This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: Kuj6meucW9cxVUL+ZEWrcAFz+MTRWsjyGy4XGmyYW8U= Subject key identifier: F1:EE:8D:25:38:2C:53:55:37:D8:28:70:A1:05:B0:96:98:B7:E0:CF Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 3507 Signing time: Sat 06 Dec 2025 14:27:22 +0000 Manifest this update: Sat 06 Dec 2025 14:27:22 +0000 Manifest next update: Sat 13 Dec 2025 14:27:22 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: iCCKgSVSOhx5AA2nFX1knCQ0XhNL6547Y6Jo7ZBgZJI=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Dec 6 14:27:22 2025 GMT Not After : Dec 13 14:27:22 2025 GMT Subject: CN=69343d4a-a23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:90:a1:1a:5e:ff:7a:8e:b3:d6:d1:11:ba: f2:d6:59:d4:af:3d:0b:de:4b:e7:c1:af:c2:23:a7: cf:ee:00:15:c3:fa:b7:c7:da:d0:72:de:29:4b:4a: ab:f4:11:c7:87:d5:a6:8e:68:4c:74:c4:f1:53:d2: fb:44:59:b6:ee:6d:d2:e3:f3:bb:14:82:4a:95:a0: 98:8e:c3:67:db:79:49:40:44:9e:e7:53:ef:d7:20: 71:14:73:98:e7:d0:bd:08:0e:03:eb:a9:87:89:d6: dc:ec:00:54:96:19:99:91:ae:f5:78:cd:ed:fc:67: 90:cd:b1:8d:fa:87:2a:0f:2b:92:75:88:78:89:7e: 3a:53:2c:37:21:39:fd:99:db:a2:6b:1d:6d:78:66: 87:2b:22:3e:fc:ad:70:56:37:18:e5:13:38:e7:ba: e0:45:73:66:f2:4f:8f:10:13:86:ed:66:74:78:d7: c6:fa:a9:2d:ab:aa:22:03:5f:23:9e:71:11:d7:31: 77:21:44:e6:ee:ee:d5:4b:05:ac:15:a8:69:17:d3: 70:22:38:10:74:8a:48:7d:fb:48:2c:fb:e5:d0:fa: 40:e1:b5:9d:bd:e2:6c:ec:7f:54:50:6e:62:b6:32: aa:00:33:45:09:c6:a9:20:23:22:19:3d:c0:e6:57: e6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EE:8D:25:38:2C:53:55:37:D8:28:70:A1:05:B0:96:98:B7:E0:CF X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e4:26:16:e7:e2:3f:03:5f:5b:6c:bb:03:76:be:35:4f:c2: 05:ef:4c:76:16:a1:99:15:bf:f1:23:46:e3:76:14:b1:e1:2f: 9d:32:a4:a5:42:4e:31:01:33:3c:c2:c2:24:16:bc:5b:63:bd: 6b:e3:53:b6:64:6b:57:83:7f:6b:68:ea:e5:f8:2b:d0:ec:12: 5b:ee:f6:aa:20:fe:e8:de:5c:8b:21:c0:3c:7e:06:df:cf:11: 00:bf:d0:bd:ca:4b:14:f7:24:94:ad:93:a3:53:75:22:ca:ba: 70:8e:97:48:b1:86:56:c5:8e:a5:c8:ae:cf:2a:e9:f7:8e:b0: 59:82:5e:85:bd:6f:bf:b9:d5:73:31:15:91:47:ec:8c:f8:b8: d1:63:07:32:8c:05:52:a2:87:5d:29:95:a0:6a:0c:58:02:0a: 11:dd:59:c4:27:25:ca:ea:86:4c:39:12:f3:a1:21:6a:f1:7b: 7f:e5:f8:c7:4c:04:57:60:02:cf:07:f2:19:14:34:fe:c0:5f: 41:3b:77:7e:d1:b5:77:e7:9d:88:51:97:0c:75:47:88:c6:7e: ee:92:2e:a6:5c:a7:f2:9b:84:e1:2e:01:5d:d3:d8:28:00:54: b2:8a:71:35:09:63:fe:12:7a:22:2b:f4:e7:54:01:37:8a:cf: 63:cf:47:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjUxMjA2MTQyNzIyWhcNMjUxMjEzMTQyNzIyWjAYMRYwFAYD VQQDEw02OTM0M2Q0YS1hMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoiQoRpe/3qOs9bREbry1lnUrz0L3kvnwa/CI6fP7gAVw/q3x9rQct4pS0qr 9BHHh9WmjmhMdMTxU9L7RFm27m3S4/O7FIJKlaCYjsNn23lJQESe51Pv1yBxFHOY 59C9CA4D66mHidbc7ABUlhmZka71eM3t/GeQzbGN+ocqDyuSdYh4iX46Uyw3ITn9 mduiax1teGaHKyI+/K1wVjcY5RM457rgRXNm8k+PEBOG7WZ0eNfG+qktq6oiA18j nnER1zF3IUTm7u7VSwWsFahpF9NwIjgQdIpIfftILPvl0PpA4bWdveJs7H9UUG5i tjKqADNFCcapICMiGT3A5lfmywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHujSU4 LFNVN9gocKEFsJaYt+DPMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD5CYW5+I/A19bbLsDdr41T8IF70x2FqGZFb/xI0bjdhSx4S+dMqSl Qk4xATM8wsIkFrxbY71r41O2ZGtXg39raOrl+CvQ7BJb7vaqIP7o3lyLIcA8fgbf zxEAv9C9yksU9ySUrZOjU3UiyrpwjpdIsYZWxY6lyK7PKun3jrBZgl6FvW+/udVz MRWRR+yM+LjRYwcyjAVSooddKZWgagxYAgoR3VnEJyXK6oZMORLzoSFq8Xt/5fjH TARXYALPB/IZFDT+wF9BO3d+0bV3552IUZcMdUeIxn7uki6mXKfym4ThLgFd09go AFSyinE1CWP+EnoiK/TnVAE3is9jz0dm -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:36 2025 by rpki-client