This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: SOgvXRVpd2O+hbbmpDCHkjfKzFtB1HqR0clbH7TCTAA= Subject key identifier: CC:4A:BA:A7:E5:05:16:96:BE:E2:4D:93:B8:6E:A0:5A:8B:28:52:BF Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 022E Signing time: Sat 06 Dec 2025 15:59:33 +0000 Manifest this update: Sat 06 Dec 2025 15:59:32 +0000 Manifest next update: Sat 13 Dec 2025 15:59:32 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: dvr63eJcMqKU/7ZIlo38jw526m1Zh7sm/78IusT2LPE=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: I6Do6wUFDqn95ErcBDY8GxAwjzlBupfp3qvysqubm+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Dec 6 15:59:32 2025 GMT Not After : Dec 13 15:59:32 2025 GMT Subject: CN=693452e5-d139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:3e:41:7a:30:b0:02:27:e7:90:f1:07:01: 69:db:b3:e1:9f:c2:f0:4d:33:28:69:a9:cb:9a:76: 30:2f:8d:8e:9c:32:55:c0:53:d3:22:55:c2:d4:7b: ea:d0:21:34:6e:d1:29:5f:ef:c1:be:f4:75:1d:10: 50:88:d3:a8:8f:23:0c:08:e6:83:3b:7f:9a:47:e5: a3:0c:7e:8c:ae:7a:ab:e2:92:f4:a1:44:07:61:2e: d2:9d:4c:6e:d9:93:2d:83:e3:12:92:c9:91:83:a7: bb:74:9a:04:c8:94:d6:fb:3f:00:33:97:25:3c:fa: 51:c2:18:85:f9:0f:94:99:73:f1:88:6d:69:dc:3e: 6d:2d:ac:c5:e4:2f:ff:0a:9c:ce:a9:ed:b7:a6:ec: 90:59:70:25:50:fa:bb:f1:f5:12:f5:20:b6:61:67: 68:2c:2e:35:a1:15:92:0d:1a:00:a4:60:34:d8:43: 77:fc:be:97:42:d3:44:e9:12:17:03:90:8b:51:24: bc:3a:a8:d8:f6:c4:ff:37:70:33:7d:ca:8b:e2:74: 65:04:ce:05:d3:10:67:ec:0b:13:fc:ee:84:f3:4a: b1:0e:2f:a6:e2:d0:44:8e:a9:43:0e:81:8d:2d:a4: 34:5c:79:70:27:c8:4a:91:59:89:35:19:89:48:4d: 1f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:BA:A7:E5:05:16:96:BE:E2:4D:93:B8:6E:A0:5A:8B:28:52:BF X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c8:e6:6b:96:2c:dd:49:76:ed:3c:cb:e6:47:99:82:b2:2a: bb:c9:1c:69:24:82:26:22:41:b1:33:95:9b:97:27:37:c4:f8: 4b:e9:d0:d0:0f:22:a9:35:88:12:75:8d:a4:8a:fc:c2:f1:5d: a9:dc:a2:94:d3:02:0a:35:18:13:58:6e:2c:74:b6:fa:cb:2b: 74:07:4f:03:09:2d:aa:0e:c1:1c:85:05:b8:6a:d8:07:6e:2a: 5d:1e:d4:07:de:f0:bc:07:19:30:6e:b8:d9:6f:a6:6b:ec:0d: 4e:9f:49:2d:e8:66:0e:84:80:64:c4:9c:59:3e:a9:91:67:39: eb:99:bc:59:44:6e:37:71:be:43:7c:23:ca:45:5c:1d:62:0a: de:a0:19:c6:d6:ba:68:c3:27:2d:78:05:51:c9:de:31:73:c0: 92:1b:3a:2f:f8:97:84:3d:d2:33:a8:68:7a:46:ac:94:0c:62: 8f:61:73:d1:d7:db:13:70:59:ff:af:d8:3f:46:20:6c:e9:5a: bc:22:c2:6d:e2:df:41:00:77:9b:dc:af:e6:5f:6c:2b:1a:83: 3c:69:8e:5f:37:9a:48:59:06:95:6d:86:c9:1a:b2:70:e2:12: a1:75:63:59:f8:2a:4b:30:f6:62:0b:ce:6d:4d:d9:3b:82:e3: 02:10:15:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUxMjA2MTU1OTMyWhcNMjUxMjEzMTU1OTMyWjAYMRYwFAYD VQQDEw02OTM0NTJlNS1kMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XE+QXowsAIn55DxBwFp27Phn8LwTTMoaanLmnYwL42OnDJVwFPTIlXC1Hvq 0CE0btEpX+/BvvR1HRBQiNOojyMMCOaDO3+aR+WjDH6Mrnqr4pL0oUQHYS7SnUxu 2ZMtg+MSksmRg6e7dJoEyJTW+z8AM5clPPpRwhiF+Q+UmXPxiG1p3D5tLazF5C// CpzOqe23puyQWXAlUPq78fUS9SC2YWdoLC41oRWSDRoApGA02EN3/L6XQtNE6RIX A5CLUSS8OqjY9sT/N3AzfcqL4nRlBM4F0xBn7AsT/O6E80qxDi+m4tBEjqlDDoGN LaQ0XHlwJ8hKkVmJNRmJSE0fNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxKuqfl BRaWvuJNk7huoFqLKFK/MB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGyOZrlizdSXbtPMvmR5mCsiq7yRxpJIImIkGxM5Wblyc3xPhL6dDQ DyKpNYgSdY2kivzC8V2p3KKU0wIKNRgTWG4sdLb6yyt0B08DCS2qDsEchQW4atgH bipdHtQH3vC8BxkwbrjZb6Zr7A1On0kt6GYOhIBkxJxZPqmRZznrmbxZRG43cb5D fCPKRVwdYgreoBnG1rpowycteAVRyd4xc8CSGzov+JeEPdIzqGh6RqyUDGKPYXPR 19sTcFn/r9g/RiBs6Vq8IsJt4t9BAHeb3K/mX2wrGoM8aY5fN5pIWQaVbYbJGrJw 4hKhdWNZ+CpLMPZiC85tTdk7guMCEBW0 -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:25 2025 by rpki-client