This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: hmKT3ZDaeddw8RPV3DKr8OuCUl6rWMRhy95wLJavywE= Subject key identifier: 31:CC:6A:10:5C:D5:21:99:AA:BB:5E:26:6B:3E:98:0A:E0:20:E5:5D Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: C5 Signing time: Sun 07 Dec 2025 04:04:24 +0000 Manifest this update: Sun 07 Dec 2025 04:04:23 +0000 Manifest next update: Sun 14 Dec 2025 04:04:23 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: JT++zcPRBdrDmP99jjnm0ubQGWzKwm6hNNt18Uj7pCc=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Dec 7 04:04:23 2025 GMT Not After : Dec 14 04:04:23 2025 GMT Subject: CN=6934fcc8-5b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:db:7b:02:ee:8f:8a:76:d8:98:4c:88:f3: 41:8a:c2:c0:33:27:70:29:74:8c:ed:4c:06:99:d4: bf:c2:ff:83:56:14:84:61:00:24:29:b8:f0:ac:79: 6d:4a:20:6d:e7:0a:42:36:61:74:ac:f1:35:f2:9b: 42:af:7e:9b:7e:76:4d:38:c0:ea:fc:01:6d:d6:fa: 5b:c6:ed:c2:c7:d0:1a:38:2c:97:f5:66:f8:cd:f1: 5a:9c:fc:bd:ae:7f:35:1b:e0:fd:62:b7:43:07:4c: be:a3:40:02:f4:cc:39:b2:80:da:e7:8f:6e:40:26: 92:a7:ec:f3:7d:87:eb:97:f4:70:46:19:1e:b9:0f: 61:0d:79:a2:36:e8:b1:5b:6c:8d:fd:36:4c:e1:64: 3c:5e:bb:5e:09:54:d6:51:ad:f5:60:72:f0:75:92: f9:ef:92:43:90:43:fd:89:47:7a:c0:38:cd:16:08: 8d:d2:a4:66:0f:67:c1:ec:2f:33:42:be:ad:7e:95: e1:98:d2:93:65:5c:a0:9d:7d:57:0b:00:2f:df:f4: d0:13:b1:6b:af:92:7d:c8:0d:16:c9:fe:a8:b7:7a: 1d:b3:9c:b5:16:87:47:87:ea:de:06:1b:00:3e:40: e3:41:ab:eb:67:20:01:1b:7f:31:69:de:9b:28:42: 03:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CC:6A:10:5C:D5:21:99:AA:BB:5E:26:6B:3E:98:0A:E0:20:E5:5D X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e2:51:d0:72:b8:4b:d4:10:4d:24:21:05:ae:64:f3:a4:62: af:26:8b:b6:cc:26:97:62:54:84:4a:5c:b0:4a:f8:dc:a1:25: 67:83:42:82:6b:4a:75:9e:c5:01:1c:d4:85:3b:ed:d7:34:a1: 27:d0:52:af:f1:86:c2:57:55:88:ee:2e:e2:57:01:52:f1:4b: a4:fa:63:92:99:05:47:68:53:41:e0:81:32:50:58:ad:90:6d: 04:14:03:77:e9:a8:9b:91:74:17:19:dc:e4:64:79:b4:92:38: 65:83:94:7c:a9:41:65:88:d0:64:b0:5a:5c:f6:7e:20:9b:bf: cd:92:c4:fb:9c:84:0a:34:74:0c:2d:e3:75:3b:49:ce:ed:9e: 3b:ab:48:d3:c4:0e:fe:2e:ef:92:5a:57:45:14:f4:f5:d6:d6: 6d:eb:59:a8:08:81:b2:d3:44:70:f2:3a:dd:d6:96:14:75:53: 32:16:fc:41:96:f5:5e:60:b3:17:5b:2b:e1:b9:45:61:3d:ce: 57:2e:e2:10:9e:79:b9:36:44:db:ad:09:3c:47:47:b9:33:cb: da:ae:99:1a:e9:c0:73:fa:86:b0:ea:ab:9a:0e:d6:2e:35:98: 04:72:10:e9:92:36:c9:e6:2f:70:41:e9:1d:8d:d1:6e:4e:39: 77:f8:57:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUxMjA3MDQwNDIzWhcNMjUxMjE0MDQwNDIzWjAYMRYwFAYD VQQDEw02OTM0ZmNjOC01YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYDbewLuj4p22JhMiPNBisLAMydwKXSM7UwGmdS/wv+DVhSEYQAkKbjwrHlt SiBt5wpCNmF0rPE18ptCr36bfnZNOMDq/AFt1vpbxu3Cx9AaOCyX9Wb4zfFanPy9 rn81G+D9YrdDB0y+o0AC9Mw5soDa549uQCaSp+zzfYfrl/RwRhkeuQ9hDXmiNuix W2yN/TZM4WQ8XrteCVTWUa31YHLwdZL575JDkEP9iUd6wDjNFgiN0qRmD2fB7C8z Qr6tfpXhmNKTZVygnX1XCwAv3/TQE7Frr5J9yA0Wyf6ot3ods5y1FodHh+reBhsA PkDjQavrZyABG38xad6bKEIDGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHMahBc 1SGZqrteJms+mArgIOVdMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN4lHQcrhL1BBNJCEFrmTzpGKvJou2zCaXYlSESlywSvjcoSVng0KC a0p1nsUBHNSFO+3XNKEn0FKv8YbCV1WI7i7iVwFS8Uuk+mOSmQVHaFNB4IEyUFit kG0EFAN36aibkXQXGdzkZHm0kjhlg5R8qUFliNBksFpc9n4gm7/NksT7nIQKNHQM LeN1O0nO7Z47q0jTxA7+Lu+SWldFFPT11tZt61moCIGy00Rw8jrd1pYUdVMyFvxB lvVeYLMXWyvhuUVhPc5XLuIQnnm5NkTbrQk8R0e5M8varpka6cBz+oaw6quaDtYu NZgEchDpkjbJ5i9wQekdjdFuTjl3+Fcr -----END CERTIFICATE-----Generated at Sun Dec 7 18:29:25 2025 by rpki-client