This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json) Hash identifier: WsZ7ECdjLBQRD3Vc6G+el9mytBY13y0l0p+A9BU0y0Y= Subject key identifier: 61:0E:70:4D:02:3A:D2:38:91:F4:23:07:DE:7E:4C:63:11:A7:7E:8F Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft Manifest number: 0968 Signing time: Sun 14 Dec 2025 21:56:01 +0000 Manifest this update: Sun 14 Dec 2025 21:56:00 +0000 Manifest next update: Sun 21 Dec 2025 21:56:00 +0000 Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: wnkMg/iIUQh8OOlwjc268BogbpC9Yxnr8+O15a6hWj0=) 2: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=) 3: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Validity Not Before: Dec 14 21:56:00 2025 GMT Not After : Dec 21 21:56:00 2025 GMT Subject: CN=693f3270-d88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:ff:f6:8a:37:f3:d3:a4:a1:0e:c0:0a:ec: 86:cf:4e:91:60:f2:96:e2:cb:01:4a:e6:7a:77:a2: 8a:8e:b3:7a:e4:ff:08:bd:fb:47:b2:5c:c7:a9:87: a0:22:d1:cf:18:02:c0:9c:c1:b6:f9:bc:46:9b:dd: 62:9a:92:e7:d8:db:24:19:09:df:09:8f:b5:b2:0c: c8:10:8f:0f:f1:43:37:3c:76:9e:39:06:c2:34:be: 50:5c:16:52:6d:70:4b:92:49:f6:24:34:fa:76:c6: b8:30:ad:6c:93:0e:22:97:7b:81:8c:dd:6a:73:c3: c4:0a:e9:b7:70:09:23:38:db:03:af:43:99:3a:60: fb:92:91:7f:41:37:f1:45:68:9f:17:0d:63:b6:50: 62:89:e2:0c:f4:d6:44:51:b4:32:5f:50:6b:58:11: 01:4e:0b:fb:a4:cc:7c:7c:84:de:51:80:99:4c:66: 5c:7b:68:47:cf:f6:cf:61:98:40:3b:6b:c2:c1:19: c5:f2:95:e6:e8:f5:27:69:bd:93:40:22:38:e4:8c: f0:bd:66:50:ad:af:04:2d:23:d1:d0:16:af:2d:ff: ae:09:d9:db:f0:c0:8a:53:27:02:42:40:a4:3d:00: a5:f6:c9:43:67:ed:b2:92:ff:35:fc:66:42:7d:44: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0E:70:4D:02:3A:D2:38:91:F4:23:07:DE:7E:4C:63:11:A7:7E:8F X509v3 Authority Key Identifier: keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3c:8d:18:7a:04:91:88:97:97:a4:b3:8e:54:38:2e:ab:8e: c1:6a:7c:d9:ee:2c:e3:60:fb:23:b3:0f:ac:db:88:c6:27:ce: 12:88:8d:2a:b5:26:07:25:73:6e:b3:12:84:bb:7c:e6:f5:ad: 51:24:58:20:f8:94:a9:f2:23:19:f3:19:b0:66:78:46:1f:a4: 5a:55:45:55:d5:74:83:d1:ea:15:23:ef:84:06:84:17:f9:cb: c9:b6:bd:77:a2:08:c0:93:5b:1a:3f:63:e8:35:0c:86:70:0b: bc:8c:d2:bf:a8:5d:a1:50:95:86:74:2e:08:48:9e:88:df:d3: 72:b4:5b:c7:0c:21:94:02:1a:7a:3c:c7:f9:bc:88:2c:80:80: f6:47:04:e6:a5:fa:e3:0c:b3:33:cf:01:60:af:4d:51:06:a9: 66:78:af:b5:07:ec:7f:45:af:6e:d3:8f:e9:44:24:74:32:16: ed:c1:32:e8:fa:d5:95:e8:c4:9c:7b:e0:9a:bb:9f:38:46:d7: 6f:57:4b:17:bf:1c:61:de:cd:46:6a:3b:67:1b:b6:94:ad:e8: fe:8f:bb:cc:2d:19:9a:ac:a4:6f:20:77:02:9e:54:ed:26:fc: 84:31:37:9b:fa:fc:fc:e4:0d:84:e8:bb:5c:8c:da:60:e6:8c: cd:c8:89:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE RDZCRTc3RTIwHhcNMjUxMjE0MjE1NjAwWhcNMjUxMjIxMjE1NjAwWjAYMRYwFAYD VQQDDA02OTNmMzI3MC1kODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZn/9oo389OkoQ7ACuyGz06RYPKW4ssBSuZ6d6KKjrN65P8IvftHslzHqYeg ItHPGALAnMG2+bxGm91impLn2NskGQnfCY+1sgzIEI8P8UM3PHaeOQbCNL5QXBZS bXBLkkn2JDT6dsa4MK1skw4il3uBjN1qc8PECum3cAkjONsDr0OZOmD7kpF/QTfx RWifFw1jtlBiieIM9NZEUbQyX1BrWBEBTgv7pMx8fITeUYCZTGZce2hHz/bPYZhA O2vCwRnF8pXm6PUnab2TQCI45IzwvWZQra8ELSPR0BavLf+uCdnb8MCKUycCQkCk PQCl9slDZ+2ykv81/GZCfURtoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEOcE0C OtI4kfQjB95+TGMRp36PMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95 TDFiZThDNjNMcVhkYS1kLUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+PI0YegSRiJeXpLOOVDguq47BanzZ7izjYPsjsw+s24jGJ84SiI0q tSYHJXNusxKEu3zm9a1RJFgg+JSp8iMZ8xmwZnhGH6RaVUVV1XSD0eoVI++EBoQX +cvJtr13ogjAk1saP2PoNQyGcAu8jNK/qF2hUJWGdC4ISJ6I39NytFvHDCGUAhp6 PMf5vIgsgID2RwTmpfrjDLMzzwFgr01RBqlmeK+1B+x/Ra9u04/pRCR0MhbtwTLo +tWV6MSce+Cau584RtdvV0sXvxxh3s1GajtnG7aUrej+j7vMLRmarKRvIHcCnlTt JvyEMTeb+vz85A2E6LtcjNpg5ozNyIm6 -----END CERTIFICATE-----Generated at Mon Dec 15 15:34:42 2025 by rpki-client