This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: x081+3a99WoKAdnnqnu2a+PB8o7Y26mY9OdrR370IYA= Subject key identifier: 9B:1C:6E:F5:17:B7:D1:2D:C9:62:4F:AE:D5:42:BC:C8:9F:B7:CD:50 Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 02A2 Signing time: Thu 04 Dec 2025 23:52:48 +0000 Manifest this update: Thu 04 Dec 2025 23:52:47 +0000 Manifest next update: Thu 11 Dec 2025 23:52:47 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: Hg+RQNbRQtixjMD+/mIFgll9KSuDHoMcW95eqxed0pM=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: rKgSkodd0QWwnADIiLvo3yavSccs7jpZLRjO9DNzizg=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: N2Razv0UpqWwte3fSDYUfYnRdysKXHjWJIk1sn7vc0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Dec 4 23:52:47 2025 GMT Not After : Dec 11 23:52:47 2025 GMT Subject: CN=69321ed0-a413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:a0:18:ff:16:ed:e6:c4:75:4e:e1:01:d5: bd:fb:cc:8d:a0:2f:1d:35:fa:06:ef:34:d5:95:01: f2:aa:92:09:16:4e:1b:42:c8:ed:57:1c:e8:57:55: 6f:68:fd:f1:8f:50:5c:e1:41:39:93:e3:4a:9e:50: 06:de:08:b6:e3:63:84:34:79:96:e2:64:b5:03:c6: ab:01:a5:1d:24:e0:de:26:22:fd:85:47:b7:b1:22: cc:82:ce:88:63:4e:c2:30:9d:71:32:63:32:42:64: 81:ca:56:e2:a8:86:c4:19:56:e7:61:08:06:65:a6: d0:ab:91:3a:fd:68:ff:16:3d:6b:c8:57:ff:06:57: fe:70:ea:3c:3e:55:b6:52:15:58:30:1e:2b:6a:97: 54:f4:d7:63:6b:cc:74:58:8b:f9:e5:42:d5:e8:97: ee:7a:bd:ff:a2:e4:52:2b:53:4e:2e:7c:5d:d9:b8: 6d:f7:26:14:fd:03:3d:7b:c4:ab:81:1e:3b:a2:26: b1:bb:0f:36:40:df:f8:15:e6:f4:87:58:3d:8d:22: 7c:57:b6:9e:2a:54:f2:c9:1f:cb:d9:04:85:e3:12: 86:04:dd:10:80:12:40:82:a4:8d:13:37:38:3a:11: ee:ad:34:40:3b:bd:6d:3a:39:d5:ca:e9:bd:33:97: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:6E:F5:17:B7:D1:2D:C9:62:4F:AE:D5:42:BC:C8:9F:B7:CD:50 X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:08:08:9d:5c:98:bb:b4:fa:e1:d3:97:b3:ac:5f:19:b9:14: fd:aa:a5:b5:53:f5:70:14:a8:fe:e0:02:f9:b4:05:eb:57:3a: d9:60:41:2d:3b:8b:7a:8e:ba:05:b1:77:4e:6d:9b:63:57:2d: 93:7d:92:65:f3:9d:58:8c:43:5c:cf:ed:8f:3e:9b:62:e7:99: 2c:fc:43:e6:66:e6:42:90:23:a0:a4:56:c9:cb:b2:28:10:df: a5:a8:54:71:0c:5a:52:41:2d:d1:48:88:f2:e7:8e:1b:e5:89: 5e:23:41:6e:24:d5:d7:5a:d2:b1:07:88:d9:05:a1:29:c5:57: a3:9d:16:42:b9:0f:bb:ae:d9:a9:e4:62:95:ab:4b:61:4f:1b: a6:b2:0d:14:06:8d:23:8d:ea:a4:19:38:cc:d0:1a:39:80:6e: a1:5f:1f:d8:6f:c2:5f:d1:bf:b5:c5:6c:95:ef:be:0a:95:1d: 41:de:d4:65:66:63:8e:54:81:e0:58:b7:ab:b1:5a:78:53:ee: be:ef:8d:51:e5:82:4c:ff:6a:1d:8a:68:65:50:51:7a:7c:08: 15:15:93:93:15:a5:78:77:ef:a7:5f:1e:da:2c:83:2a:08:58: 05:f3:49:cf:a9:0b:77:48:4d:58:dc:f3:32:55:4a:c3:e1:74: 22:56:87:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUxMjA0MjM1MjQ3WhcNMjUxMjExMjM1MjQ3WjAYMRYwFAYD VQQDEw02OTMyMWVkMC1hNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZegGP8W7ebEdU7hAdW9+8yNoC8dNfoG7zTVlQHyqpIJFk4bQsjtVxzoV1Vv aP3xj1Bc4UE5k+NKnlAG3gi242OENHmW4mS1A8arAaUdJODeJiL9hUe3sSLMgs6I Y07CMJ1xMmMyQmSBylbiqIbEGVbnYQgGZabQq5E6/Wj/Fj1ryFf/Blf+cOo8PlW2 UhVYMB4rapdU9Ndja8x0WIv55ULV6Jfuer3/ouRSK1NOLnxd2bht9yYU/QM9e8Sr gR47oiaxuw82QN/4Feb0h1g9jSJ8V7aeKlTyyR/L2QSF4xKGBN0QgBJAgqSNEzc4 OhHurTRAO71tOjnVyum9M5dwMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJscbvUX t9EtyWJPrtVCvMift81QMB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6CAidXJi7tPrh05ezrF8ZuRT9qqW1U/VwFKj+4AL5tAXrVzrZYEEt O4t6jroFsXdObZtjVy2TfZJl851YjENcz+2PPpti55ks/EPmZuZCkCOgpFbJy7Io EN+lqFRxDFpSQS3RSIjy544b5YleI0FuJNXXWtKxB4jZBaEpxVejnRZCuQ+7rtmp 5GKVq0thTxumsg0UBo0jjeqkGTjM0Bo5gG6hXx/Yb8Jf0b+1xWyV774KlR1B3tRl ZmOOVIHgWLersVp4U+6+741R5YJM/2odimhlUFF6fAgVFZOTFaV4d++nXx7aLIMq CFgF80nPqQt3SE1Y3PMyVUrD4XQiVodd -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:21 2025 by rpki-client