This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: drsAxQU4mfe4NQtyE7O0heGX7gokiffrlNToadrduVU= Subject key identifier: 74:AA:39:B4:C4:B6:02:CC:BD:12:3E:E3:95:14:01:F5:65:90:13:BC Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0CC4 Signing time: Sat 06 Dec 2025 17:33:21 +0000 Manifest this update: Sat 06 Dec 2025 17:33:21 +0000 Manifest next update: Sat 13 Dec 2025 17:33:21 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: wBk43q6qderzNaJsqTf0fHnGW1mockGXCqaFAxOpwW8=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Dec 6 17:33:21 2025 GMT Not After : Dec 13 17:33:21 2025 GMT Subject: CN=693468e1-83f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:03:3f:68:1f:30:08:9a:ed:77:04:48:e4: c0:ed:19:c9:06:1a:3c:93:37:e0:5e:65:c8:92:7f: 9f:83:98:e7:f7:0b:2d:b4:b9:9a:8b:0b:be:9a:e5: 5b:55:63:55:e9:f7:85:d2:f0:e6:55:52:a5:27:5f: 14:63:db:4c:9b:78:b0:be:4e:60:e6:14:40:a1:74: 3d:6f:e4:9a:ba:bc:0c:b0:d7:3a:96:97:dc:ca:a6: e9:d4:33:26:34:d4:b8:c6:6f:0a:c9:3c:28:65:e4: 36:3a:bc:85:e0:bf:3b:47:e7:af:71:a8:4c:bf:a5: 50:ab:84:e0:ef:6f:ed:0c:8d:d8:27:e1:80:96:f4: fc:5e:a7:29:79:ac:3a:e9:37:d7:e4:7b:86:2d:ae: 30:f7:76:7b:92:69:01:b1:05:0b:e6:35:f8:bc:b2: c5:d1:d6:31:e5:85:85:2d:99:40:12:82:ca:12:d9: 8d:08:cb:09:77:06:c1:db:9b:22:95:f5:c3:95:51: e8:98:83:c6:97:40:5e:1e:3a:c4:a2:f2:40:fa:d4: ef:ad:94:49:5e:63:34:50:dd:90:bf:54:73:a5:01: ae:8f:4d:da:f0:2d:78:b7:9e:54:43:1e:40:03:e7: b8:23:76:95:96:20:d5:27:d9:3e:0c:53:01:5a:05: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AA:39:B4:C4:B6:02:CC:BD:12:3E:E3:95:14:01:F5:65:90:13:BC X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:59:93:e9:25:98:2e:2f:86:b1:de:68:ba:06:15:bb:7f:aa: f7:e0:ef:32:29:bc:57:2d:e8:27:42:99:01:62:91:5a:9d:7d: 0e:00:55:ca:3e:ff:96:34:72:51:a5:07:30:62:73:5a:93:00: 88:8f:0e:2c:fe:cd:08:1d:79:9d:01:55:26:87:97:12:55:36: f6:10:f5:e6:36:7b:6c:4c:9d:93:33:6f:49:f0:a6:9a:c1:9e: ec:8c:ca:45:01:27:1d:3e:53:9e:a2:0b:9f:5d:f8:04:80:c3: 62:a6:f1:f1:a9:03:17:30:d2:a0:25:fc:bb:6d:d9:a3:4b:fd: b2:d9:c5:55:da:0b:e8:44:00:b6:8a:69:67:a8:59:1d:38:b3: b1:2d:68:de:60:37:73:ae:b6:5d:8e:96:a1:35:ae:39:57:1a: 00:65:d1:82:a6:cc:83:5f:be:b1:b2:11:76:e5:66:9a:a5:67: 2e:27:ee:ca:ff:a4:33:04:a2:ff:a0:ac:dd:4c:48:b3:fd:9f: 6a:3b:9a:fd:7e:d7:3a:4c:c8:61:99:bb:9e:04:95:d0:ec:ee: c2:61:40:6d:06:58:7c:63:93:fa:56:ec:59:5d:cc:bf:eb:02: fc:bb:b9:d6:2b:36:7a:f9:5c:74:bd:f6:7d:35:b2:3f:49:7b: f9:88:7d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUxMjA2MTczMzIxWhcNMjUxMjEzMTczMzIxWjAYMRYwFAYD VQQDEw02OTM0NjhlMS04M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZMDP2gfMAia7XcESOTA7RnJBho8kzfgXmXIkn+fg5jn9wsttLmaiwu+muVb VWNV6feF0vDmVVKlJ18UY9tMm3iwvk5g5hRAoXQ9b+SaurwMsNc6lpfcyqbp1DMm NNS4xm8KyTwoZeQ2OryF4L87R+evcahMv6VQq4Tg72/tDI3YJ+GAlvT8Xqcpeaw6 6TfX5HuGLa4w93Z7kmkBsQUL5jX4vLLF0dYx5YWFLZlAEoLKEtmNCMsJdwbB25si lfXDlVHomIPGl0BeHjrEovJA+tTvrZRJXmM0UN2Qv1RzpQGuj03a8C14t55UQx5A A+e4I3aVliDVJ9k+DFMBWgUySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSqObTE tgLMvRI+45UUAfVlkBO8MB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjWZPpJZguL4ax3mi6BhW7f6r34O8yKbxXLegnQpkBYpFanX0OAFXK Pv+WNHJRpQcwYnNakwCIjw4s/s0IHXmdAVUmh5cSVTb2EPXmNntsTJ2TM29J8Kaa wZ7sjMpFAScdPlOeogufXfgEgMNipvHxqQMXMNKgJfy7bdmjS/2y2cVV2gvoRAC2 imlnqFkdOLOxLWjeYDdzrrZdjpahNa45VxoAZdGCpsyDX76xshF25WaapWcuJ+7K /6QzBKL/oKzdTEiz/Z9qO5r9ftc6TMhhmbueBJXQ7O7CYUBtBlh8Y5P6VuxZXcy/ 6wL8u7nWKzZ6+Vx0vfZ9NbI/SXv5iH0H -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:39 2025 by rpki-client