This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft File: TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft (raw, json) Hash identifier: XKqX/4Fsu/ltWuQ6NkIfKvKKSA1A1H9GHmd6fjJdKj8= Subject key identifier: 5A:5C:30:E1:0E:30:2E:66:C7:CD:36:50:B1:1D:B9:62:41:0A:D4:7B Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft Manifest number: 3C Signing time: Tue 23 Dec 2025 06:18:52 +0000 Manifest this update: Tue 23 Dec 2025 06:18:52 +0000 Manifest next update: Tue 30 Dec 2025 06:18:52 +0000 Files and hashes: 1: TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl (hash: VOJV07dNVIfNExb//4bpOFuFufmyvaXjaifMPGhNC5I=) 2: 24C9831E83E611F0AF39BE57C4F9AE02.roa (hash: eoWky/ushFlFPOAMp9hbU/1xEcSwmCQfGQqBxUKHPn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Validity Not Before: Dec 23 06:18:52 2025 GMT Not After : Dec 30 06:18:52 2025 GMT Subject: CN=694a344c-a2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:6a:9e:33:e9:d7:27:51:f1:2e:f7:d8:11: a1:d4:3a:70:f2:5d:00:de:e4:c1:9a:68:ae:8c:7b: 8d:a6:7b:e2:8a:4a:29:bb:66:7e:01:f8:e0:a8:72: c3:1a:a9:28:24:04:d5:59:83:99:f9:82:b1:54:e3: a0:08:32:ec:45:0b:de:95:41:2a:dd:6c:4f:13:e9: 7d:5f:1e:fa:14:7c:67:f0:39:b4:3a:31:d7:c1:fc: 8e:f8:e8:64:d1:6d:b2:b8:18:30:fb:87:ff:40:4a: 69:06:14:8f:db:99:dd:4f:5d:cf:dc:13:77:6d:6e: 12:82:5b:b7:9c:42:1c:bb:c7:63:48:11:d7:7c:58: ac:99:06:0f:90:33:41:82:07:84:e3:5f:60:5b:48: ef:07:b6:4f:89:81:12:3d:7f:ba:6d:22:10:b4:ac: 2c:8f:5b:55:d8:f2:22:3b:f4:7e:75:f2:2a:bd:ce: 77:76:9f:13:53:9d:12:f6:ad:19:77:d3:fc:b5:1b: 9f:d3:ab:bd:56:ae:f1:59:a9:16:6a:03:fe:42:32: 9d:09:ae:05:31:95:31:fb:ce:44:18:fa:b1:f6:0e: c4:66:d2:e1:aa:ee:bb:d6:cd:cd:a4:2d:42:82:e0: c9:67:ab:65:59:dd:f6:b8:92:28:c8:e3:e9:6a:be: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5C:30:E1:0E:30:2E:66:C7:CD:36:50:B1:1D:B9:62:41:0A:D4:7B X509v3 Authority Key Identifier: keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:de:52:4c:fd:b7:08:6c:f8:a8:ac:8a:f8:bc:49:74:93:10: df:e4:23:ce:2f:fb:ff:93:f8:12:77:f5:92:f7:24:04:17:17: e6:86:c7:19:aa:3e:cc:06:8f:b2:e5:8f:d7:9c:31:de:18:d0: 87:40:d7:45:6b:6a:2c:85:52:b8:e0:3b:82:ef:8d:af:95:a0: bb:2d:8b:a8:ca:bb:53:a5:6d:8c:91:c7:8e:1b:75:8a:74:61: 7b:e0:d6:2d:3b:54:a0:cd:27:d9:37:77:ed:b8:50:78:6b:ce: 8e:ee:43:59:0f:69:dd:9e:62:34:38:d0:e1:05:e0:de:05:9f: 5d:c9:bf:5f:01:bc:ef:3e:4b:d2:1b:62:70:25:3e:9c:fd:19: 7e:20:d6:e8:f2:30:2c:fc:e8:23:f8:46:53:0d:fc:93:25:67: 6d:29:3c:6d:90:89:6c:90:09:6e:df:0f:e6:17:ef:b1:ee:f8: f1:5f:13:31:04:d0:ea:4f:a5:9d:20:f5:18:78:8d:7d:c5:f5: d8:f6:89:3e:a2:a0:0c:9c:5c:28:5e:67:cd:ed:63:06:09:5c: 13:fb:92:33:c9:9e:78:f2:05:9c:97:f7:a2:3c:b3:41:de:68: 59:a5:de:bd:3e:a1:55:af:d0:24:ba:cf:89:e5:0b:03:75:55: f5:00:c4:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDZGRTExMC8GA1UEBRMoNEVEMDg4N0JEMzA0RTA0Qzk4RkJBNTNCOUI5QjAyQkRF NDM4OTcwMzAeFw0yNTEyMjMwNjE4NTJaFw0yNTEyMzAwNjE4NTJaMBgxFjAUBgNV BAMMDTY5NGEzNDRjLWEyZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWdWqeM+nXJ1HxLvfYEaHUOnDyXQDe5MGaaK6Me42me+KKSim7Zn4B+OCocsMa qSgkBNVZg5n5grFU46AIMuxFC96VQSrdbE8T6X1fHvoUfGfwObQ6MdfB/I746GTR bbK4GDD7h/9ASmkGFI/bmd1PXc/cE3dtbhKCW7ecQhy7x2NIEdd8WKyZBg+QM0GC B4TjX2BbSO8Htk+JgRI9f7ptIhC0rCyPW1XY8iI79H518iq9znd2nxNTnRL2rRl3 0/y1G5/Tq71WrvFZqRZqA/5CMp0JrgUxlTH7zkQY+rH2DsRm0uGq7rvWzc2kLUKC 4Mlnq2VZ3fa4kijI4+lqvh33AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWlww4Q4w LmbHzTZQsR25YkEK1HswHwYDVR0jBBgwFoAUTtCIe9ME4EyY+6U7m5sCveQ4lwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NkZFLzlCNjU2RjhFODNF NTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5WS02VTdtNXNDdmVRNGx3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHRDSWU5TUU0RXlZLTZVN201c0N2ZVE0bHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NkZFLzlCNjU2RjhFODNFNTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5 WS02VTdtNXNDdmVRNGx3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFPeUkz9twhs+Kisivi8SXSTEN/kI84v+/+T+BJ39ZL3JAQXF+aGxxmq PswGj7Llj9ecMd4Y0IdA10VraiyFUrjgO4Lvja+VoLsti6jKu1OlbYyRx44bdYp0 YXvg1i07VKDNJ9k3d+24UHhrzo7uQ1kPad2eYjQ40OEF4N4Fn13Jv18BvO8+S9Ib YnAlPpz9GX4g1ujyMCz86CP4RlMN/JMlZ20pPG2QiWyQCW7fD+YX77Hu+PFfEzEE 0OpPpZ0g9Rh4jX3F9dj2iT6ioAycXCheZ83tYwYJXBP7kjPJnnjyBZyX96I8s0He aFml3r0+oVWv0CS6z4nlCwN1VfUAxLg= -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:20 2025 by rpki-client