This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: LtfDu6PV7AAVEgyRB2MsQKfdX8oOtZCQP305ckFEOmk= Subject key identifier: 2F:DD:65:07:C6:8D:AC:7F:0B:C8:15:33:77:09:30:26:F1:43:1B:20 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 01E9 Signing time: Sun 07 Dec 2025 01:19:40 +0000 Manifest this update: Sun 07 Dec 2025 01:19:40 +0000 Manifest next update: Sun 14 Dec 2025 01:19:40 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: 4x5ZspK8j0Pp76iwUYkmMKCJITTnjA4iqSyaZ5Rg67U=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 3: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI=) 4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Dec 7 01:19:40 2025 GMT Not After : Dec 14 01:19:40 2025 GMT Subject: CN=6934d62c-a6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:08:c1:9e:9c:fe:ed:29:a9:ba:70:d7:28: 12:a7:fe:99:05:61:5a:7b:95:43:b5:69:49:43:f1: 34:f1:96:48:c8:b9:0b:d8:aa:c3:56:6e:58:98:ec: 42:b3:c2:a5:b0:88:5a:9b:1c:2d:fe:b9:13:5f:4d: c3:df:95:16:71:e2:f1:01:19:61:2a:13:e9:10:5a: 2d:57:07:39:fa:2a:80:bc:f2:ca:02:2a:f0:ce:78: 36:cf:07:2e:3c:2a:b9:8b:9a:8a:b6:d0:b6:73:c4: 87:4c:ea:31:e3:9e:f4:e1:39:a8:3b:08:eb:c4:a3: 84:40:8a:e6:d1:7a:bd:3f:70:4c:9e:e8:cc:d9:19: d0:cc:96:01:3d:ce:81:79:5b:d6:7b:79:e8:1f:7b: 9e:cc:c2:98:e8:0d:ae:d9:6b:c3:3f:a5:c5:51:89: 9f:2a:d2:33:5f:ca:9e:b3:12:e3:55:bc:10:a8:91: b2:7f:77:f6:6e:81:0a:76:96:8e:a9:d7:27:d9:38: f3:0b:c1:29:a0:19:7f:95:33:85:8d:7f:29:1a:39: 45:6a:52:4f:be:2a:25:f5:a9:88:9a:ad:fa:a9:ef: f3:71:c1:6a:0b:97:c5:37:67:38:54:78:17:f9:6a: 2d:ef:53:aa:a3:6f:f4:e2:c0:f2:72:79:08:09:ec: d5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DD:65:07:C6:8D:AC:7F:0B:C8:15:33:77:09:30:26:F1:43:1B:20 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:ae:8b:59:63:53:7e:87:6f:28:85:9f:3c:2c:74:54:4c:a7: 3f:7f:22:c5:bb:70:5d:0b:80:eb:a8:8e:52:c3:70:1d:b3:16: a3:8c:1b:a1:5d:42:1d:4d:8c:f5:76:09:2a:f3:f7:3f:93:8d: 1f:b4:4a:d7:a4:21:e1:9d:e4:e8:e1:b5:06:9c:4f:d0:3e:47: e3:51:b2:62:0b:8d:48:5b:f6:ce:eb:d3:56:04:5e:a9:5a:37: d7:1a:1c:b9:50:84:12:1f:a4:6a:ae:6e:af:c3:dd:81:45:98: 71:44:34:71:cc:16:85:44:52:3c:74:f5:63:f8:7b:d5:8e:9a: e4:bc:cd:fd:3a:e6:65:5e:24:60:51:d0:4c:30:0a:e9:f0:e0: b9:5e:ab:e5:45:d8:e8:55:29:b2:f3:2e:78:99:52:1e:a6:bf: 54:2d:f9:1f:ae:97:4e:aa:05:c4:c1:c1:aa:ec:c4:6e:1c:b6: a4:74:c4:53:19:ea:9b:50:8b:4b:24:25:06:f9:b7:cd:79:3b: 90:1f:3d:ab:cd:e9:9c:68:8a:ec:ff:1c:a6:e0:fc:ca:c6:bc: 6d:c3:e2:66:7a:2f:36:52:75:17:38:e9:ea:e9:1a:16:09:0e: 57:5a:9e:b7:b8:b1:47:a4:06:a4:0b:80:8e:94:c2:c3:87:60: f8:65:5a:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUxMjA3MDExOTQwWhcNMjUxMjE0MDExOTQwWjAYMRYwFAYD VQQDEw02OTM0ZDYyYy1hNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXQIwZ6c/u0pqbpw1ygSp/6ZBWFae5VDtWlJQ/E08ZZIyLkL2KrDVm5YmOxC s8KlsIhamxwt/rkTX03D35UWceLxARlhKhPpEFotVwc5+iqAvPLKAirwzng2zwcu PCq5i5qKttC2c8SHTOox45704TmoOwjrxKOEQIrm0Xq9P3BMnujM2RnQzJYBPc6B eVvWe3noH3uezMKY6A2u2WvDP6XFUYmfKtIzX8qesxLjVbwQqJGyf3f2boEKdpaO qdcn2TjzC8EpoBl/lTOFjX8pGjlFalJPviol9amImq36qe/zccFqC5fFN2c4VHgX +Wot71Oqo2/04sDycnkICezV7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/dZQfG jax/C8gVM3cJMCbxQxsgMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNrotZY1N+h28ohZ88LHRUTKc/fyLFu3BdC4DrqI5Sw3AdsxajjBuh XUIdTYz1dgkq8/c/k40ftErXpCHhneTo4bUGnE/QPkfjUbJiC41IW/bO69NWBF6p WjfXGhy5UIQSH6Rqrm6vw92BRZhxRDRxzBaFRFI8dPVj+HvVjprkvM39OuZlXiRg UdBMMArp8OC5XqvlRdjoVSmy8y54mVIepr9ULfkfrpdOqgXEwcGq7MRuHLakdMRT GeqbUItLJCUG+bfNeTuQHz2rzemcaIrs/xym4PzKxrxtw+Jmei82UnUXOOnq6RoW CQ5XWp63uLFHpAakC4COlMLDh2D4ZVoJ -----END CERTIFICATE-----Generated at Mon Dec 8 05:59:43 2025 by rpki-client