This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: DpxcBCdpq7jeVUiVcNbGytPdltjr5KADHDYofQawYMU= Subject key identifier: 2B:04:FE:98:E1:C4:CA:FF:87:3B:77:B2:D3:D0:DE:AF:72:3C:A7:C2 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 0A1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 0A17 Signing time: Sat 06 Dec 2025 19:03:29 +0000 Manifest this update: Sat 06 Dec 2025 19:03:28 +0000 Manifest next update: Sat 13 Dec 2025 19:03:28 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: /wO/HZXxovD4DoANHkXmwxUV+Bc5c0nvbM04dzuMOU0=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: Uf8LYTZNddjyS9MPn91LjVgsJA/mrFvn5q0EDwmn+i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2589 (0xa1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Dec 6 19:03:28 2025 GMT Not After : Dec 13 19:03:28 2025 GMT Subject: CN=69347e01-7f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:c1:74:3b:7f:bc:98:2d:d9:90:f1:8c:b5: ca:a0:09:ff:a8:af:77:0e:00:dd:8e:66:e5:e6:bb: 86:cb:2b:dd:3d:b1:5c:1f:15:c3:31:88:d5:30:db: 26:c8:aa:09:a9:15:55:8f:b1:45:7d:99:cd:13:bd: 92:60:7c:7e:92:82:7a:0c:61:a2:a1:99:ba:c5:e9: 21:e0:bb:ab:a2:20:63:58:0e:f4:eb:19:38:8e:30: f4:74:e6:e5:b3:d2:58:b1:bd:14:ba:6d:58:c5:70: b9:3c:26:f9:5d:3c:3d:ad:4a:08:45:b7:ae:c4:f4: 11:2a:6b:2d:ec:ef:f2:73:d1:c4:29:96:04:00:27: b2:f5:50:76:1f:77:37:c0:0e:43:87:1b:0c:6d:eb: 98:50:c8:8e:30:79:ce:af:08:39:7e:40:0c:01:87: 56:73:d1:f7:8c:e0:22:6b:e0:55:fb:a0:7a:20:a4: d3:6a:ac:14:99:98:10:91:f5:54:7c:4f:e3:1b:d8: 3a:15:3a:c0:e2:b6:22:98:28:3a:9a:b7:7a:4f:72: 54:cf:78:b3:07:4b:46:52:c4:3c:d8:c1:bb:e5:3c: e7:74:29:57:fc:d3:73:ba:a3:9b:a1:0c:51:72:7a: 10:ca:30:ae:98:10:e0:b0:9b:8c:6d:e1:1d:2b:53: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:FE:98:E1:C4:CA:FF:87:3B:77:B2:D3:D0:DE:AF:72:3C:A7:C2 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f6:c6:da:1e:62:5c:a7:22:c6:26:78:f8:78:10:34:87:a6: c6:c3:42:b6:f1:9c:70:57:96:32:0b:08:a1:be:81:c4:3b:ac: 0f:1d:08:fa:c0:86:44:cd:d7:b6:0b:3d:27:5b:25:24:b1:8f: 47:35:3d:2b:f7:23:78:de:93:50:fa:9c:e2:f2:c4:0f:6d:00: 3f:d1:92:fb:65:de:fd:cb:b7:26:97:60:bf:8c:78:1b:c0:4b: 2a:1f:dd:4f:8d:b1:62:fa:1e:7b:a4:71:ad:b7:8b:39:b6:db: 54:05:6e:e0:7a:40:f6:d0:b8:3e:28:c2:04:03:55:53:e0:1f: 5c:ef:0e:58:03:d9:3c:5c:6c:f1:93:a7:52:ca:3a:29:bb:15: 71:be:a4:b9:1a:e6:58:24:64:36:7f:09:cb:15:81:99:3f:1d: 17:81:d4:e1:71:28:ad:6e:3a:80:70:fc:97:81:d7:e4:e1:fa: 15:e6:e0:57:e1:c6:d9:ce:df:a2:ef:60:b8:16:57:8e:05:01: 4a:15:77:53:7d:92:02:d0:57:39:45:39:19:fd:40:2b:be:c3: db:e2:68:b8:ac:17:aa:1e:60:9d:b5:be:10:18:d9:29:1d:a6: e9:12:8b:86:e5:7d:e8:58:3f:57:0b:55:85:4c:5d:cb:ae:e5: d3:e5:a1:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjUxMjA2MTkwMzI4WhcNMjUxMjEzMTkwMzI4WjAYMRYwFAYD VQQDEw02OTM0N2UwMS03ZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDjBdDt/vJgt2ZDxjLXKoAn/qK93DgDdjmbl5ruGyyvdPbFcHxXDMYjVMNsm yKoJqRVVj7FFfZnNE72SYHx+koJ6DGGioZm6xekh4LuroiBjWA706xk4jjD0dObl s9JYsb0Uum1YxXC5PCb5XTw9rUoIRbeuxPQRKmst7O/yc9HEKZYEACey9VB2H3c3 wA5DhxsMbeuYUMiOMHnOrwg5fkAMAYdWc9H3jOAia+BV+6B6IKTTaqwUmZgQkfVU fE/jG9g6FTrA4rYimCg6mrd6T3JUz3izB0tGUsQ82MG75TzndClX/NNzuqOboQxR cnoQyjCumBDgsJuMbeEdK1M2XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsE/pjh xMr/hzt3stPQ3q9yPKfCMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS9sbaHmJcpyLGJnj4eBA0h6bGw0K28ZxwV5YyCwihvoHEO6wPHQj6 wIZEzde2Cz0nWyUksY9HNT0r9yN43pNQ+pzi8sQPbQA/0ZL7Zd79y7cml2C/jHgb wEsqH91PjbFi+h57pHGtt4s5tttUBW7gekD20Lg+KMIEA1VT4B9c7w5YA9k8XGzx k6dSyjopuxVxvqS5GuZYJGQ2fwnLFYGZPx0XgdThcSitbjqAcPyXgdfk4foV5uBX 4cbZzt+i72C4FleOBQFKFXdTfZIC0Fc5RTkZ/UArvsPb4mi4rBeqHmCdtb4QGNkp HabpEouG5X3oWD9XC1WFTF3LruXT5aG4 -----END CERTIFICATE-----Generated at Sun Dec 7 19:18:04 2025 by rpki-client