This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: fm0QnVk7eefRMdhEILsmNZJLai9jYVMl3eWqrSLyaMc= Subject key identifier: 5C:4E:FD:74:01:8A:24:CD:C3:A1:EF:46:14:46:CF:B0:6D:CD:38:41 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 27C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 274A Signing time: Sat 20 Dec 2025 15:32:26 +0000 Manifest this update: Sat 20 Dec 2025 15:32:25 +0000 Manifest next update: Sat 27 Dec 2025 15:32:25 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: pUl9ZSty+gyPihVpG+BEj0FXMshzlo3cqAycMD/n9LQ=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 5: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10178 (0x27c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Dec 20 15:32:25 2025 GMT Not After : Dec 27 15:32:25 2025 GMT Subject: CN=6946c18a-24a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:43:d9:95:66:0f:14:19:fe:67:fb:dd:09: 77:0c:37:d5:e0:d1:41:6c:6b:9c:e7:97:e2:4c:ec: 36:de:63:28:48:b8:a2:59:36:fd:85:c5:4d:37:85: fd:93:6d:a7:b7:f6:3a:7d:80:92:2e:55:20:b0:22: 61:3e:af:88:90:99:ab:65:21:c6:a5:a1:09:67:6d: b3:b0:82:6b:ae:61:33:6a:60:cb:1d:e1:30:b9:e4: ea:9a:9e:fd:9d:39:97:0f:ef:e1:22:51:1b:cf:e1: 16:76:87:f6:72:71:3d:aa:05:79:95:cd:03:98:ef: 93:a8:1b:b0:f6:1e:8f:ce:7c:c1:dc:c4:86:32:cd: 4d:97:ce:b5:17:a7:5b:3b:17:c8:70:c7:10:87:a2: 4b:46:ea:39:86:2d:ad:1f:f9:c6:3d:22:2c:b8:53: 7c:dc:94:93:e3:13:82:eb:bd:72:24:79:a5:a6:8a: a4:63:57:81:f0:00:62:b9:ec:7d:45:3c:d4:7f:ba: 7e:11:06:9e:e2:5a:d1:b4:ed:d0:15:04:dd:6d:b0: b3:04:38:5c:b4:e4:30:04:11:3d:11:cf:38:cd:d5: 86:83:2d:f6:82:70:16:13:25:63:8e:47:5d:3c:91: 44:4b:40:a6:d0:bf:1e:24:03:80:23:26:fa:bb:4a: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4E:FD:74:01:8A:24:CD:C3:A1:EF:46:14:46:CF:B0:6D:CD:38:41 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a1:4d:5b:50:2a:60:21:74:39:e4:9c:d4:fe:ba:d4:8c:5f: 6f:c9:41:45:09:6a:bc:cd:47:c0:8f:67:b6:a6:b9:fc:95:68: 46:6c:23:93:71:b9:a0:2a:bc:13:70:6b:60:78:e8:eb:fb:0b: 74:e1:1c:9d:41:3a:5f:f7:8a:de:91:0d:b6:fd:16:83:22:c8: 12:7f:c0:d6:58:ac:94:5b:a6:1c:75:06:c1:5d:89:15:0b:d1: 90:d9:20:bb:b9:9b:94:1b:ce:62:2c:95:b0:17:84:2c:51:98: 46:5f:bc:1d:ab:4e:05:20:9f:2a:0e:6d:f2:51:24:52:07:d9: 84:be:fd:5f:1d:f2:5f:50:1a:df:2b:30:6b:57:b1:ae:20:b1: 3b:1c:41:9e:c5:d4:4a:9d:5e:35:e5:de:9e:3a:f2:7d:0b:2f: 83:00:2d:91:a0:cf:f0:6d:40:18:c1:91:8e:1c:a3:ea:23:e6: 6d:08:e3:59:57:74:a3:3a:46:79:a9:d8:f5:c3:9d:7e:1a:5e: 3a:6d:95:02:df:ac:5f:45:f6:01:38:82:d9:2b:b9:14:86:f1: 80:7a:ba:22:cf:b5:69:d5:68:27:0c:90:83:92:b0:d8:dd:37: 5b:1b:b0:e2:07:27:11:0d:67:5c:fc:b3:b9:8e:3b:91:9c:18: a0:f1:b8:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUxMjIwMTUzMjI1WhcNMjUxMjI3MTUzMjI1WjAYMRYwFAYD VQQDDA02OTQ2YzE4YS0yNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVVD2ZVmDxQZ/mf73Ql3DDfV4NFBbGuc55fiTOw23mMoSLiiWTb9hcVNN4X9 k22nt/Y6fYCSLlUgsCJhPq+IkJmrZSHGpaEJZ22zsIJrrmEzamDLHeEwueTqmp79 nTmXD+/hIlEbz+EWdof2cnE9qgV5lc0DmO+TqBuw9h6PznzB3MSGMs1Nl861F6db OxfIcMcQh6JLRuo5hi2tH/nGPSIsuFN83JST4xOC671yJHmlpoqkY1eB8ABiuex9 RTzUf7p+EQae4lrRtO3QFQTdbbCzBDhctOQwBBE9Ec84zdWGgy32gnAWEyVjjkdd PJFES0Cm0L8eJAOAIyb6u0qONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxO/XQB iiTNw6HvRhRGz7BtzThBMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFoU1bUCpgIXQ55JzU/rrUjF9vyUFFCWq8zUfAj2e2prn8lWhGbCOT cbmgKrwTcGtgeOjr+wt04RydQTpf94rekQ22/RaDIsgSf8DWWKyUW6YcdQbBXYkV C9GQ2SC7uZuUG85iLJWwF4QsUZhGX7wdq04FIJ8qDm3yUSRSB9mEvv1fHfJfUBrf KzBrV7GuILE7HEGexdRKnV415d6eOvJ9Cy+DAC2RoM/wbUAYwZGOHKPqI+ZtCONZ V3SjOkZ5qdj1w51+Gl46bZUC36xfRfYBOILZK7kUhvGAeroiz7Vp1WgnDJCDkrDY 3TdbG7DiBycRDWdc/LO5jjuRnBig8bjb -----END CERTIFICATE-----Generated at Sat Dec 20 17:05:56 2025 by rpki-client