This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json) Hash identifier: SSpKBnae5tLXXQafh37JGp1qeQQw7v1Hmz3zKmEZZwE= Subject key identifier: 08:4E:5E:B6:A9:5B:13:96:31:DE:64:4E:5B:1B:AC:38:1A:64:6A:68 Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft Manifest number: 36 Signing time: Tue 23 Dec 2025 06:22:31 +0000 Manifest this update: Tue 23 Dec 2025 06:22:30 +0000 Manifest next update: Tue 30 Dec 2025 06:22:30 +0000 Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: rTTdTjPD6peobys8aoiy5Fqe3eBR3Ybo4rGIZ3LAhUk=) 2: 006500928EE611F094A24C77C4F9AE02.roa (hash: DbkaOgwAriP/Mwbxrm6lRAhlKWJ1+3EkIPcc3uOwQSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Validity Not Before: Dec 23 06:22:30 2025 GMT Not After : Dec 30 06:22:30 2025 GMT Subject: CN=694a3527-2631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:08:f5:ce:2c:3f:b0:99:ee:74:37:dc:31: a7:4d:63:79:04:67:7c:5b:2d:35:54:fc:19:68:06: 1f:ec:ca:f4:83:2c:2d:c1:21:aa:16:f0:82:0b:93: fa:a4:03:96:5d:81:dd:36:f0:37:da:c2:9e:ff:72: a9:5b:b9:38:4f:18:9c:35:3e:f2:f0:c4:71:6d:9e: 63:43:0b:c6:51:e0:2f:0d:bd:aa:f3:59:12:18:84: 7a:3e:d3:b7:f4:f9:9d:a0:b5:5d:0e:d7:23:94:8e: 0b:c0:f9:1d:74:62:68:e9:e3:12:96:89:8b:4c:b7: 31:d9:c9:35:d5:3c:83:21:d8:f7:cb:8e:f8:53:6e: 7a:5e:9d:f1:f9:ce:61:d0:a2:b1:d7:9c:1a:ba:b2: 19:be:ae:e7:2a:ac:2a:00:cc:d8:68:b8:32:fa:9b: f2:a4:b6:49:ed:8d:2f:26:90:93:bd:1f:5a:a1:6e: 02:bd:33:f1:88:53:75:54:9d:dd:f3:8c:71:ea:17: e3:59:bb:47:c5:12:fd:69:6d:a7:24:02:21:ed:4a: f1:30:86:92:7c:61:ca:82:d8:25:e7:ce:26:bd:b0: cf:4e:83:f5:24:19:7f:d8:10:32:f0:f6:2c:a1:8d: 15:c2:1c:03:77:85:e1:02:9d:e9:15:7e:79:ab:82: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4E:5E:B6:A9:5B:13:96:31:DE:64:4E:5B:1B:AC:38:1A:64:6A:68 X509v3 Authority Key Identifier: keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:69:c6:30:24:18:b6:36:31:dc:1e:04:1c:3b:5a:4f:9c:ef: 97:de:48:3a:d4:12:6a:71:5f:20:69:92:a8:4f:56:45:97:6b: b2:98:4e:51:c2:02:67:3a:93:b2:1b:ee:6e:4b:6a:b9:0f:2f: ba:29:fb:0c:e6:90:64:51:13:dd:c7:5d:79:e6:c4:5b:68:68: 82:9e:2c:dc:89:09:02:df:b2:d9:68:71:aa:33:90:e6:4a:bd: 33:8a:b3:69:27:24:e7:20:7c:ef:1a:a0:ef:81:69:6c:87:56: 78:d6:e5:f1:d5:9e:20:69:1a:53:64:64:af:cd:f7:a4:67:1e: 80:b9:70:0d:da:2c:b5:d4:cd:f6:15:6d:d7:84:2c:9a:ca:62: ec:c6:12:38:64:2f:09:88:7c:3e:b0:b3:ef:63:fe:21:2c:8b: ed:af:f8:36:ee:a0:1c:7b:55:f3:48:a0:9b:91:aa:d2:31:dd: 4b:f5:6e:6e:fe:ed:17:75:81:5e:36:37:de:8e:f1:7e:bd:15: fe:4e:42:3c:fd:a4:9e:fa:03:41:f0:7d:9a:75:c6:7e:44:6b: 84:9a:1d:ed:13:72:9e:f3:3c:5f:a4:a4:3a:02:4d:2d:3f:ab: 9f:19:e4:d5:42:3e:6c:ec:e0:82:2d:56:5a:52:24:bb:f5:c2: 62:f7:aa:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODBBNDExMC8GA1UEBRMoNEM3MDhDOUVCMUE3MjA0NDMyQTc3RTI1OEMxNkNEMTgy MDdDNTU3MzAeFw0yNTEyMjMwNjIyMzBaFw0yNTEyMzAwNjIyMzBaMBgxFjAUBgNV BAMMDTY5NGEzNTI3LTI2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsVQj1ziw/sJnudDfcMadNY3kEZ3xbLTVU/BloBh/syvSDLC3BIaoW8IILk/qk A5Zdgd028Dfawp7/cqlbuThPGJw1PvLwxHFtnmNDC8ZR4C8NvarzWRIYhHo+07f0 +Z2gtV0O1yOUjgvA+R10Ymjp4xKWiYtMtzHZyTXVPIMh2PfLjvhTbnpenfH5zmHQ orHXnBq6shm+rucqrCoAzNhouDL6m/KktkntjS8mkJO9H1qhbgK9M/GIU3VUnd3z jHHqF+NZu0fFEv1pbackAiHtSvEwhpJ8YcqC2CXnzia9sM9Og/UkGX/YEDLw9iyh jRXCHAN3heECnekVfnmrghILAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCE5etqlb E5Yx3mROWxusOBpkamgwHwYDVR0jBBgwFoAUTHCMnrGnIEQyp34ljBbNGCB8VXMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MEE0Lzc4RDI2OTNFOEU1 MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVReXAzNGxqQmJOR0NCOFZY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEhDTW5yR25JRVF5cDM0bGpCYk5HQ0I4VlhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MEE0Lzc4RDI2OTNFOEU1MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVR eXAzNGxqQmJOR0NCOFZYTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF9pxjAkGLY2MdweBBw7Wk+c75feSDrUEmpxXyBpkqhPVkWXa7KYTlHC Amc6k7Ib7m5LarkPL7op+wzmkGRRE93HXXnmxFtoaIKeLNyJCQLfstlocaozkOZK vTOKs2knJOcgfO8aoO+BaWyHVnjW5fHVniBpGlNkZK/N96RnHoC5cA3aLLXUzfYV bdeELJrKYuzGEjhkLwmIfD6ws+9j/iEsi+2v+DbuoBx7VfNIoJuRqtIx3Uv1bm7+ 7Rd1gV42N96O8X69Ff5OQjz9pJ76A0HwfZp1xn5Ea4SaHe0Tcp7zPF+kpDoCTS0/ q58Z5NVCPmzs4IItVlpSJLv1wmL3qjg= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:46 2025 by rpki-client