This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: 8Tm6SEgDlHhTPg1sm2SVYcCtv+/R7NZwSxJTys6SlNM= Subject key identifier: B0:A6:35:DD:A1:1A:EC:02:25:5C:C7:BF:A0:B5:B1:9A:4E:E2:3A:BC Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 0820 Signing time: Thu 04 Dec 2025 19:59:13 +0000 Manifest this update: Thu 04 Dec 2025 19:59:12 +0000 Manifest next update: Thu 11 Dec 2025 19:59:12 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: u63np5SyOszzLJTsKCkp5NeZ+z+0lV1y46QFaS8nJNA=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: Dec 4 19:59:12 2025 GMT Not After : Dec 11 19:59:12 2025 GMT Subject: CN=6931e811-a4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ae:ce:a7:0d:1e:36:0d:5d:a9:74:6c:31:1a: 5c:64:a8:a6:6b:c3:e9:8a:47:f9:22:53:8b:a2:e4: 1a:bb:76:49:c2:1d:17:c4:33:8a:3f:11:d1:c0:57: 26:a7:19:78:c9:7b:ac:0e:c5:db:42:d4:7c:f0:7f: 5f:b5:50:c0:89:76:6c:ed:c4:d1:91:66:fb:09:52: cb:9e:4d:d4:67:15:f9:3a:ff:7c:2b:b3:da:40:78: 2b:8b:d2:21:e3:fd:b8:5d:1a:78:74:fb:ad:66:fc: 83:7d:e1:93:d4:91:bb:07:e0:37:1f:b9:3c:a8:68: 97:75:75:ff:cf:0d:9a:06:c8:72:c7:be:0e:d6:d2: ff:a2:d9:ce:88:e3:1e:dd:2f:08:13:14:dd:ac:3e: 9c:90:8a:78:23:ba:9e:ab:77:3d:7a:0a:60:e2:e7: f8:a9:02:dd:8c:63:83:43:4c:9e:2f:06:5c:c3:3b: fc:0e:6d:f0:f8:de:c2:27:90:4f:fb:2e:44:69:89: 42:53:84:a1:26:f5:53:0f:9b:5a:11:04:b8:3a:c2: 74:6a:a3:9e:a6:70:ea:9a:a3:75:dd:a2:db:f2:24: 1d:11:8f:c7:da:f0:bd:7c:ac:52:b9:d1:80:9c:79: b1:41:9b:6c:39:9e:0c:26:f8:3d:57:e3:7b:54:97: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A6:35:DD:A1:1A:EC:02:25:5C:C7:BF:A0:B5:B1:9A:4E:E2:3A:BC X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:23:3f:02:ab:6b:9f:1a:80:7a:f2:4a:48:1d:d8:39:86:a9: 74:0f:25:f9:c4:21:e3:46:45:cf:00:e0:4a:0f:38:6d:66:37: de:f2:14:75:f4:9d:2c:30:27:87:24:d4:2b:8c:3e:b2:b5:ec: a1:21:41:6a:bd:7d:aa:f4:db:33:ff:a7:fb:06:e9:f8:67:6b: 01:9f:ac:d4:6f:e9:07:fa:e8:26:86:b9:df:54:82:c6:e5:31: 49:1b:20:10:cf:13:d5:31:94:42:0c:80:b7:53:9c:48:3f:33: 34:a4:a5:6e:0b:ab:76:b6:f7:eb:5b:cc:c0:5d:82:aa:22:19: 81:db:f9:50:73:c2:aa:51:ff:dd:bd:38:35:bd:ba:35:e3:19: 94:f0:fc:b6:50:30:15:cb:98:04:bb:04:7a:5d:90:a0:84:35: b1:d8:3b:20:a3:8d:af:f0:36:05:d1:82:c6:f7:16:7b:86:8e: 8a:ab:1c:08:ca:50:39:ef:e1:f8:c5:bd:ac:a4:59:be:24:7b: a9:90:7d:6c:8c:96:a5:59:f8:64:4e:19:83:1f:36:bf:21:e1: 6a:92:ee:1e:98:7e:b4:63:01:f3:d2:21:4a:fb:81:94:ba:e2: ef:a6:ca:33:60:77:88:f9:15:e5:68:d6:25:c7:5e:25:22:8f: bc:8b:bd:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUxMjA0MTk1OTEyWhcNMjUxMjExMTk1OTEyWjAYMRYwFAYD VQQDEw02OTMxZTgxMS1hNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmK7Opw0eNg1dqXRsMRpcZKima8Ppikf5IlOLouQau3ZJwh0XxDOKPxHRwFcm pxl4yXusDsXbQtR88H9ftVDAiXZs7cTRkWb7CVLLnk3UZxX5Ov98K7PaQHgri9Ih 4/24XRp4dPutZvyDfeGT1JG7B+A3H7k8qGiXdXX/zw2aBshyx74O1tL/otnOiOMe 3S8IExTdrD6ckIp4I7qeq3c9egpg4uf4qQLdjGODQ0yeLwZcwzv8Dm3w+N7CJ5BP +y5EaYlCU4ShJvVTD5taEQS4OsJ0aqOepnDqmqN13aLb8iQdEY/H2vC9fKxSudGA nHmxQZtsOZ4MJvg9V+N7VJcPnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCmNd2h GuwCJVzHv6C1sZpO4jq8MB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUIz8Cq2ufGoB68kpIHdg5hql0DyX5xCHjRkXPAOBKDzhtZjfe8hR1 9J0sMCeHJNQrjD6yteyhIUFqvX2q9Nsz/6f7Bun4Z2sBn6zUb+kH+ugmhrnfVILG 5TFJGyAQzxPVMZRCDIC3U5xIPzM0pKVuC6t2tvfrW8zAXYKqIhmB2/lQc8KqUf/d vTg1vbo14xmU8Py2UDAVy5gEuwR6XZCghDWx2Dsgo42v8DYF0YLG9xZ7ho6KqxwI ylA57+H4xb2spFm+JHupkH1sjJalWfhkThmDHza/IeFqku4emH60YwHz0iFK+4GU uuLvpsozYHeI+RXlaNYlx14lIo+8i736 -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:01 2025 by rpki-client