This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: +rd8YbneUQs39YjXDECG3MHwl5+7/GVm5BpIn2ttrb4= Subject key identifier: 74:23:E7:60:A1:89:EF:10:F2:E4:6F:15:44:0D:82:2C:54:4A:7C:48 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 04ED Signing time: Thu 04 Dec 2025 22:18:36 +0000 Manifest this update: Thu 04 Dec 2025 22:18:36 +0000 Manifest next update: Thu 11 Dec 2025 22:18:35 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: TqIt7oxHP3HQVEoKOumGK8V8ruz21lyR1QNxrQl3ops=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: JhgDE5ETFIhEXBruI39DaKib1cXEXGZCzHT5TsRcHiM=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: sNtdGhFP5+8wGIN0odNsPXpZSkmhBenTgX2lN0L4D9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Dec 4 22:18:36 2025 GMT Not After : Dec 11 22:18:35 2025 GMT Subject: CN=693208bc-f2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:c3:9f:b4:8d:13:82:b1:fd:16:49:b3:22: 0e:37:59:79:5c:b5:af:24:09:13:98:05:f6:0a:49: 7e:74:7f:3a:0a:71:87:ac:98:25:63:2b:ba:32:43: 49:9b:96:8f:e2:24:d7:e2:61:1a:42:57:6d:47:49: ce:79:b8:5d:c6:1f:04:a9:55:31:96:dd:3b:30:00: 13:27:c7:75:f3:a4:62:33:da:75:09:97:2c:3b:48: 5f:c5:31:25:a7:73:09:58:27:65:ad:3a:0d:47:56: f8:92:ed:ec:6c:52:33:d3:4c:37:de:a9:89:8d:fc: 92:22:c4:6e:d7:b7:a9:ca:8c:2c:73:53:fc:c7:16: 1e:75:cf:32:17:34:ae:b9:57:77:da:0a:e8:aa:35: 36:7b:72:df:09:b0:cc:54:d7:11:87:10:e4:c5:3a: b0:03:ff:47:54:06:3d:ee:7b:8c:80:6f:83:85:b4: 81:0f:39:61:a5:f7:61:46:ac:bd:82:0f:b6:f0:2d: 68:f1:7f:2c:2a:2d:07:cc:03:60:f0:c4:69:a5:ff: 57:b5:16:10:1e:54:72:6a:17:0c:14:c8:c8:37:49: 73:2d:b8:1d:1c:e9:71:45:7a:c2:39:d0:30:04:ae: e0:33:31:eb:94:69:5c:29:a2:bb:d2:09:a2:3e:0d: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:23:E7:60:A1:89:EF:10:F2:E4:6F:15:44:0D:82:2C:54:4A:7C:48 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5c:f1:cf:6a:6e:42:20:33:f6:b4:2c:fc:d5:16:61:2b:b8: ff:a5:88:28:09:ca:de:05:2f:4a:fb:d9:29:1a:d3:be:89:54: e9:b8:b2:7f:43:c6:1d:6f:56:e4:64:99:fe:92:a4:c9:00:28: 04:d7:88:fe:6d:99:bf:b8:f5:ee:8f:ea:4a:8f:b1:78:02:5d: 08:54:03:8a:0e:9d:a8:da:99:36:b3:c8:53:69:d2:6f:d5:b8: 0f:d6:e0:7c:16:50:41:13:b4:d9:9b:48:b3:78:ed:d7:18:3b: b7:8d:b0:c7:18:cd:c8:85:c3:a2:ee:9b:4d:e4:3c:78:30:23: 5b:35:81:44:e5:a4:39:69:90:70:3b:41:02:46:90:3f:b2:e6: 76:a7:e5:35:01:f1:ab:46:02:eb:ef:23:57:cf:27:0f:00:ba: 74:7e:fe:1c:52:ea:12:98:a6:db:f3:95:8a:e4:72:02:40:d3: 37:fd:36:ce:7c:80:38:47:15:28:38:05:bd:5d:eb:d1:5a:e8: bd:fb:97:59:67:c4:51:44:d8:a3:74:b3:f3:58:59:2f:18:49: 53:e0:85:e7:4c:2b:6e:72:4d:f9:18:ab:f9:32:fb:b9:5a:be: f5:12:04:e4:ba:ed:97:8d:b9:07:6e:d1:2e:b8:e2:ae:35:ae: 55:86:0e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUxMjA0MjIxODM2WhcNMjUxMjExMjIxODM1WjAYMRYwFAYD VQQDEw02OTMyMDhiYy1mMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJzDn7SNE4Kx/RZJsyION1l5XLWvJAkTmAX2Ckl+dH86CnGHrJglYyu6MkNJ m5aP4iTX4mEaQldtR0nOebhdxh8EqVUxlt07MAATJ8d186RiM9p1CZcsO0hfxTEl p3MJWCdlrToNR1b4ku3sbFIz00w33qmJjfySIsRu17epyowsc1P8xxYedc8yFzSu uVd32groqjU2e3LfCbDMVNcRhxDkxTqwA/9HVAY97nuMgG+DhbSBDzlhpfdhRqy9 gg+28C1o8X8sKi0HzANg8MRppf9XtRYQHlRyahcMFMjIN0lzLbgdHOlxRXrCOdAw BK7gMzHrlGlcKaK70gmiPg11zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQj52Ch ie8Q8uRvFUQNgixUSnxIMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKXPHPam5CIDP2tCz81RZhK7j/pYgoCcreBS9K+9kpGtO+iVTpuLJ/ Q8Ydb1bkZJn+kqTJACgE14j+bZm/uPXuj+pKj7F4Al0IVAOKDp2o2pk2s8hTadJv 1bgP1uB8FlBBE7TZm0izeO3XGDu3jbDHGM3IhcOi7ptN5Dx4MCNbNYFE5aQ5aZBw O0ECRpA/suZ2p+U1AfGrRgLr7yNXzycPALp0fv4cUuoSmKbb85WK5HICQNM3/TbO fIA4RxUoOAW9XevRWui9+5dZZ8RRRNijdLPzWFkvGElT4IXnTCtuck35GKv5Mvu5 Wr71EgTkuu2XjbkHbtEuuOKuNa5Vhg5L -----END CERTIFICATE-----Generated at Sat Dec 6 18:30:58 2025 by rpki-client