This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: 2B7YO1ioPPDtEOrIwD6lHJ1Sx86rQ/edCaZCPIdALYY= Subject key identifier: DD:40:2C:AF:3B:CF:00:B0:38:6F:E3:1C:79:72:CE:77:53:1B:D0:22 Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: 41 Signing time: Fri 05 Dec 2025 05:17:37 +0000 Manifest this update: Fri 05 Dec 2025 05:17:37 +0000 Manifest next update: Fri 12 Dec 2025 05:17:37 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: VW740jrreBoZumuViSV84nHhyS0NHtUDkiYj5uVUBXU=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: FVLynhifvDV8KPyOIjr7ThKejT3Wh2GtJVJ/0rkPagg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Dec 5 05:17:37 2025 GMT Not After : Dec 12 05:17:37 2025 GMT Subject: CN=69326af1-afec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:27:7a:ec:5a:ec:f6:11:5e:0b:37:f4:9d: f5:d3:2d:15:29:47:76:99:23:4e:41:bf:e5:cc:dd: 21:3f:35:02:d6:e6:e7:54:7b:4c:a7:7d:94:11:85: 56:89:50:8a:05:05:7f:d5:2a:f1:5c:ef:13:53:29: 2a:37:69:6d:8d:43:fc:ea:9e:2d:ad:ad:57:b9:6c: cd:90:bb:45:d2:0f:71:97:1c:25:2c:7d:0b:7e:4e: 30:8f:e3:48:13:52:d7:77:c3:c6:b8:bc:eb:8d:82: f8:0b:d0:82:85:11:8d:d2:a4:5b:ed:5f:5f:a8:8f: 67:0c:eb:05:d5:18:f5:01:3d:0d:e3:55:6a:0b:4b: bf:d8:13:2a:23:d0:65:ec:59:2e:73:fa:fe:23:21: 28:36:ef:24:0d:46:7f:00:94:68:ac:28:87:8d:a0: 37:19:ef:8e:7f:76:e0:d7:46:3f:d8:22:3b:50:f8: c8:7e:26:4e:1d:17:9f:2e:ce:30:97:37:20:a9:5f: 8b:95:cf:1c:a9:6c:40:c9:f4:61:9b:2e:58:cd:f6: bd:fd:5d:b4:2f:18:d5:8b:94:2e:c6:09:fc:ef:6c: fd:b9:06:4e:48:b9:bc:99:d5:fd:47:33:4b:22:9d: 4e:35:50:34:4e:de:36:e0:b9:b2:51:6b:5f:54:d3: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:40:2C:AF:3B:CF:00:B0:38:6F:E3:1C:79:72:CE:77:53:1B:D0:22 X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:db:6f:9c:f7:04:44:8a:01:7f:2e:63:3a:a5:77:ec:62:f9: 8e:d9:d3:ae:cf:0c:a1:93:04:27:33:a0:c7:64:80:2f:87:11: a7:ad:f3:29:1b:d9:61:87:65:f6:2d:32:45:ac:c4:62:6c:4b: 30:ae:0f:8f:fe:bb:03:16:ab:7c:57:53:a7:5d:b4:31:45:23: 47:97:8d:5f:4c:58:72:62:40:26:ef:bb:4a:d9:07:51:19:af: a0:98:87:fb:1c:18:80:1c:43:01:79:e6:99:33:7c:2d:49:05: 93:9f:52:86:59:b6:73:f7:14:37:c8:ad:b4:54:8e:a3:01:15: f6:13:f8:19:35:cd:9e:07:7d:e7:10:0d:41:90:e7:c6:1a:cf: 0c:a5:d1:52:35:a9:96:6a:db:38:8d:e7:93:d4:17:96:a6:54: 71:ce:97:e4:2d:32:df:d7:5d:d3:ef:71:e1:bb:d1:02:86:61: 5e:71:77:fa:c0:d8:40:ec:66:fb:55:bf:35:24:39:ab:b7:c9: ea:61:fd:85:56:bc:ab:42:ca:3d:6a:a9:51:1a:7e:52:7c:bf: 59:16:76:35:d2:98:3d:20:07:99:e3:5b:43:e9:48:0d:61:0b: 6f:4c:0b:b4:14:41:a2:c0:85:50:3d:a6:92:14:a7:46:86:fd: 0a:c9:0d:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkI2RDExMC8GA1UEBRMoNEQ0RjNBQUNDNzM5NUExM0Q2NDIwMDdGOTkxMERGODgw NDBFNEJBQjAeFw0yNTEyMDUwNTE3MzdaFw0yNTEyMTIwNTE3MzdaMBgxFjAUBgNV BAMTDTY5MzI2YWYxLWFmZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLZSd67Frs9hFeCzf0nfXTLRUpR3aZI05Bv+XM3SE/NQLW5udUe0ynfZQRhVaJ UIoFBX/VKvFc7xNTKSo3aW2NQ/zqni2trVe5bM2Qu0XSD3GXHCUsfQt+TjCP40gT Utd3w8a4vOuNgvgL0IKFEY3SpFvtX1+oj2cM6wXVGPUBPQ3jVWoLS7/YEyoj0GXs WS5z+v4jISg27yQNRn8AlGisKIeNoDcZ745/duDXRj/YIjtQ+Mh+Jk4dF58uzjCX NyCpX4uVzxypbEDJ9GGbLljN9r39XbQvGNWLlC7GCfzvbP25Bk5IubyZ1f1HM0si nU41UDRO3jbgubJRa19U09FXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3UAsrzvP ALA4b+MceXLOd1Mb0CIwHwYDVR0jBBgwFoAUTU86rMc5WhPWQgB/mRDfiAQOS6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyQjZELzg2REY2QzdFNzEw NTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFU4NnJNYzVXaFBXUWdCX21SRGZpQVFPUzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy QjZELzg2REY2QzdFNzEwNTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQ V1FnQl9tUkRmaUFRT1M2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7bb5z3BESKAX8uYzqld+xi+Y7Z067PDKGTBCczoMdkgC+HEaet8ykb 2WGHZfYtMkWsxGJsSzCuD4/+uwMWq3xXU6ddtDFFI0eXjV9MWHJiQCbvu0rZB1EZ r6CYh/scGIAcQwF55pkzfC1JBZOfUoZZtnP3FDfIrbRUjqMBFfYT+Bk1zZ4HfecQ DUGQ58Yazwyl0VI1qZZq2ziN55PUF5amVHHOl+QtMt/XXdPvceG70QKGYV5xd/rA 2EDsZvtVvzUkOau3yeph/YVWvKtCyj1qqVEaflJ8v1kWdjXSmD0gB5njW0PpSA1h C29MC7QUQaLAhVA9ppIUp0aG/QrJDVM= -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:43 2025 by rpki-client