This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: T26/a6FeRKY5UxErPawAPDs8vj8Nn/9GUr6TB8jX1ZM= Subject key identifier: B4:54:25:73:DA:C5:36:08:4F:7B:35:C5:0B:3B:93:31:06:84:29:76 Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: 0108 Signing time: Fri 05 Dec 2025 03:05:18 +0000 Manifest this update: Fri 05 Dec 2025 03:05:17 +0000 Manifest next update: Fri 12 Dec 2025 03:05:17 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: OzIsQTdDQA6CJpVCe8xQRd17lUs8tBwQEbCLrBXh94w=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: qvhByE3oiLELsQTu9SaN/ARZ+azzx+zT+u1j1qLqciY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Dec 5 03:05:17 2025 GMT Not After : Dec 12 03:05:17 2025 GMT Subject: CN=69324bee-185c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:45:49:38:3d:c3:97:79:f3:ae:d5:a4:b4:c3: 49:06:1a:ad:83:9c:11:48:75:24:3c:03:b6:e2:04: 35:c4:88:18:92:bc:d1:38:08:a3:01:65:4a:eb:8f: f7:c7:58:70:4a:68:5c:99:ad:45:51:63:bb:2f:d1: 24:3a:45:d6:43:b2:d9:f8:08:31:b7:a1:30:eb:fd: 36:c0:a2:e9:09:f5:b4:14:5e:58:b5:73:90:42:ce: 9e:bb:74:5e:a6:2a:08:36:5f:ed:80:5d:5c:34:86: 54:e1:64:fc:55:77:a4:d4:e9:8d:e1:89:9a:87:03: 7f:05:58:eb:33:58:17:f0:1d:a0:e8:30:07:3c:b0: b4:19:8a:f2:93:ac:86:52:df:79:eb:ba:0d:e8:d2: 67:1d:fd:8b:01:6b:d9:30:c1:a2:81:fa:7c:81:cf: 12:5c:25:74:a0:79:ee:f7:1c:6f:04:6e:41:6b:7b: 23:f6:63:fe:c2:aa:9c:c2:6b:2b:0d:13:bc:ea:5a: e2:b8:df:49:ff:4e:5e:0f:35:bf:4c:23:a2:7f:46: 59:67:9e:4e:18:23:a8:13:91:94:d1:b6:73:84:c7: f7:70:ab:ab:fe:d4:20:4f:68:ab:1e:f6:74:e5:52: 3f:bf:8b:42:38:e3:dd:a9:59:5d:f2:f0:bd:56:d9: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:25:73:DA:C5:36:08:4F:7B:35:C5:0B:3B:93:31:06:84:29:76 X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:08:66:88:03:62:a8:1b:ac:69:79:6c:a7:7e:b8:02:05:ae: e8:ab:30:ab:68:d2:8c:3d:61:f2:a6:60:cf:07:79:c0:7b:c1: 3b:52:fa:7d:d4:f3:df:85:ce:0e:4e:db:63:28:27:d9:5a:1c: 1f:68:a8:1c:75:22:3d:16:eb:65:84:04:54:26:72:9e:c6:35: d6:be:5e:45:5c:5b:ef:7e:d7:95:a5:9d:25:e6:ab:eb:10:67: fe:52:d1:a9:36:c8:91:18:38:88:a5:5b:22:4e:52:ec:97:6a: c2:b5:ef:dc:1a:9e:be:07:7f:1c:10:bd:29:00:dc:71:46:e2: 45:e8:54:9a:f0:67:48:1a:42:df:30:3e:fd:92:9b:be:6d:b6: c6:e7:8e:aa:11:d5:e1:a9:bc:74:61:0d:7a:e7:03:d2:10:de: 6b:a0:25:c9:5f:21:98:ea:81:6f:46:2b:ae:0c:13:de:73:bb: 57:36:f0:42:84:c6:6f:cc:e4:9e:51:6b:19:ff:1d:17:73:c4: bc:ae:e3:ce:95:8a:9b:f6:c6:6c:dd:57:af:5a:b3:40:d8:cc: c9:14:53:11:d5:b9:64:93:6b:e0:6e:e9:30:5f:47:5e:f4:9a: 88:b8:c5:55:55:20:92:33:ba:21:11:c6:14:f2:9c:b3:32:a7: 64:fd:cc:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUxMjA1MDMwNTE3WhcNMjUxMjEyMDMwNTE3WjAYMRYwFAYD VQQDEw02OTMyNGJlZS0xODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0VJOD3Dl3nzrtWktMNJBhqtg5wRSHUkPAO24gQ1xIgYkrzROAijAWVK64/3 x1hwSmhcma1FUWO7L9EkOkXWQ7LZ+Agxt6Ew6/02wKLpCfW0FF5YtXOQQs6eu3Re pioINl/tgF1cNIZU4WT8VXek1OmN4YmahwN/BVjrM1gX8B2g6DAHPLC0GYryk6yG Ut9567oN6NJnHf2LAWvZMMGigfp8gc8SXCV0oHnu9xxvBG5Ba3sj9mP+wqqcwmsr DRO86lriuN9J/05eDzW/TCOif0ZZZ55OGCOoE5GU0bZzhMf3cKur/tQgT2irHvZ0 5VI/v4tCOOPdqVld8vC9Vtkc5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRUJXPa xTYIT3s1xQs7kzEGhCl2MB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0CGaIA2KoG6xpeWynfrgCBa7oqzCraNKMPWHypmDPB3nAe8E7Uvp9 1PPfhc4OTttjKCfZWhwfaKgcdSI9FutlhARUJnKexjXWvl5FXFvvfteVpZ0l5qvr EGf+UtGpNsiRGDiIpVsiTlLsl2rCte/cGp6+B38cEL0pANxxRuJF6FSa8GdIGkLf MD79kpu+bbbG546qEdXhqbx0YQ165wPSEN5roCXJXyGY6oFvRiuuDBPec7tXNvBC hMZvzOSeUWsZ/x0Xc8S8ruPOlYqb9sZs3VevWrNA2MzJFFMR1blkk2vgbukwX0de 9JqIuMVVVSCSM7ohEcYU8pyzMqdk/cwA -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:41 2025 by rpki-client