This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: SZyVnymlC1MSGmkDSnwcppx7IqDR49mtyAZzPo9qQso= Subject key identifier: 65:10:F0:A0:9D:8E:10:AA:B7:9D:5F:E0:47:8F:A2:2E:D0:98:C8:B9 Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 117C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0F19 Signing time: Thu 18 Dec 2025 18:36:23 +0000 Manifest this update: Thu 18 Dec 2025 18:36:22 +0000 Manifest next update: Thu 25 Dec 2025 18:36:22 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: O3o8VBLnxkFFhhm+HiahIi5Y/3j8dBU8CDonoAnJviU=) 2: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: dENzJEUKeZTxWU/8nd/lAkN4nDmqFnhB+bpqCZU0QcI=) 3: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 2DhSKbqHerwHAcJuXyOqA5Uvz8i+b7ElwkCYt1IMjOk=) 4: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: RJWWol/N3kpabs0RDHnKDFjohXYhNv2bTe01qDy5yFA=) 5: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: yOuWRsyltBFagKzqpGS582aWz7h2FY8ZBcuACxag5X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4476 (0x117c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Dec 18 18:36:22 2025 GMT Not After : Dec 25 18:36:22 2025 GMT Subject: CN=694449a7-44f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:46:a3:57:6c:ef:15:27:80:47:47:bc:88: e0:1b:50:a1:56:01:ee:ef:da:94:ae:5c:bd:7f:46: cd:55:e8:43:e5:4d:0e:1a:1a:8e:a4:cd:cf:6e:d9: 78:b0:34:67:d8:15:dd:ad:28:c2:9c:4d:03:55:d5: 59:af:d4:d6:71:db:1e:c8:bc:48:52:eb:28:d1:20: bc:98:03:eb:7c:e7:3d:f4:b7:e0:19:2c:62:e8:46: d4:c5:a2:d5:04:4f:49:f4:f3:cf:86:e4:fb:73:6b: 12:a3:83:2a:3d:d8:da:ea:5b:27:f6:8a:4c:5f:6f: e8:de:62:10:07:2e:0a:06:0f:08:57:95:77:da:5a: fb:39:5c:89:05:f0:5e:cc:9b:82:97:73:67:f3:ea: ab:37:c7:b3:a7:2b:70:30:90:b7:bf:ba:67:fa:0e: 47:64:66:3d:a8:59:72:a3:15:22:dc:7e:96:9e:d0: b0:b9:62:83:d0:bd:fa:90:69:5a:50:41:a4:8e:ff: ab:c8:61:d4:7b:ef:ed:3b:aa:7d:0b:12:03:39:94: 7a:fa:fc:c7:99:e0:b8:ac:4b:61:cf:2e:7c:2d:08: 24:39:b7:6a:f8:3c:cd:53:d9:21:9a:d3:d2:cf:94: e6:8a:37:72:09:dc:68:0e:24:09:38:57:72:5e:09: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:F0:A0:9D:8E:10:AA:B7:9D:5F:E0:47:8F:A2:2E:D0:98:C8:B9 X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:19:bf:91:c4:9a:da:44:52:c3:63:62:a6:3e:cb:e3:a3:54: a1:4e:46:ed:a9:ce:b1:6f:ee:59:15:9a:68:b1:fb:2e:57:f5: 04:54:ad:47:d2:a8:ac:8b:8f:c1:29:4e:2d:05:0d:7b:a1:7d: 7b:22:45:ec:33:fb:f7:1f:e9:91:72:ae:13:25:f5:85:7c:4b: e6:2b:45:b0:4e:62:67:70:20:de:01:1a:96:5c:68:cb:f4:2e: 1e:c8:70:b6:48:ae:cf:84:e4:21:87:ca:29:a8:e0:a6:e7:f8: 3a:ad:d1:1b:ed:54:4f:eb:b3:2d:b9:90:8a:03:63:d5:01:07: 6f:5a:d5:9b:8d:21:a4:0f:2e:92:a5:f9:1b:be:fe:b6:d1:8a: 73:9e:ca:e5:f9:6d:51:d8:a9:11:2e:7f:56:55:82:17:7c:29: 1f:e1:36:dc:fb:9d:7d:57:f4:23:34:f6:74:23:0d:b1:a4:41: 1a:4b:b7:5e:2f:d1:85:ac:31:3d:c5:ae:b5:fd:c8:3c:a6:55: 5d:7b:47:a2:c2:d4:e1:73:48:28:1d:26:29:74:60:5d:79:31: c4:5c:68:3f:59:18:cc:3b:d2:0a:b9:fe:89:97:d3:04:57:d4: cb:8a:5a:ba:c6:f7:64:02:b1:a9:9b:99:3a:a9:5d:e3:ac:e3: b2:fa:3e:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjUxMjE4MTgzNjIyWhcNMjUxMjI1MTgzNjIyWjAYMRYwFAYD VQQDDA02OTQ0NDlhNy00NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyFGo1ds7xUngEdHvIjgG1ChVgHu79qUrly9f0bNVehD5U0OGhqOpM3Pbtl4 sDRn2BXdrSjCnE0DVdVZr9TWcdseyLxIUuso0SC8mAPrfOc99LfgGSxi6EbUxaLV BE9J9PPPhuT7c2sSo4MqPdja6lsn9opMX2/o3mIQBy4KBg8IV5V32lr7OVyJBfBe zJuCl3Nn8+qrN8ezpytwMJC3v7pn+g5HZGY9qFlyoxUi3H6WntCwuWKD0L36kGla UEGkjv+ryGHUe+/tO6p9CxIDOZR6+vzHmeC4rEthzy58LQgkObdq+DzNU9khmtPS z5TmijdyCdxoDiQJOFdyXgmPfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUQ8KCd jhCqt51f4EePoi7QmMi5MB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUGb+RxJraRFLDY2KmPsvjo1ShTkbtqc6xb+5ZFZposfsuV/UEVK1H 0qisi4/BKU4tBQ17oX17IkXsM/v3H+mRcq4TJfWFfEvmK0WwTmJncCDeARqWXGjL 9C4eyHC2SK7PhOQhh8opqOCm5/g6rdEb7VRP67MtuZCKA2PVAQdvWtWbjSGkDy6S pfkbvv620Ypznsrl+W1R2KkRLn9WVYIXfCkf4Tbc+519V/QjNPZ0Iw2xpEEaS7de L9GFrDE9xa61/cg8plVde0eiwtThc0goHSYpdGBdeTHEXGg/WRjMO9IKuf6Jl9ME V9TLilq6xvdkArGpm5k6qV3jrOOy+j7C -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:35 2025 by rpki-client