This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: OC6HAZFqn6QuxL0FXARxcjeBMAGgH4xBMkoF7jr0rDE= Subject key identifier: 91:CC:87:11:2A:45:22:C7:75:2B:0D:2D:CE:AC:04:DF:62:0D:D5:84 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 0598 Signing time: Mon 08 Dec 2025 21:53:35 +0000 Manifest this update: Mon 08 Dec 2025 21:53:35 +0000 Manifest next update: Mon 15 Dec 2025 21:53:35 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: ep4L59TTcHN3fawnWKdMs+x79jF1YOSOFD4tarG1G4I=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Dec 8 21:53:35 2025 GMT Not After : Dec 15 21:53:35 2025 GMT Subject: CN=693748df-ca5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:4c:7a:61:37:a2:21:13:5e:6b:10:1c:9e: 8d:39:ae:e1:64:a3:72:36:bd:db:3d:f8:f3:5e:b6: da:6c:6b:6a:7c:98:43:2d:52:04:48:4f:c0:4b:91: 77:e7:cc:94:bb:da:63:39:57:ae:50:20:23:21:f9: 3b:a6:09:56:ae:8c:1e:96:92:9b:d1:33:e6:4a:e6: b6:7e:82:2e:3e:0d:a0:8d:58:30:24:60:c3:3d:31: af:05:6e:39:39:c0:26:4b:6b:ad:bb:2f:d6:37:b1: 96:9d:57:8d:6a:84:d4:ce:27:49:01:9f:c6:9f:c0: 78:dd:42:06:88:03:a2:8e:d7:57:67:65:4f:90:e0: 32:e3:ca:6c:99:01:5c:f7:f1:dd:f8:13:31:ce:ce: de:b7:75:bc:54:1f:a3:84:03:db:14:f4:ec:33:a6: 76:fd:34:3c:ae:b7:58:0e:00:7c:59:13:ed:c2:34: de:9c:63:f2:cf:89:ad:8c:b7:a1:be:d5:a0:77:c2: 2c:c4:b0:35:76:3c:6a:9e:33:09:92:8f:9e:64:1a: ca:c0:d7:1c:af:fc:de:3c:4f:68:82:ed:a7:6f:77: 13:ce:ec:79:ee:2b:5c:1f:26:5e:28:7d:75:04:c4: ba:39:e5:bf:95:30:97:27:8e:8d:84:14:e9:bb:a4: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CC:87:11:2A:45:22:C7:75:2B:0D:2D:CE:AC:04:DF:62:0D:D5:84 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a0:0a:dc:5c:a8:82:3b:21:ea:53:6f:09:1d:0a:18:05:dc: 06:ad:3d:80:af:b6:ba:a4:85:a4:05:8a:26:fd:77:16:ff:bc: 2e:db:b0:05:dd:19:c4:b0:bd:f3:01:1d:55:3a:64:e7:90:ae: e8:f7:6f:d5:33:81:a9:7d:01:62:a4:1a:d9:55:a9:c7:a4:38: ae:51:63:ea:66:ca:5b:2d:1c:e4:0e:e3:28:4f:5d:6e:58:c6: 18:ba:e3:c7:30:51:dd:5a:82:ef:58:05:25:4d:00:05:f9:bb: 7f:67:c6:b4:3e:d6:f3:7a:4d:1b:fb:5e:29:86:d5:5b:26:37: 6d:46:0e:c9:c5:3b:40:1f:a0:90:cf:ff:2e:02:83:85:2c:7c: a5:41:7d:1e:19:92:b5:36:87:a4:2c:7a:ca:a3:7c:ef:fb:de: ec:52:96:3e:5a:25:c0:0b:41:77:dc:f9:e2:7e:5e:24:f5:10: 1d:ee:96:da:d9:57:2a:c8:66:a1:3a:f2:86:e1:13:fd:e2:00: fd:ba:5d:c6:f3:9e:9e:bd:ff:fa:3b:f3:67:ad:84:e2:99:af: 49:63:e2:19:d5:ef:93:6e:31:16:5c:34:55:e8:76:ca:9c:9c: cb:3c:4d:1d:34:e8:5e:98:3f:e4:cf:84:f9:b6:5e:cd:9b:e8: 86:f4:77:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUxMjA4MjE1MzM1WhcNMjUxMjE1MjE1MzM1WjAYMRYwFAYD VQQDEw02OTM3NDhkZi1jYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMtMemE3oiETXmsQHJ6NOa7hZKNyNr3bPfjzXrbabGtqfJhDLVIESE/AS5F3 58yUu9pjOVeuUCAjIfk7pglWrowelpKb0TPmSua2foIuPg2gjVgwJGDDPTGvBW45 OcAmS2utuy/WN7GWnVeNaoTUzidJAZ/Gn8B43UIGiAOijtdXZ2VPkOAy48psmQFc 9/Hd+BMxzs7et3W8VB+jhAPbFPTsM6Z2/TQ8rrdYDgB8WRPtwjTenGPyz4mtjLeh vtWgd8IsxLA1djxqnjMJko+eZBrKwNccr/zePE9ogu2nb3cTzux57itcHyZeKH11 BMS6OeW/lTCXJ46NhBTpu6Sz1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHMhxEq RSLHdSsNLc6sBN9iDdWEMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8oArcXKiCOyHqU28JHQoYBdwGrT2Ar7a6pIWkBYom/XcW/7wu27AF 3RnEsL3zAR1VOmTnkK7o92/VM4GpfQFipBrZVanHpDiuUWPqZspbLRzkDuMoT11u WMYYuuPHMFHdWoLvWAUlTQAF+bt/Z8a0Ptbzek0b+14phtVbJjdtRg7JxTtAH6CQ z/8uAoOFLHylQX0eGZK1NoekLHrKo3zv+97sUpY+WiXAC0F33Pnifl4k9RAd7pba 2VcqyGahOvKG4RP94gD9ul3G856evf/6O/NnrYTima9JY+IZ1e+TbjEWXDRV6HbK nJzLPE0dNOhemD/kz4T5tl7Nm+iG9Hew -----END CERTIFICATE-----Generated at Wed Dec 10 17:43:12 2025 by rpki-client