This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json) Hash identifier: uMjql7orG8VKInd3GYCl6Tnqq3QUJ5GCzhxszGFd5+U= Subject key identifier: 95:A7:3D:8F:11:4C:55:51:31:1F:7A:C9:3B:D4:3A:20:9D:7F:9F:BC Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 0973 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft Manifest number: 096A Signing time: Thu 04 Dec 2025 19:19:20 +0000 Manifest this update: Thu 04 Dec 2025 19:19:19 +0000 Manifest next update: Thu 11 Dec 2025 19:19:19 +0000 Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: giHcy0Sfe+DZm74noHRO88hPJiHyBf6LtVbslSsdc7M=) 2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: 9fYoRLuvAE3GnGPowVCGSoqu6QzF0dUDca3PyP5zjdg=) 3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Dec 4 19:19:19 2025 GMT Not After : Dec 11 19:19:19 2025 GMT Subject: CN=6931deb8-3e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:02:5c:0f:e6:42:6c:04:f7:d8:9b:c8:8f: d7:15:7d:df:69:4b:7c:b5:2a:8e:29:7c:a2:96:a3: 4b:c7:38:d3:ae:52:90:04:4e:2b:d3:f7:1c:1a:a2: b3:ff:e5:ed:01:bb:02:0c:7c:eb:45:97:a5:dc:5f: ff:3b:45:bf:92:dc:8f:cf:ca:3e:6f:60:55:58:9b: 76:a2:67:b9:5f:e6:17:e0:d0:c1:72:41:c8:f8:9c: 27:a0:71:b6:41:2d:ff:b4:cc:3b:de:ee:f4:da:7f: 34:f9:64:fc:55:d9:61:fb:a3:79:8f:1e:b5:bc:5f: ca:77:34:26:a1:91:cb:27:27:77:74:0e:d9:9a:18: 59:99:1f:c9:bb:72:ea:46:31:81:23:ce:8b:ab:bb: 56:e0:59:0c:6e:0d:9d:a9:39:88:21:9d:b9:a9:06: d4:e5:fe:e0:bc:5f:5d:4d:72:af:dc:da:e2:75:57: 7d:1a:8f:95:df:5a:f8:6f:66:5c:ab:18:03:f5:12: 6b:fd:e6:21:20:98:49:4d:3e:83:ba:55:75:13:6c: 77:75:36:e9:59:33:e2:b8:b7:10:62:0a:f1:05:5b: 5b:db:37:2a:f2:eb:cf:75:77:0a:27:42:a1:ee:1b: da:4d:0c:38:0c:36:a4:59:b8:35:6c:91:1f:76:c6: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A7:3D:8F:11:4C:55:51:31:1F:7A:C9:3B:D4:3A:20:9D:7F:9F:BC X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:27:94:49:ff:ea:8c:32:32:4a:b7:91:4e:ec:51:5c:06:d7: d0:35:d5:9a:4f:5b:76:1e:df:e7:99:4a:db:ba:fe:2d:da:51: 9c:13:fa:2a:35:08:47:26:b4:61:96:39:a7:b4:6e:f3:16:ed: d8:12:4d:fe:33:7f:42:34:93:43:76:fa:bf:d3:6d:2b:2a:7a: f7:55:cc:b1:13:34:62:79:20:54:13:5c:f1:50:2e:74:4e:81: 82:84:13:c1:34:c4:01:34:b6:ca:19:4a:ab:b9:a2:6e:32:a9: 03:57:9d:5b:cf:f9:a0:23:57:71:18:b9:68:55:c3:d3:0c:8c: 31:8e:16:de:17:d0:65:25:49:52:44:d3:33:53:1d:3b:72:ae: fa:3f:3e:bf:a0:e8:80:8a:f7:e1:af:78:ee:98:4a:a6:94:27: d9:6a:7c:48:eb:76:42:cc:34:c4:33:05:34:96:40:20:6e:37: f5:87:19:7f:9e:63:39:88:b0:de:eb:82:6d:75:b6:d4:41:81: 25:21:23:e5:0c:a0:f8:53:bb:23:19:e9:a0:d9:cd:8c:9e:21: 73:36:98:4d:5e:56:f8:f5:5c:d1:d6:23:d9:e5:df:28:37:34: f7:fa:36:26:54:0a:e6:20:de:43:52:b0:df:a1:cc:b5:a7:1b: 1a:10:83:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjUxMjA0MTkxOTE5WhcNMjUxMjExMTkxOTE5WjAYMRYwFAYD VQQDEw02OTMxZGViOC0zZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bECXA/mQmwE99ibyI/XFX3faUt8tSqOKXyilqNLxzjTrlKQBE4r0/ccGqKz /+XtAbsCDHzrRZel3F//O0W/ktyPz8o+b2BVWJt2ome5X+YX4NDBckHI+JwnoHG2 QS3/tMw73u702n80+WT8Vdlh+6N5jx61vF/KdzQmoZHLJyd3dA7ZmhhZmR/Ju3Lq RjGBI86Lq7tW4FkMbg2dqTmIIZ25qQbU5f7gvF9dTXKv3NridVd9Go+V31r4b2Zc qxgD9RJr/eYhIJhJTT6DulV1E2x3dTbpWTPiuLcQYgrxBVtb2zcq8uvPdXcKJ0Kh 7hvaTQw4DDakWbg1bJEfdsa4rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWnPY8R TFVRMR96yTvUOiCdf5+8MB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7J5RJ/+qMMjJKt5FO7FFcBtfQNdWaT1t2Ht/nmUrbuv4t2lGcE/oq NQhHJrRhljmntG7zFu3YEk3+M39CNJNDdvq/020rKnr3VcyxEzRieSBUE1zxUC50 ToGChBPBNMQBNLbKGUqruaJuMqkDV51bz/mgI1dxGLloVcPTDIwxjhbeF9BlJUlS RNMzUx07cq76Pz6/oOiAivfhr3jumEqmlCfZanxI63ZCzDTEMwU0lkAgbjf1hxl/ nmM5iLDe64JtdbbUQYElISPlDKD4U7sjGemg2c2MniFzNphNXlb49VzR1iPZ5d8o NzT3+jYmVArmIN5DUrDfocy1pxsaEIP5 -----END CERTIFICATE-----Generated at Sat Dec 6 19:57:58 2025 by rpki-client