This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json) Hash identifier: GPta180bGIr3lsvqgd7h+6fyESYEf6BQEwrVlPT5Bzo= Subject key identifier: 00:ED:5A:03:AE:B7:03:3A:07:48:DB:81:95:76:0E:D6:A9:06:0C:52 Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft Manifest number: 01D7 Signing time: Fri 19 Dec 2025 02:05:28 +0000 Manifest this update: Fri 19 Dec 2025 02:05:28 +0000 Manifest next update: Fri 26 Dec 2025 02:05:28 +0000 Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: LBgjajFqQhdR4WYM5We25bGo4kBeLS6+KEuoDEK8gg4=) 2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: V7+xw0Oh19sCCsRJ/3dn3BE03yFJdR1cttirX6vRQc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: Dec 19 02:05:28 2025 GMT Not After : Dec 26 02:05:28 2025 GMT Subject: CN=6944b2e8-6594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:28:c2:1a:21:92:c8:a5:81:34:9d:47:e6: 29:b9:7c:1b:eb:32:42:b3:40:44:46:0c:80:ac:5c: f2:59:5a:d0:a6:96:ae:0c:a6:29:8c:77:db:99:18: 73:0c:98:f6:4a:db:98:f7:3e:ca:0d:60:19:f2:95: b9:c8:c9:53:57:d3:1d:6b:d3:fb:da:16:0b:d1:f4: fd:ec:a9:49:8c:17:04:50:5d:1d:4a:59:54:7b:c9: 65:e6:0e:dd:30:79:21:f8:25:51:e6:b0:35:45:83: 48:be:91:14:60:75:93:91:29:15:dc:fe:ef:d5:59: 1a:fa:04:57:b8:89:9f:9f:64:64:4d:b8:cf:fd:2f: 47:3d:97:a0:0d:24:28:db:ba:fc:09:d8:d5:ad:1d: 60:32:69:64:ee:68:dc:38:04:85:0a:bd:8c:26:38: 56:88:58:53:b3:91:e1:3d:58:08:d1:6b:8d:13:bd: fb:49:7c:a4:1e:9a:2b:b1:b6:99:42:16:1c:e7:5d: d9:4c:41:0c:07:13:a2:da:11:a8:55:c9:bc:22:a2: 19:7a:81:42:a2:17:56:b4:9e:b1:c9:40:7a:12:70: 71:ed:54:84:10:6d:62:cc:09:1f:12:24:bd:d5:68: 73:41:8a:e5:c0:a3:70:16:48:f1:87:7a:ab:45:ba: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:ED:5A:03:AE:B7:03:3A:07:48:DB:81:95:76:0E:D6:A9:06:0C:52 X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:81:fa:b5:65:a4:bd:92:be:bf:fe:41:3e:79:1d:d1:a5:2e: 80:42:f6:fa:9f:da:d8:9c:bc:ec:89:3f:ff:a1:41:0e:77:8e: 59:66:0d:39:32:e2:a0:e3:9b:8d:7f:5f:28:f8:cc:c3:7b:e9: f5:a3:c1:85:7d:65:aa:21:5d:9e:51:1c:f5:64:49:77:ac:57: 0d:32:43:26:c5:24:6d:90:b0:97:29:0a:d0:5b:3f:fa:91:88: 4b:1d:55:05:14:df:ff:71:83:7c:10:d9:6d:c3:a1:be:ff:e1: ce:ca:75:bb:10:e3:fa:e5:db:f7:86:e3:d7:bf:38:a6:f5:46: 9f:cf:22:9b:ec:47:37:12:e5:2c:31:a9:f1:14:72:e3:a5:cc: 74:45:cb:3f:2a:8e:6a:48:46:f4:56:6a:66:d7:1f:b3:3c:68: 6a:ea:9a:e1:f7:1e:fe:4e:42:d0:0c:ec:53:3c:c4:e5:bc:a6: 4c:1e:b0:c3:7b:ab:83:a9:b3:a5:63:a8:da:62:bd:6c:e5:eb: 96:7a:c9:30:50:33:fd:8a:96:e2:75:94:e3:13:60:c6:38:5c: 35:5e:80:bf:99:3e:01:24:7d:17:70:1a:26:69:22:f8:be:b8: 9a:be:8c:b1:c2:9f:08:94:6b:8e:f9:47:75:18:45:15:e2:a4: 3c:cc:ee:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjUxMjE5MDIwNTI4WhcNMjUxMjI2MDIwNTI4WjAYMRYwFAYD VQQDDA02OTQ0YjJlOC02NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEsowhohksilgTSdR+YpuXwb6zJCs0BERgyArFzyWVrQppauDKYpjHfbmRhz DJj2StuY9z7KDWAZ8pW5yMlTV9Mda9P72hYL0fT97KlJjBcEUF0dSllUe8ll5g7d MHkh+CVR5rA1RYNIvpEUYHWTkSkV3P7v1Vka+gRXuImfn2RkTbjP/S9HPZegDSQo 27r8CdjVrR1gMmlk7mjcOASFCr2MJjhWiFhTs5HhPVgI0WuNE737SXykHporsbaZ QhYc513ZTEEMBxOi2hGoVcm8IqIZeoFCohdWtJ6xyUB6EnBx7VSEEG1izAkfEiS9 1WhzQYrlwKNwFkjxh3qrRbpfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADtWgOu twM6B0jbgZV2DtapBgxSMB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr RnNIODdxX0ZWbGNnSWlDS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBogfq1ZaS9kr6//kE+eR3RpS6AQvb6n9rYnLzsiT//oUEOd45ZZg05 MuKg45uNf18o+MzDe+n1o8GFfWWqIV2eURz1ZEl3rFcNMkMmxSRtkLCXKQrQWz/6 kYhLHVUFFN//cYN8ENltw6G+/+HOynW7EOP65dv3huPXvzim9UafzyKb7Ec3EuUs ManxFHLjpcx0Rcs/Ko5qSEb0Vmpm1x+zPGhq6prh9x7+TkLQDOxTPMTlvKZMHrDD e6uDqbOlY6jaYr1s5euWeskwUDP9ipbidZTjE2DGOFw1XoC/mT4BJH0XcBomaSL4 vriavoyxwp8IlGuO+Ud1GEUV4qQ8zO5j -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:41 2025 by rpki-client