This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: 11u/munVEzZsogRP4clufpNJMj9Gozwk6Q9nELG0SHA= Subject key identifier: 55:1E:64:D8:77:21:90:5A:22:1F:8F:C3:72:96:D1:B9:FE:9E:0F:A5 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 08E4 Signing time: Sat 06 Dec 2025 19:33:09 +0000 Manifest this update: Sat 06 Dec 2025 19:33:09 +0000 Manifest next update: Sat 13 Dec 2025 19:33:09 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: mkLZ8m0qv4Mky+p4VX43P9wppOjH1nLIG9D9vZU1NRk=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Dec 6 19:33:09 2025 GMT Not After : Dec 13 19:33:09 2025 GMT Subject: CN=693484f5-ac46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:d4:f4:c8:36:3f:39:6a:79:c0:79:88:ba: 52:88:59:85:98:db:e6:c9:d1:8d:38:a0:e2:bd:57: 6c:6b:c4:ec:f1:72:55:67:71:76:01:17:84:48:e0: f6:f4:84:9e:1c:a5:c5:c5:2e:28:89:b0:bb:8a:44: a6:8b:6c:77:fe:0b:21:d7:9a:79:d0:f0:a6:2b:dc: b9:e1:81:8f:79:a6:44:8c:1a:66:b0:ef:1c:0e:42: e3:30:7f:da:dd:1d:6e:df:a5:90:57:f2:06:40:f4: 04:f0:9e:d3:90:47:14:91:d3:d0:4b:6c:a9:c9:d9: 5b:b3:d6:d7:68:44:f8:8e:fa:3e:ac:b7:61:f7:05: c7:91:11:9f:f9:47:8c:9e:11:e0:74:92:7b:9e:a1: 22:7f:a0:b2:29:92:4a:bc:66:a1:45:9a:4e:b8:b7: b4:27:43:a8:9e:87:1c:1f:e8:7a:ac:ce:ef:e9:d5: 0e:64:5b:ae:4d:2a:5f:f4:9e:3d:7f:99:65:bd:23: a6:39:8d:bb:38:58:18:2a:72:91:b3:e7:31:29:ad: 9b:87:d1:37:c7:fe:81:66:61:3a:31:8b:92:50:35: 8b:64:ab:c6:1b:62:05:13:3d:5a:03:f6:c3:bc:fe: f7:39:8c:cf:8c:76:e7:76:5a:e8:35:68:df:f7:09: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1E:64:D8:77:21:90:5A:22:1F:8F:C3:72:96:D1:B9:FE:9E:0F:A5 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:eb:9f:fe:45:6a:a0:c2:62:d0:f3:28:f2:bc:ba:b2:b7:ce: 87:56:46:ad:e1:1c:1f:80:c6:3f:17:fc:1b:8f:71:28:80:34: 92:da:16:69:bf:5b:ae:38:89:b5:bf:dc:86:71:d0:72:57:e5: 74:e6:a7:d4:b7:a6:c5:17:73:a0:fa:08:13:5c:0a:24:67:66: 29:83:0f:37:4c:10:b9:c4:42:cc:ef:28:12:65:84:71:68:5c: 57:bf:14:be:82:bb:f7:5e:83:8c:b5:db:2e:0a:d1:a9:51:a6: 71:a9:a2:e6:dd:aa:1e:dd:11:e4:2d:66:51:82:f2:73:ea:72: da:17:e9:5c:78:e1:88:da:b8:65:c4:d9:83:7e:cf:37:69:46: eb:67:25:d5:eb:2b:d7:40:57:84:f1:56:96:bf:7c:c0:75:d7: 2c:9d:70:6d:69:62:e9:67:ee:1c:aa:58:ab:b0:57:ca:1d:c4: b9:a3:1d:55:6a:65:35:56:46:fc:81:ba:0d:93:b4:b4:33:a4: b6:3d:ec:68:1e:52:fd:45:7f:ba:d2:a0:00:4d:63:ac:f2:81: ea:22:da:ac:77:a7:c2:f3:88:c7:34:c8:9b:ef:b5:c8:2d:e3: e3:2b:dc:eb:04:c7:90:2a:f1:98:15:a7:f4:3c:11:28:a0:7c: 11:89:fe:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUxMjA2MTkzMzA5WhcNMjUxMjEzMTkzMzA5WjAYMRYwFAYD VQQDEw02OTM0ODRmNS1hYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbHU9Mg2PzlqecB5iLpSiFmFmNvmydGNOKDivVdsa8Ts8XJVZ3F2AReESOD2 9ISeHKXFxS4oibC7ikSmi2x3/gsh15p50PCmK9y54YGPeaZEjBpmsO8cDkLjMH/a 3R1u36WQV/IGQPQE8J7TkEcUkdPQS2ypydlbs9bXaET4jvo+rLdh9wXHkRGf+UeM nhHgdJJ7nqEif6CyKZJKvGahRZpOuLe0J0OonoccH+h6rM7v6dUOZFuuTSpf9J49 f5llvSOmOY27OFgYKnKRs+cxKa2bh9E3x/6BZmE6MYuSUDWLZKvGG2IFEz1aA/bD vP73OYzPjHbndlroNWjf9wnVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUeZNh3 IZBaIh+Pw3KW0bn+ng+lMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH65/+RWqgwmLQ8yjyvLqyt86HVkat4RwfgMY/F/wbj3EogDSS2hZp v1uuOIm1v9yGcdByV+V05qfUt6bFF3Og+ggTXAokZ2Ypgw83TBC5xELM7ygSZYRx aFxXvxS+grv3XoOMtdsuCtGpUaZxqaLm3aoe3RHkLWZRgvJz6nLaF+lceOGI2rhl xNmDfs83aUbrZyXV6yvXQFeE8VaWv3zAddcsnXBtaWLpZ+4cqlirsFfKHcS5ox1V amU1Vkb8gboNk7S0M6S2PexoHlL9RX+60qAATWOs8oHqItqsd6fC84jHNMib77XI LePjK9zrBMeQKvGYFaf0PBEooHwRif4H -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:28 2025 by rpki-client