This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: dWt7/g+Om0wzW4IttAMWcKJAYCTYw1KYPxg/hEfW8tY= Subject key identifier: E2:45:D8:07:74:3E:14:3F:AA:A3:ED:7C:3F:6E:C5:7E:65:C6:5A:12 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0CD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0CCC Signing time: Mon 22 Dec 2025 17:46:28 +0000 Manifest this update: Mon 22 Dec 2025 17:46:27 +0000 Manifest next update: Mon 29 Dec 2025 17:46:27 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: 1d7lexN9r4aUMLsg74P3nUNTBl1M+jHgleSmXSWaFTk=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Dec 22 17:46:27 2025 GMT Not After : Dec 29 17:46:27 2025 GMT Subject: CN=694983f4-a2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:00:8b:7d:a5:9f:ce:83:01:e0:3a:28:5d: 50:dd:e3:0b:62:7d:b7:25:ed:ae:ef:2c:2f:12:ea: 67:b4:bc:31:97:c4:4a:30:34:85:20:69:a6:ac:17: 70:2c:90:76:7c:97:62:be:65:c3:40:02:bf:dd:4c: 3b:2a:ae:ec:72:c5:15:49:9c:c2:03:62:83:19:a8: e4:9a:b4:7b:ce:73:63:ff:66:62:66:0a:42:f2:7c: cf:44:b7:69:e4:06:ed:f5:b5:f1:9f:c1:25:e1:4d: 12:13:32:37:70:ed:c5:56:d2:8c:2a:17:d1:78:55: cf:15:2d:0c:de:0b:67:96:13:ea:54:96:af:2c:80: 0b:12:ea:8f:3a:02:be:2b:67:aa:06:c6:bc:0f:63: af:44:86:69:c3:8c:67:02:f3:cc:47:a3:64:22:75: 7c:11:85:08:4c:3d:0c:f5:c3:30:ca:ae:48:f0:80: 0b:25:78:3d:0e:e6:ea:60:8d:0e:5f:a7:ff:90:e0: 82:34:7c:f6:ae:4e:05:52:a0:1d:ec:20:f7:86:70: 71:5a:15:8c:c8:90:3d:bc:e3:db:3f:a4:09:a5:e3: 8d:09:85:61:23:ea:7b:77:f9:9b:79:87:d2:33:59: dd:c4:b3:4a:e6:31:f3:1d:ac:57:3b:e3:fb:95:5b: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:45:D8:07:74:3E:14:3F:AA:A3:ED:7C:3F:6E:C5:7E:65:C6:5A:12 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e0:5a:80:55:9a:60:7a:93:76:71:80:79:96:fb:65:ca:4c: 3c:c5:ba:bb:0b:49:4c:d2:77:d9:cf:f4:30:d9:19:77:8a:a4: 3b:22:d6:01:b8:1d:a6:97:22:53:95:2f:85:7e:57:71:2d:59: 74:50:94:c1:26:5e:06:08:af:36:f4:9b:04:0e:8a:32:e8:3b: 0e:26:18:5a:f5:bc:27:6a:7b:9b:8d:7e:d6:fe:25:b7:fa:86: 98:36:1e:91:0a:d2:c8:93:ec:e0:2b:8d:27:c0:f1:24:73:f5: e8:bf:98:99:e5:9b:88:e7:23:82:6d:cf:73:ba:31:f6:86:54: 26:ba:e5:1a:e5:3d:83:ae:82:84:8c:87:6a:34:b3:74:77:83: c7:74:b3:bd:d7:1b:b0:15:68:16:4d:ad:a9:ca:cf:7c:f7:9d: b1:c8:62:f8:fa:56:b9:98:d2:8c:a1:4a:21:ef:0e:c5:5b:11: a5:1f:ca:8b:ed:5c:9a:6c:d5:10:21:28:b5:64:fd:23:ae:a7: d6:f1:d3:e6:1a:15:0b:e6:a3:44:ea:58:5c:57:89:37:f4:6a: 2b:c3:7b:34:c0:e3:6f:b2:b9:6f:de:3b:4f:f1:be:20:2a:41: 2b:94:f4:8d:f2:7c:70:87:e6:fe:92:5c:3a:b8:c6:3a:ca:ae: 31:33:8d:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUxMjIyMTc0NjI3WhcNMjUxMjI5MTc0NjI3WjAYMRYwFAYD VQQDDA02OTQ5ODNmNC1hMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjTEAi32ln86DAeA6KF1Q3eMLYn23Je2u7ywvEupntLwxl8RKMDSFIGmmrBdw LJB2fJdivmXDQAK/3Uw7Kq7scsUVSZzCA2KDGajkmrR7znNj/2ZiZgpC8nzPRLdp 5Abt9bXxn8El4U0SEzI3cO3FVtKMKhfReFXPFS0M3gtnlhPqVJavLIALEuqPOgK+ K2eqBsa8D2OvRIZpw4xnAvPMR6NkInV8EYUITD0M9cMwyq5I8IALJXg9DubqYI0O X6f/kOCCNHz2rk4FUqAd7CD3hnBxWhWMyJA9vOPbP6QJpeONCYVhI+p7d/mbeYfS M1ndxLNK5jHzHaxXO+P7lVstGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJF2Ad0 PhQ/qqPtfD9uxX5lxloSMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd4FqAVZpgepN2cYB5lvtlykw8xbq7C0lM0nfZz/Qw2Rl3iqQ7ItYB uB2mlyJTlS+FfldxLVl0UJTBJl4GCK829JsEDooy6DsOJhha9bwnanubjX7W/iW3 +oaYNh6RCtLIk+zgK40nwPEkc/Xov5iZ5ZuI5yOCbc9zujH2hlQmuuUa5T2DroKE jIdqNLN0d4PHdLO91xuwFWgWTa2pys98952xyGL4+la5mNKMoUoh7w7FWxGlH8qL 7VyabNUQISi1ZP0jrqfW8dPmGhUL5qNE6lhcV4k39Gorw3s0wONvsrlv3jtP8b4g KkErlPSN8nxwh+b+klw6uMY6yq4xM42U -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:32 2025 by rpki-client