:41:d4: f9:e4:aa:95:df:c6:db:18:3f:64:8f:66:83:00:83: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0F:AC:9B:4B:FA:88:18:3F:75:F5:9F:BA:28:BC:6C:91:6A:3B:B7 X509v3 Authority Key Identifier: keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:17:17:59:62:87:62:d3:fe:32:bd:42:95:e0:ee:83:ea:13: e9:8a:e1:86:f3:f1:87:3a:67:3e:f1:a8:82:59:42:77:73:09: 11:09:61:10:ed:cf:b7:9f:cf:f9:b0:70:ad:3e:47:59:5f:da: da:63:cc:e8:05:aa:57:8c:11:2d:7b:c9:1f:89:d6:3a:48:9d: 3f:be:fb:33:f2:60:de:10:33:8e:79:a5:70:90:0e:ea:d5:d6: a7:60:8f:5f:ca:3c:09:52:00:e0:c2:38:28:e6:da:6c:ee:52: bc:b1:21:0b:b5:08:76:40:19:99:cc:02:4b:2e:97:be:72:5f: 27:4d:c7:72:90:20:5f:7b:cc:3c:57:d2:c8:c2:fc:f6:a1:d6: 7f:ff:1e:e1:ef:b3:2a:a1:bf:a0:5e:71:1f:d2:91:38:ff:cf: 42:43:c1:ff:b2:2f:4f:c8:d6:ba:4e:38:83:c8:70:e9:5c:c5: a9:e6:a2:9d:8c:cd:fa:86:b4:a0:5c:3b:9b:bb:66:05:6a:8d: 38:a2:34:f4:3e:79:37:ef:54:ab:e7:50:40:00:5e:b5:0d:ce: f6:2b:6b:ee:8a:c1:97:5d:af:f6:36:85:63:9a:ec:53:33:68: 4a:c2:1b:4d:b7:93:32:79:9f:43:5d:68:e3:cc:32:87:cb:22: 60:4e:8c:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDZGRTExMC8GA1UEBRMoNEVEMDg4N0JEMzA0RTA0Qzk4RkJBNTNCOUI5QjAyQkRF NDM4OTcwMzAeFw0yNTEyMDUwNTIzMjJaFw0yNTEyMTIwNTIzMjJaMBgxFjAUBgNV BAMTDTY5MzI2YzRhLWFkMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp5hu6pCb41m17C5eXHHH7Xf5CUgEyrOVeI9f57TJalSOUctoeXZAgxbQlQYOA QBZ5uT+gaMKOwLfPlvrIyGid2a7FMc6qdVSwl4I1wTBvHJqMNAXIpwlSeFGvgEJO 5cnVe6Xa15djAvsDloARDXHp01aAf4Lylc+lQGYKr/WUKvu4WIuBOer7giC2ThnI JVIe1/mm9JyjM4VHJkaLxES8GIlMzpI9LCty2VAMI/tTptish/ekAcjbweYb20Eb UeysEo8oqgqGCMS5c3oCXSx0GVzvxOkzDf9e49ccDz23dVxbu8v1ZszCAF6EUdtB 1PnkqpXfxtsYP2SPZoMAg5vLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDg+sm0v6 iBg/dfWfuii8bJFqO7cwHwYDVR0jBBgwFoAUTtCIe9ME4EyY+6U7m5sCveQ4lwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NkZFLzlCNjU2RjhFODNF NTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5WS02VTdtNXNDdmVRNGx3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHRDSWU5TUU0RXlZLTZVN201c0N2ZVE0bHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NkZFLzlCNjU2RjhFODNFNTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5 WS02VTdtNXNDdmVRNGx3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFkXF1lih2LT/jK9QpXg7oPqE+mK4Ybz8Yc6Zz7xqIJZQndzCREJYRDt z7efz/mwcK0+R1lf2tpjzOgFqleMES17yR+J1jpInT+++zPyYN4QM455pXCQDurV 1qdgj1/KPAlSAODCOCjm2mzuUryxIQu1CHZAGZnMAksul75yXydNx3KQIF97zDxX 0sjC/Pah1n//HuHvsyqhv6BecR/SkTj/z0JDwf+yL0/I1rpOOIPIcOlcxanmop2M zfqGtKBcO5u7ZgVqjTiiNPQ+eTfvVKvnUEAAXrUNzvYra+6KwZddr/Y2hWOa7FMz aErCG023kzJ5n0NdaOPMMofLImBOjHU= -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:51 2025 by rpki-client