This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: dozhNpf0PdOYkuN39WdhJ2aaPXKekMBcun/GxH1oLZg= Subject key identifier: A9:FA:5D:6B:FC:0C:10:1C:E0:A3:D7:5A:20:03:5B:99:1C:32:6A:F6 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 4F Signing time: Tue 09 Dec 2025 05:15:08 +0000 Manifest this update: Tue 09 Dec 2025 05:15:08 +0000 Manifest next update: Tue 16 Dec 2025 05:15:08 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: b5D4KSTsa4LC3c1YyDA5vc8+QDs75UxNYtUWW+hKSeg=) 2: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: hN1QiGOiu058mqvwkPVN0CGty1GL6SzSs8DlhHm4rnU=) 3: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: qmzNMDj0eJRO3I+2FONjuUe85vVvjRJp6v99858Vj2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 05:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Dec 9 05:15:08 2025 GMT Not After : Dec 16 05:15:08 2025 GMT Subject: CN=6937b05c-ae4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:22:09:91:ee:02:ed:ac:97:5d:5e:95:2a: b2:e0:26:89:ad:02:d4:78:90:a5:31:0e:d9:f7:ad: 85:14:d4:39:13:8e:6e:4c:6c:fb:30:ce:79:9a:0e: 10:40:93:81:4a:c5:a2:69:0a:01:b8:56:4e:93:2e: a1:d7:1c:dd:f9:26:36:ff:b1:ac:b2:5f:e6:69:9d: 3e:0d:b2:36:dd:92:91:38:22:11:ea:e5:b5:08:8f: b1:03:aa:11:87:84:6f:a6:75:7c:e4:a6:69:81:ab: 92:21:86:a8:a0:5f:2c:ff:02:cc:aa:66:7f:26:05: a9:af:72:82:20:44:8c:9c:94:2e:67:69:9d:67:8e: 3d:67:9e:e0:98:3d:96:9d:df:f8:39:cb:2c:7e:9a: 1a:cb:21:2b:c1:a1:e1:92:61:d3:d7:1b:b7:50:01: 23:95:6b:9c:04:38:a3:0d:14:9d:70:9c:fa:96:9d: fc:ed:35:2e:fd:7e:a1:fb:2c:16:5b:75:1c:0b:b8: 70:91:4a:d0:18:a7:8e:fb:19:9a:16:f1:22:94:4a: 30:7c:a6:39:e6:5e:92:f1:fd:89:ca:6d:b3:bc:d8: 04:e6:29:65:5a:dd:e2:b1:2c:29:15:35:57:81:b7: b9:31:9a:b9:85:f3:85:9a:4f:c3:e6:33:85:60:58: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FA:5D:6B:FC:0C:10:1C:E0:A3:D7:5A:20:03:5B:99:1C:32:6A:F6 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:1b:b6:ef:04:02:3f:67:83:69:93:56:86:26:a9:8e:3a:e0: 43:80:e8:73:58:ef:71:77:43:ab:22:7c:58:19:68:19:fc:08: 19:8c:fc:bd:cc:1d:b0:29:01:64:a0:92:ec:1b:b8:8c:ee:e9: 8f:22:6f:29:f6:e0:cb:49:f2:b0:14:f5:f9:4d:2e:b0:57:00: 2b:1c:1b:97:f0:6f:e1:5d:04:b3:b3:73:67:fa:c3:59:73:84: 1f:9b:31:d9:af:dd:7a:36:d5:8c:a3:b4:46:54:a6:3a:14:4f: b3:fb:42:e5:2c:51:31:cd:25:4f:cf:b5:77:99:b7:c3:19:35: b5:25:d7:8a:57:12:46:ca:a5:f5:bf:5c:8c:d4:c6:73:30:9f: c2:ef:91:a9:65:ab:69:84:c1:e9:3a:f6:b7:08:0d:ff:c3:d9: 1a:85:74:3f:17:3f:df:82:96:02:32:84:0b:3e:68:69:7d:a1: fb:29:91:6a:42:b1:9a:94:a2:a4:54:4d:b0:bf:5a:0d:34:45: e5:dd:b2:fc:b2:b8:05:f2:10:ba:d9:dd:85:f3:f6:63:2a:69: 9d:ff:e8:38:72:3d:d3:e9:b2:ff:66:09:3c:1e:6d:0a:9b:47: 6b:3f:52:0c:23:7a:11:c0:79:3e:cd:1f:74:ce:d4:ed:12:83: 2a:41:1a:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTEyMDkwNTE1MDhaFw0yNTEyMTYwNTE1MDhaMBgxFjAUBgNV BAMTDTY5MzdiMDVjLWFlNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQvSIJke4C7ayXXV6VKrLgJomtAtR4kKUxDtn3rYUU1DkTjm5MbPswznmaDhBA k4FKxaJpCgG4Vk6TLqHXHN35Jjb/sayyX+ZpnT4NsjbdkpE4IhHq5bUIj7EDqhGH hG+mdXzkpmmBq5IhhqigXyz/AsyqZn8mBamvcoIgRIyclC5naZ1njj1nnuCYPZad 3/g5yyx+mhrLISvBoeGSYdPXG7dQASOVa5wEOKMNFJ1wnPqWnfztNS79fqH7LBZb dRwLuHCRStAYp477GZoW8SKUSjB8pjnmXpLx/YnKbbO82ATmKWVa3eKxLCkVNVeB t7kxmrmF84WaT8PmM4VgWIPRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqfpda/wM EBzgo9daIANbmRwyavYwHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQbtu8EAj9ng2mTVoYmqY464EOA6HNY73F3Q6sifFgZaBn8CBmM/L3M HbApAWSgkuwbuIzu6Y8ibyn24MtJ8rAU9flNLrBXACscG5fwb+FdBLOzc2f6w1lz hB+bMdmv3Xo21YyjtEZUpjoUT7P7QuUsUTHNJU/PtXeZt8MZNbUl14pXEkbKpfW/ XIzUxnMwn8Lvkallq2mEwek69rcIDf/D2RqFdD8XP9+ClgIyhAs+aGl9ofspkWpC sZqUoqRUTbC/Wg00ReXdsvyyuAXyELrZ3YXz9mMqaZ3/6DhyPdPpsv9mCTwebQqb R2s/UgwjehHAeT7NH3TO1O0SgypBGrg= -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:01 2025 by rpki-client