This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft File: RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json) Hash identifier: Nv6+Useek9eN6DCxCmZ7wbvrfpCz9nSusvTfYodwej8= Subject key identifier: B2:E8:A0:FC:D1:2B:83:7F:D3:BE:58:2F:99:42:BC:41:90:75:CC:94 Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 Certificate issuer: /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft Manifest number: 02 Signing time: Wed 03 Dec 2025 05:34:38 +0000 Manifest this update: Wed 03 Dec 2025 05:34:38 +0000 Manifest next update: Wed 10 Dec 2025 05:34:38 +0000 Files and hashes: 1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: 7/P4gqBwGEe8BS16+BD6pojOM1UzqxgU6PotKg2wWRk=) 2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: KEDuB0fCQDUlpa61Kum8U1+z81WHmNVyBobvxXJKyg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Validity Not Before: Dec 3 05:34:38 2025 GMT Not After : Dec 10 05:34:38 2025 GMT Subject: CN=692fcbee-b658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:5d:19:02:dd:2d:8f:e9:51:73:bb:52:42: 55:ac:20:01:c2:58:ae:4f:0f:02:7f:87:28:38:34: 50:3f:00:0f:1e:3b:22:fc:de:11:21:1e:9a:46:90: 1e:67:a9:ff:ad:ab:22:78:6e:31:8f:58:3a:79:f6: 47:97:6d:89:15:c8:d2:90:93:85:cf:bb:eb:6f:9e: a2:8d:dc:4f:09:c0:3d:38:d2:7e:59:70:45:58:e2: ca:90:8a:0a:85:98:90:ff:e6:19:9a:f6:f4:41:8d: 94:b2:c9:6c:08:e2:9a:ad:25:2b:95:d7:6a:a8:e5: 12:38:26:3d:77:eb:b4:03:f6:13:a9:88:33:23:cc: e0:78:48:4d:2e:d8:e6:4b:1d:56:a9:e9:2e:a6:6d: 7e:6f:12:f6:57:8d:22:ff:68:d2:78:5b:e3:fa:69: e1:7f:0d:cd:63:77:b1:d6:4a:a1:f1:5e:f1:d1:9d: 51:2a:96:f2:4b:f9:e0:1a:6d:60:3b:5a:c5:71:48: b5:87:64:f8:3b:37:c2:be:9f:25:66:91:4b:28:36: 30:c1:61:6a:8c:37:56:98:88:81:40:52:e4:c2:eb: a6:98:b1:2d:61:f5:54:d9:95:28:68:23:ae:fe:1c: fc:94:1b:6e:c0:7b:bd:5c:b7:5d:98:fc:69:09:c5: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E8:A0:FC:D1:2B:83:7F:D3:BE:58:2F:99:42:BC:41:90:75:CC:94 X509v3 Authority Key Identifier: keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:80:97:24:ef:26:b2:8f:d1:0c:1f:94:d5:f3:9b:66:a0:7d: 02:b7:73:36:e5:ae:77:cf:42:5f:d1:19:5a:5d:50:e0:5d:d5: e8:8e:82:f5:47:56:17:e4:c7:6d:ef:5a:6c:0f:18:9d:f3:a1: 0c:61:76:44:b2:7d:4e:ab:5c:51:1f:be:f9:ec:9a:d0:77:08: 57:d5:a7:a3:c2:70:77:39:a2:80:37:61:de:63:74:05:0f:09: d5:98:90:bd:61:cf:b0:15:5c:85:4c:7f:9f:42:f7:fd:88:2f: 9e:36:61:28:6a:68:10:51:23:b9:b5:e5:d8:f9:f4:b5:07:c1: 43:52:ce:98:31:cb:a3:77:0b:4c:2f:63:d5:a5:a7:5a:95:04: 7a:7f:f5:ef:a1:06:08:dd:94:8a:13:e1:7f:1c:92:6a:8b:f3: 60:ce:77:37:2a:d1:15:dc:43:a3:53:4b:ca:61:a4:17:fc:c7: d1:46:3f:59:1f:00:2c:82:7c:b2:43:a2:5f:38:96:c9:e2:7f: 6e:ad:c1:b6:e7:08:44:f2:4c:39:c2:e2:b2:c7:5d:05:d6:bb: 9d:86:30:1a:64:a3:79:a4:3a:63:da:d3:7a:03:12:78:9f:e5: 07:4d:59:1f:6f:17:cf:10:3a:3a:92:2e:21:4a:e2:b0:31:c6: a0:92:53:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoNDUzNUNGMUQxMjIxQjcxNDA3QzE0MUNFNkJCNTczQThC NkJFODcwMTAeFw0yNTEyMDMwNTM0MzhaFw0yNTEyMTAwNTM0MzhaMBgxFjAUBgNV BAMTDTY5MmZjYmVlLWI2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRQV0ZAt0tj+lRc7tSQlWsIAHCWK5PDwJ/hyg4NFA/AA8eOyL83hEhHppGkB5n qf+tqyJ4bjGPWDp59keXbYkVyNKQk4XPu+tvnqKN3E8JwD040n5ZcEVY4sqQigqF mJD/5hma9vRBjZSyyWwI4pqtJSuV12qo5RI4Jj1367QD9hOpiDMjzOB4SE0u2OZL HVap6S6mbX5vEvZXjSL/aNJ4W+P6aeF/Dc1jd7HWSqHxXvHRnVEqlvJL+eAabWA7 WsVxSLWHZPg7N8K+nyVmkUsoNjDBYWqMN1aYiIFAUuTC66aYsS1h9VTZlShoI67+ HPyUG27Ae71ct12Y/GkJxdbRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsuig/NEr g3/TvlgvmUK8QZB1zJQwHwYDVR0jBBgwFoAURTXPHRIhtxQHwUHOa7VzqLa+hwEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzJFODEyNzlFRDAw OTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhRSHdVSE9hN1Z6cUxhLWh3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlRYUEhSSWh0eFFId1VIT2E3VnpxTGEtaHdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzJFODEyNzlFRDAwOTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhR SHdVSE9hN1Z6cUxhLWh3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACaAlyTvJrKP0QwflNXzm2agfQK3czblrnfPQl/RGVpdUOBd1eiOgvVH Vhfkx23vWmwPGJ3zoQxhdkSyfU6rXFEfvvnsmtB3CFfVp6PCcHc5ooA3Yd5jdAUP CdWYkL1hz7AVXIVMf59C9/2IL542YShqaBBRI7m15dj59LUHwUNSzpgxy6N3C0wv Y9Wlp1qVBHp/9e+hBgjdlIoT4X8ckmqL82DOdzcq0RXcQ6NTS8phpBf8x9FGP1kf ACyCfLJDol84lsnif26twbbnCETyTDnC4rLHXQXWu52GMBpko3mkOmPa03oDEnif 5QdNWR9vF88QOjqSLiFK4rAxxqCSU+U= -----END CERTIFICATE-----Generated at Wed Dec 3 17:07:01 2025 by rpki-client