This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: 0LM71ERcLJe1ucBN1XpdErxveVyV0bSmKbuoHqeVye4= Subject key identifier: 21:89:97:AF:C4:EF:E5:C1:33:37:2B:47:6D:32:6C:7B:DA:F0:95:32 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0CB5 Signing time: Thu 04 Dec 2025 17:43:40 +0000 Manifest this update: Thu 04 Dec 2025 17:43:39 +0000 Manifest next update: Thu 11 Dec 2025 17:43:39 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: cS3ZzfALStuSv6YNUKGgGlNmtu3HZixZcyqHf0f/Euo=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Dec 4 17:43:39 2025 GMT Not After : Dec 11 17:43:39 2025 GMT Subject: CN=6931c84c-812e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:e5:d4:00:33:7a:63:21:91:e2:6c:99:2e: 89:18:71:81:1d:fe:72:ed:58:ef:03:65:9c:a6:79: ef:8f:a3:40:b9:61:d4:79:ad:4e:37:3e:aa:c4:8f: cc:46:70:aa:41:a3:02:ab:73:f7:03:9c:85:73:78: 59:cb:ec:12:33:06:6f:28:90:89:b3:51:6e:58:1f: 94:f3:c7:09:65:19:7c:cc:38:10:30:b7:d0:45:ef: 37:5a:cf:5e:10:73:7d:4a:59:8a:fa:11:bb:6f:45: 70:c7:e8:e2:3b:0f:1b:a8:b7:42:90:ba:2f:1f:94: 13:34:66:88:58:a7:13:71:61:29:38:fe:b0:06:28: f6:31:d6:3a:b5:37:b5:45:73:a2:b9:b0:e6:94:45: bf:3c:f9:7a:ae:2a:36:6b:03:39:df:e9:c8:7d:aa: c3:4f:ea:75:81:e1:1e:e4:94:3e:95:7f:f5:e3:3c: 37:7a:49:06:89:f5:02:0f:df:89:49:d1:24:96:a9: 2e:f9:00:62:43:c0:9d:43:36:b6:6c:f0:86:a8:59: 81:94:65:79:8e:f9:fc:18:1c:89:68:18:c1:3c:c9: 5c:aa:ca:ff:41:ed:e5:0a:73:4b:6c:41:0e:4e:5f: ee:70:99:3e:a4:e1:90:c8:42:29:e3:b1:a7:fa:e8: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:97:AF:C4:EF:E5:C1:33:37:2B:47:6D:32:6C:7B:DA:F0:95:32 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:56:ba:81:36:27:02:10:30:9d:e3:c9:89:ab:68:1f:9f:39: 00:60:f7:20:67:5f:6c:32:f8:a7:8c:28:af:89:77:a3:ef:35: 25:85:30:53:29:e4:c3:84:7b:7f:93:12:d4:9f:d5:80:fe:60: 36:e6:df:bb:26:9e:ab:9e:91:1f:ea:41:85:3a:4c:c6:2c:c0: 13:3d:45:dd:d0:9f:a6:d0:44:84:57:94:b1:02:8f:9e:61:39: 7f:24:c3:da:9b:5f:6b:3b:7d:fe:af:cd:37:07:cb:e4:c7:37: 4a:24:df:19:bb:0f:f0:8a:4c:1d:10:4a:4b:08:93:67:d9:b5: 8b:9c:16:34:37:41:91:90:da:f9:99:2a:1a:16:be:69:21:5f: c6:9d:21:17:66:e3:68:e3:ca:98:21:ec:22:42:29:cc:b7:39: 3e:db:8e:63:f0:11:ed:86:46:b4:52:22:32:f9:70:c7:2d:ba: eb:a2:77:d5:8d:09:2d:6c:da:3e:d3:31:82:37:15:b0:13:da: 71:af:fa:c3:cf:ab:41:ce:02:a4:8d:f1:b6:4c:de:cc:b0:90: 71:cf:22:5f:ee:5c:fb:19:68:46:d9:f1:ea:c8:f5:e5:0d:55: c6:cb:71:76:fa:81:49:84:40:75:07:70:30:63:f4:6e:b5:78: a7:12:bc:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUxMjA0MTc0MzM5WhcNMjUxMjExMTc0MzM5WjAYMRYwFAYD VQQDEw02OTMxYzg0Yy04MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKrl1AAzemMhkeJsmS6JGHGBHf5y7VjvA2Wcpnnvj6NAuWHUea1ONz6qxI/M RnCqQaMCq3P3A5yFc3hZy+wSMwZvKJCJs1FuWB+U88cJZRl8zDgQMLfQRe83Ws9e EHN9SlmK+hG7b0Vwx+jiOw8bqLdCkLovH5QTNGaIWKcTcWEpOP6wBij2MdY6tTe1 RXOiubDmlEW/PPl6rio2awM53+nIfarDT+p1geEe5JQ+lX/14zw3ekkGifUCD9+J SdEklqku+QBiQ8CdQza2bPCGqFmBlGV5jvn8GByJaBjBPMlcqsr/Qe3lCnNLbEEO Tl/ucJk+pOGQyEIp47Gn+uir0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGJl6/E 7+XBMzcrR20ybHva8JUyMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdVrqBNicCEDCd48mJq2gfnzkAYPcgZ19sMvinjCiviXej7zUlhTBT KeTDhHt/kxLUn9WA/mA25t+7Jp6rnpEf6kGFOkzGLMATPUXd0J+m0ESEV5SxAo+e YTl/JMPam19rO33+r803B8vkxzdKJN8Zuw/wikwdEEpLCJNn2bWLnBY0N0GRkNr5 mSoaFr5pIV/GnSEXZuNo48qYIewiQinMtzk+245j8BHthka0UiIy+XDHLbrronfV jQktbNo+0zGCNxWwE9pxr/rDz6tBzgKkjfG2TN7MsJBxzyJf7lz7GWhG2fHqyPXl DVXGy3F2+oFJhEB1B3AwY/RutXinErxT -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:39 2025 by rpki-client