This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json) Hash identifier: byaik1zSismtV3y1d6SuOiT/6z1KqYXrjbz3WAUdl3g= Subject key identifier: 41:FF:A5:37:5E:59:55:D1:C3:1A:0A:AB:17:E7:9B:99:52:AC:82:B6 Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft Manifest number: 93 Signing time: Wed 03 Dec 2025 04:48:55 +0000 Manifest this update: Wed 03 Dec 2025 04:48:55 +0000 Manifest next update: Wed 10 Dec 2025 04:48:55 +0000 Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: BMZKz0v37lE3Z2XOS2rb2gr+B3KoJvQ7PgqJ0T5kuMI=) 2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Validity Not Before: Dec 3 04:48:55 2025 GMT Not After : Dec 10 04:48:55 2025 GMT Subject: CN=692fc137-f4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1b:83:14:d5:a7:34:56:c8:2a:0a:92:98:81: 8b:4c:cd:f2:56:33:8c:78:b9:09:ef:29:79:0a:92: e7:cb:96:65:29:40:e4:c5:6b:d0:8c:46:b7:d0:83: 97:32:ae:f1:04:44:78:a4:6d:d5:f7:68:0e:f8:68: 71:c1:4f:af:28:44:f7:09:5f:0f:f1:21:1b:81:f1: 43:89:b5:69:5f:b4:2c:7f:19:6e:bf:69:78:c2:e6: b0:77:07:eb:51:4d:ae:39:4e:88:90:f4:99:7c:82: 7f:40:d0:b7:5b:45:bf:f7:0b:17:b4:6b:2b:ed:53: 2e:fc:b1:f3:44:44:5e:dc:4c:03:15:a5:a3:98:f8: 61:6e:b5:41:2e:23:61:88:3e:ef:7e:a3:91:32:53: 64:75:b0:4b:3b:88:9c:e1:b5:fd:27:f0:d6:5b:ab: 33:92:2a:fe:cf:ce:54:65:89:5c:92:d3:0b:0c:db: 6a:f6:0d:d8:f6:9d:c8:ca:06:32:c7:3c:d4:ce:a8: 78:15:ad:80:33:14:0f:73:13:74:21:37:97:cd:14: b5:e1:d0:c8:de:b6:0f:bd:ab:32:ee:2d:47:e0:cd: d2:fa:9d:61:bb:8c:b3:d1:3a:97:60:96:52:2a:f5: 3a:fb:c5:1a:a7:dd:fb:f3:c9:6a:a9:35:3b:15:2c: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FF:A5:37:5E:59:55:D1:C3:1A:0A:AB:17:E7:9B:99:52:AC:82:B6 X509v3 Authority Key Identifier: keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:9a:85:aa:1b:3e:e6:a6:ed:8c:bf:0a:7c:fc:a8:4f:5c:74: 40:85:1b:61:71:13:48:75:a5:c7:d8:ee:62:04:e7:89:23:ec: e1:4e:d9:11:be:a2:5c:45:ce:cd:2b:4c:2a:0f:a7:94:a2:cd: 65:90:19:96:84:0b:37:64:ff:cf:73:ed:00:3e:4b:a8:14:9e: 1e:0c:0a:f1:a9:bc:a5:e1:5a:19:2a:98:06:30:d1:f2:9a:61: d6:d5:a1:d9:d5:10:39:32:77:83:e3:42:82:f4:42:1b:29:ad: de:1c:d0:67:b2:e7:e2:26:54:cd:0c:5b:09:05:0a:c4:33:3a: ce:1c:fe:52:c1:77:10:0b:09:37:6d:46:f1:1d:38:48:a5:9c: f7:17:7c:14:d9:59:07:9f:f1:b1:b4:2a:6a:80:b4:9e:da:50: 66:09:f4:2a:b0:5e:15:0a:e2:45:84:9d:1f:c3:0e:d0:d9:77: 9c:0f:da:d1:03:ee:cf:31:d8:ff:76:6a:79:28:7c:2e:33:7b: 20:d8:23:05:7f:97:c1:9e:37:70:0b:8a:52:08:5d:80:f1:de: cc:ac:0b:6f:1b:71:7a:9e:30:20:1d:a4:d7:e9:08:c0:22:97: 10:c5:aa:0d:3a:22:64:48:54:86:d6:5b:89:e6:d6:d0:aa:c9: e4:ae:1f:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMzcxMTAvBgNVBAUTKDRFNjhCMDQ4REQzRERCQTVGNDc4RjFGRDI4OEE4NjE4 QkE5RkFCQUEwHhcNMjUxMjAzMDQ0ODU1WhcNMjUxMjEwMDQ0ODU1WjAYMRYwFAYD VQQDEw02OTJmYzEzNy1mNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BuDFNWnNFbIKgqSmIGLTM3yVjOMeLkJ7yl5CpLny5ZlKUDkxWvQjEa30IOX Mq7xBER4pG3V92gO+GhxwU+vKET3CV8P8SEbgfFDibVpX7Qsfxluv2l4wuawdwfr UU2uOU6IkPSZfIJ/QNC3W0W/9wsXtGsr7VMu/LHzRERe3EwDFaWjmPhhbrVBLiNh iD7vfqORMlNkdbBLO4ic4bX9J/DWW6szkir+z85UZYlcktMLDNtq9g3Y9p3IygYy xzzUzqh4Fa2AMxQPcxN0ITeXzRS14dDI3rYPvasy7i1H4M3S+p1hu4yz0TqXYJZS KvU6+8Uap93788lqqTU7FSw5nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH/pTde WVXRwxoKqxfnm5lSrIK2MB8GA1UdIwQYMBaAFE5osEjdPdul9Hjx/SiKhhi6n6uq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy8zQ0I3NzlFMEY1 RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2WDBlUEg5S0lxR0dMcWZx Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIzNy8zQ0I3NzlFMEY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2 WDBlUEg5S0lxR0dMcWZxNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDmoWqGz7mpu2Mvwp8/KhPXHRAhRthcRNIdaXH2O5iBOeJI+zhTtkR vqJcRc7NK0wqD6eUos1lkBmWhAs3ZP/Pc+0APkuoFJ4eDArxqbyl4VoZKpgGMNHy mmHW1aHZ1RA5MneD40KC9EIbKa3eHNBnsufiJlTNDFsJBQrEMzrOHP5SwXcQCwk3 bUbxHThIpZz3F3wU2VkHn/GxtCpqgLSe2lBmCfQqsF4VCuJFhJ0fww7Q2XecD9rR A+7PMdj/dmp5KHwuM3sg2CMFf5fBnjdwC4pSCF2A8d7MrAtvG3F6njAgHaTX6QjA IpcQxaoNOiJkSFSG1luJ5tbQqsnkrh8c -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:44 2025 by rpki-client