This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: O4kCGwtx93114wS7ovFJFFM+bY8FmAg8PqhtngWnCcQ= Subject key identifier: 8F:AF:04:0C:4F:ED:5A:3A:AF:AD:EF:F1:E2:F1:D1:4B:58:73:10:70 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1FBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F97 Signing time: Sat 20 Dec 2025 15:50:06 +0000 Manifest this update: Sat 20 Dec 2025 15:50:05 +0000 Manifest next update: Sat 27 Dec 2025 15:50:05 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: iEt4YVljbwcugqtajxrxofJcSo3lLy+8WMYZQI93rXY=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8127 (0x1fbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Dec 20 15:50:05 2025 GMT Not After : Dec 27 15:50:05 2025 GMT Subject: CN=6946c5ae-0e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:a1:f4:26:05:bc:a7:35:19:5d:e6:10:0e: bf:e6:b9:a8:ed:36:bb:5e:17:ec:4c:2b:23:7d:97: a1:99:6d:a7:5f:88:71:59:51:02:95:f2:37:63:15: ae:97:5f:6a:01:91:fd:0d:94:36:df:f8:7e:a0:55: 5f:7f:0c:af:13:40:4f:32:af:65:25:e2:0f:47:18: 8d:8f:2a:2e:bb:62:07:c4:b8:04:36:c5:12:42:b2: 32:fc:d8:35:2b:53:67:a0:77:a9:cb:28:43:23:40: 48:5e:aa:3a:2a:55:3f:35:25:84:69:00:65:82:c0: 6d:e5:63:3f:0f:02:42:63:1f:70:e5:89:a6:91:6d: 6c:ac:a6:76:56:9b:39:a4:30:f3:63:74:d1:52:61: 8c:e5:a3:c8:5e:da:ee:0f:8c:a6:49:d2:1e:3e:94: fc:3e:c0:1b:b6:59:ea:d1:0c:47:1c:55:b3:dd:91: 44:c5:c1:85:17:fa:a8:7a:8f:d3:9c:c2:73:35:48: 2f:45:7e:31:38:83:a3:60:cf:54:41:60:cf:17:73: cc:47:7a:85:c0:9b:38:4d:da:d9:db:6b:b9:42:ce: 5f:24:7b:f7:36:5a:f6:12:b7:78:02:38:c2:c5:6b: 49:89:cc:69:27:9e:47:4e:56:1a:24:42:1c:9d:80: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AF:04:0C:4F:ED:5A:3A:AF:AD:EF:F1:E2:F1:D1:4B:58:73:10:70 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:41:9b:c8:fd:2f:31:76:9e:58:e9:6c:84:74:a1:e7:40:e7: cf:30:fb:dc:4d:ac:c9:67:e6:bc:d4:7e:d6:a6:b6:d6:5b:d9: 57:80:34:c4:2c:be:4c:fb:7c:2a:ac:86:eb:1c:ed:7f:9d:60: 9a:6e:0b:7f:f2:e3:db:49:49:db:2f:37:3d:9c:ed:f8:ce:03: db:55:96:2d:c8:ba:6e:34:96:2b:26:73:bd:a3:30:55:dc:c6: 2f:1f:90:f0:79:1d:0e:08:50:c6:cb:9f:b6:07:38:fe:58:28: 8a:38:fb:7e:31:ac:3d:a0:41:99:72:8b:be:da:4a:4b:1d:0d: 4d:45:d9:bd:27:15:1c:a8:25:63:71:20:ed:cc:a2:a8:69:e1: dd:10:d6:e4:03:39:1f:75:37:dc:50:7d:df:a6:15:09:98:bc: 24:94:1a:d7:de:5a:6e:ac:cb:b8:e5:7d:a5:84:0e:1f:8d:60: da:ad:b3:dc:5b:31:ad:24:3e:f5:1c:44:91:29:fe:df:f6:d4: d3:ea:a0:65:e1:fb:99:04:5f:3b:28:68:c3:55:78:3f:62:8e: 99:0c:d6:70:de:35:24:bc:7c:be:9d:07:2f:79:8b:62:fb:2f: 38:14:9d:a0:da:06:10:e3:d8:c2:53:72:d1:90:f3:22:cc:a4: 73:cc:59:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUxMjIwMTU1MDA1WhcNMjUxMjI3MTU1MDA1WjAYMRYwFAYD VQQDDA02OTQ2YzVhZS0wZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dKh9CYFvKc1GV3mEA6/5rmo7Ta7XhfsTCsjfZehmW2nX4hxWVEClfI3YxWu l19qAZH9DZQ23/h+oFVffwyvE0BPMq9lJeIPRxiNjyouu2IHxLgENsUSQrIy/Ng1 K1NnoHepyyhDI0BIXqo6KlU/NSWEaQBlgsBt5WM/DwJCYx9w5YmmkW1srKZ2Vps5 pDDzY3TRUmGM5aPIXtruD4ymSdIePpT8PsAbtlnq0QxHHFWz3ZFExcGFF/qoeo/T nMJzNUgvRX4xOIOjYM9UQWDPF3PMR3qFwJs4TdrZ22u5Qs5fJHv3Nlr2Erd4AjjC xWtJicxpJ55HTlYaJEIcnYCrJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+vBAxP 7Vo6r63v8eLx0UtYcxBwMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWQZvI/S8xdp5Y6WyEdKHnQOfPMPvcTazJZ+a81H7WprbWW9lXgDTE LL5M+3wqrIbrHO1/nWCabgt/8uPbSUnbLzc9nO34zgPbVZYtyLpuNJYrJnO9ozBV 3MYvH5DweR0OCFDGy5+2Bzj+WCiKOPt+Maw9oEGZcou+2kpLHQ1NRdm9JxUcqCVj cSDtzKKoaeHdENbkAzkfdTfcUH3fphUJmLwklBrX3lpurMu45X2lhA4fjWDarbPc WzGtJD71HESRKf7f9tTT6qBl4fuZBF87KGjDVXg/Yo6ZDNZw3jUkvHy+nQcveYti +y84FJ2g2gYQ49jCU3LRkPMizKRzzFlQ -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:38 2025 by rpki-client