This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: L2/4YlHFpRha85eWM3pb+UX9DhjjxbVi8u0kBiFYeA0= Subject key identifier: 65:77:7C:28:FF:BB:A3:41:68:A2:27:AB:C4:F6:DF:39:0A:8C:D4:B3 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: E8 Signing time: Fri 19 Dec 2025 04:41:29 +0000 Manifest this update: Fri 19 Dec 2025 04:41:29 +0000 Manifest next update: Fri 26 Dec 2025 04:41:29 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: 1myngcD/TlBJ6Uk0jxmJioLwcZJ2+crg3MxIKePT1E0=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=) 3: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=) 4: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=) 5: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=) 6: 9B3123BEC38C11F0A8D49A37C4F9AE02.roa (hash: Lzk2R03/ZF2ufkOlf+mVkfGkNvSjsS669eniiKj8mTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Dec 19 04:41:29 2025 GMT Not After : Dec 26 04:41:29 2025 GMT Subject: CN=6944d779-ef96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:40:30:fb:4b:01:2c:5e:88:d5:52:2b:57: 36:56:00:b3:84:79:4c:e9:2e:95:d7:dc:75:80:08: 6f:c0:1c:2a:3d:f0:2e:c0:03:c1:fe:2c:f0:4c:5e: d6:d0:fb:a4:8b:a8:e5:64:35:6b:17:65:99:16:45: 0c:4a:04:fc:89:0d:0f:7a:b0:53:65:c0:c9:38:b7: 7a:80:95:1f:e1:2a:bd:c5:8c:47:e5:ae:c0:48:49: 51:ed:95:a5:d0:45:bd:59:0d:2a:bb:66:92:cc:1c: 22:df:34:2d:36:2e:42:98:59:ec:3b:dc:9b:ba:d7: 60:87:98:3e:e1:0f:da:aa:e3:a4:48:6a:3a:5a:8b: 0d:70:b2:eb:09:8b:2e:1b:17:66:d6:d4:b0:23:42: 53:cd:71:78:a0:9f:35:95:ac:72:b4:43:97:55:d4: 07:40:bf:9e:29:e2:5a:7d:e7:b3:9d:1b:82:db:1e: eb:e9:d7:38:92:9b:0b:1b:2d:45:b8:73:e1:3b:39: a7:73:0f:25:d2:28:3a:8d:0b:00:0f:c4:e2:c6:41: 43:ee:c5:5b:cf:1b:02:82:0c:dc:41:c0:86:ec:e7: a1:45:c7:c2:eb:6c:58:70:ce:8f:20:a7:15:01:3e: 05:1d:72:a7:c3:64:66:20:b7:68:ad:84:c4:4f:1d: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:77:7C:28:FF:BB:A3:41:68:A2:27:AB:C4:F6:DF:39:0A:8C:D4:B3 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:40:eb:82:3a:0d:98:35:6a:8f:28:67:0f:ee:e9:88:dc:0e: c7:a0:1c:87:30:be:f0:cd:f3:99:b9:4f:8c:a7:ce:17:02:68: 76:48:05:8e:72:19:d3:6c:2c:63:df:49:21:73:3d:8b:09:c0: b4:ff:dd:f1:9b:6f:60:84:b8:1a:5e:25:92:06:94:61:f1:02: b6:6e:5b:63:a6:e1:88:49:e1:27:7e:c0:35:3c:46:17:60:35: e0:6f:d9:2d:80:09:56:b2:4b:88:3f:0a:e6:c2:1e:14:4c:77: e9:04:8d:b3:50:e2:45:39:79:06:93:07:1d:16:03:5a:6e:20: 14:fc:8c:a6:37:6d:5a:b0:d3:1a:20:35:3f:36:f2:c3:79:a2: 43:11:75:30:c3:61:70:d5:74:c1:46:2f:e4:da:56:9e:73:e5: 51:49:17:9b:e1:18:fd:55:90:da:e6:23:af:96:dc:ee:f2:e6: cc:ef:44:9a:c2:97:75:c7:15:25:00:48:27:0e:3c:36:2d:62: b8:9e:5b:8c:fd:44:7d:be:67:43:33:bb:12:db:2f:c0:10:76: b4:14:4a:46:34:c0:da:dc:73:47:a4:32:79:90:47:f2:17:ad: fa:a6:94:0d:89:b7:bc:dc:9b:72:11:60:1c:37:86:af:8c:9e: 55:9e:91:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMjE5MDQ0MTI5WhcNMjUxMjI2MDQ0MTI5WjAYMRYwFAYD VQQDDA02OTQ0ZDc3OS1lZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqxAMPtLASxeiNVSK1c2VgCzhHlM6S6V19x1gAhvwBwqPfAuwAPB/izwTF7W 0Puki6jlZDVrF2WZFkUMSgT8iQ0PerBTZcDJOLd6gJUf4Sq9xYxH5a7ASElR7ZWl 0EW9WQ0qu2aSzBwi3zQtNi5CmFnsO9ybutdgh5g+4Q/aquOkSGo6WosNcLLrCYsu Gxdm1tSwI0JTzXF4oJ81laxytEOXVdQHQL+eKeJafeeznRuC2x7r6dc4kpsLGy1F uHPhOzmncw8l0ig6jQsAD8TixkFD7sVbzxsCggzcQcCG7OehRcfC62xYcM6PIKcV AT4FHXKnw2RmILdorYTETx29AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV3fCj/ u6NBaKInq8T23zkKjNSzMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFQOuCOg2YNWqPKGcP7umI3A7HoByHML7wzfOZuU+Mp84XAmh2SAWO chnTbCxj30khcz2LCcC0/93xm29ghLgaXiWSBpRh8QK2bltjpuGISeEnfsA1PEYX YDXgb9ktgAlWskuIPwrmwh4UTHfpBI2zUOJFOXkGkwcdFgNabiAU/IymN21asNMa IDU/NvLDeaJDEXUww2Fw1XTBRi/k2laec+VRSReb4Rj9VZDa5iOvltzu8ubM70Sa wpd1xxUlAEgnDjw2LWK4nluM/UR9vmdDM7sS2y/AEHa0FEpGNMDa3HNHpDJ5kEfy F636ppQNibe83JtyEWAcN4avjJ5VnpGj -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:02 2025 by rpki-client