This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: 2eSuBJr7Yv0MzPfGwUQcnk8m1739yFQFyw25VEiSKDI= Subject key identifier: 5A:51:71:78:F7:F3:76:35:1F:18:5C:63:05:B7:6B:B8:92:E4:04:91 Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 023C Signing time: Fri 05 Dec 2025 00:14:36 +0000 Manifest this update: Fri 05 Dec 2025 00:14:35 +0000 Manifest next update: Fri 12 Dec 2025 00:14:35 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: TSELezQ0BgVEIQCH6GatVhsIcutHb4E0Y7pv6l36ros=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: +3v4STyxr/zeU0RYF53X4MGXWGvAcT5sIBZD/HJJRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: Dec 5 00:14:35 2025 GMT Not After : Dec 12 00:14:35 2025 GMT Subject: CN=693223eb-7345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:43:bc:cc:49:37:80:d2:78:43:15:10:31: ed:9a:30:09:c4:9f:b7:53:6c:d2:fc:35:a7:8d:14: be:b9:13:90:cb:fe:1e:2c:ec:1d:23:17:f8:5e:03: 39:0e:31:bf:a1:5d:30:9c:e5:10:5d:ff:cb:d2:92: fc:67:88:86:ce:4a:c2:ce:f5:69:8e:52:59:9e:68: 0c:b4:ce:f9:92:80:d6:d6:84:5b:65:5a:98:b4:3e: 59:8f:ff:41:39:f6:19:f5:2f:72:6c:f8:85:7c:00: 43:73:75:f3:75:83:07:c3:c1:d9:76:e6:51:80:96: 34:33:b2:06:08:59:4b:6b:fc:2b:23:c0:9c:bb:cb: 49:0d:93:fe:ec:96:df:d1:cb:16:63:43:d6:bf:2c: a9:4c:0e:3d:b8:3c:4e:bc:e3:06:d0:7e:c5:a1:1a: c2:3e:65:6d:14:4c:05:06:8f:4a:e8:f1:49:31:a3: 38:08:f9:a4:3f:0c:2b:23:81:88:5d:b6:a0:bd:c0: 90:3e:c9:8a:28:45:20:72:ff:bc:fa:a2:14:48:59: 0c:dc:4a:8d:e6:ad:dc:29:d2:7c:ac:51:34:9d:a2: 8e:13:c7:b6:fb:10:d7:04:eb:e2:26:98:ba:6b:5b: 39:7a:33:48:68:3a:49:8c:a1:e0:92:91:30:6d:82: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:51:71:78:F7:F3:76:35:1F:18:5C:63:05:B7:6B:B8:92:E4:04:91 X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:fd:b2:a1:b5:0b:59:11:13:32:31:7c:38:9f:61:f5:00:4a: 07:d0:ef:f0:49:d9:fc:2a:0a:4d:a0:c8:44:5d:91:95:b6:d7: db:bd:c5:64:40:ba:8c:33:fe:f8:68:2a:18:b0:4c:0b:52:1f: a3:9b:63:56:97:cd:b1:eb:10:0a:be:1f:30:e4:d3:0e:8e:5a: 62:07:6b:3f:4e:28:80:2a:c6:13:32:fe:8c:ed:8a:37:19:c5: da:e3:77:7b:f1:f9:83:ab:02:bf:74:a6:4e:43:1e:28:79:85: de:86:65:03:fe:11:3b:22:b1:f4:d7:48:de:b7:83:d8:27:1a: b5:5f:96:5c:7f:70:18:a0:bb:04:f6:e7:1c:a9:41:d6:bd:f8: 6f:12:a2:2c:15:b0:d0:a6:16:41:39:aa:87:73:ac:1c:e3:65: c9:a4:d3:a4:5a:a0:69:f1:7e:b5:6b:8d:2b:0d:8d:47:48:15: d4:8d:24:fa:71:ea:9e:c1:c0:fe:40:3a:22:a6:09:da:59:62: b6:47:54:8d:56:bc:61:7c:65:a7:e9:7d:91:e9:2c:5f:d0:04: cb:9e:6f:66:17:dd:3c:8d:5e:a0:68:05:68:d3:9c:c7:f1:e6: e5:20:84:e3:59:bb:02:73:f1:fc:1b:40:b4:d3:cf:eb:66:a1: 64:d0:63:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjUxMjA1MDAxNDM1WhcNMjUxMjEyMDAxNDM1WjAYMRYwFAYD VQQDEw02OTMyMjNlYi03MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lFDvMxJN4DSeEMVEDHtmjAJxJ+3U2zS/DWnjRS+uROQy/4eLOwdIxf4XgM5 DjG/oV0wnOUQXf/L0pL8Z4iGzkrCzvVpjlJZnmgMtM75koDW1oRbZVqYtD5Zj/9B OfYZ9S9ybPiFfABDc3XzdYMHw8HZduZRgJY0M7IGCFlLa/wrI8Ccu8tJDZP+7Jbf 0csWY0PWvyypTA49uDxOvOMG0H7FoRrCPmVtFEwFBo9K6PFJMaM4CPmkPwwrI4GI XbagvcCQPsmKKEUgcv+8+qIUSFkM3EqN5q3cKdJ8rFE0naKOE8e2+xDXBOviJpi6 a1s5ejNIaDpJjKHgkpEwbYId6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpRcXj3 83Y1HxhcYwW3a7iS5ASRMB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy/bKhtQtZERMyMXw4n2H1AEoH0O/wSdn8KgpNoMhEXZGVttfbvcVk QLqMM/74aCoYsEwLUh+jm2NWl82x6xAKvh8w5NMOjlpiB2s/TiiAKsYTMv6M7Yo3 GcXa43d78fmDqwK/dKZOQx4oeYXehmUD/hE7IrH010jet4PYJxq1X5Zcf3AYoLsE 9uccqUHWvfhvEqIsFbDQphZBOaqHc6wc42XJpNOkWqBp8X61a40rDY1HSBXUjST6 ceqewcD+QDoipgnaWWK2R1SNVrxhfGWn6X2R6Sxf0ATLnm9mF908jV6gaAVo05zH 8eblIITjWbsCc/H8G0C008/rZqFk0GMw -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:55 2025 by rpki-client