This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: CxttsGTi7nX/yL3kGfailpgqJyu0ZQyahX2Ip2TJYYQ= Subject key identifier: EC:FD:A0:A2:51:94:3D:D1:B0:2C:69:4E:D6:A7:B1:DA:22:9D:EE:93 Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 0252 Signing time: Fri 19 Dec 2025 00:57:25 +0000 Manifest this update: Fri 19 Dec 2025 00:57:25 +0000 Manifest next update: Fri 26 Dec 2025 00:57:25 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: uTISgNnLLcKFpyKqwlgQT+ID5JU7WDdEdoqEY/3c51U=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: liB32LHWoTY1DeFXivtb2A9uOYDMDxMmgU/KmD+uViE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: Dec 19 00:57:25 2025 GMT Not After : Dec 26 00:57:25 2025 GMT Subject: CN=6944a2f5-68d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:76:8f:66:f2:bd:10:0f:6c:5f:4a:32:0c: 05:db:f2:d7:ce:a3:01:98:0e:d8:44:5c:3c:6c:b6: 4e:82:e6:0f:80:b7:b5:f2:7b:03:57:10:b7:d4:13: 86:f7:f8:2f:a8:53:3e:89:57:33:6c:c2:07:66:51: 9e:41:95:c1:42:08:4b:c9:e9:5a:bb:e2:21:08:64: a0:ce:34:e8:3a:03:d3:90:b4:d1:e1:34:d5:2d:ca: bc:66:c4:c0:d7:1e:57:22:6f:3e:d3:9f:03:79:e6: 7b:f4:e2:5d:a3:90:47:b1:85:94:61:f3:65:a3:d6: d2:76:82:5f:4a:53:78:5e:e6:1b:1f:d3:50:e7:49: e5:a0:96:50:7e:99:79:6d:92:65:8b:a7:35:90:53: 2f:33:5b:2d:0e:92:95:bc:59:93:da:5e:fa:46:d9: cf:46:70:e8:73:e2:b1:44:64:4c:65:a8:d7:4c:37: 0c:83:08:14:23:4f:8b:a8:aa:94:d1:14:ec:15:e5: 04:b2:dc:ca:50:10:65:6e:bc:a1:d7:02:55:d6:6f: 93:d0:08:29:4f:52:af:87:0d:8f:21:f0:b8:4a:7f: ef:c6:6c:c4:be:f8:69:97:7b:f3:c0:8a:a2:bf:75: 01:ce:bd:b3:27:0c:ca:ff:24:84:44:09:2f:4e:4a: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:A0:A2:51:94:3D:D1:B0:2C:69:4E:D6:A7:B1:DA:22:9D:EE:93 X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:94:bc:6a:08:d1:42:e7:5e:98:fc:3d:1d:27:8f:d5:aa:fe: ac:b4:78:e2:76:6b:08:bc:c2:87:ee:36:50:46:e7:2d:30:d6: 19:99:b3:a4:b3:15:67:6a:75:25:89:c1:16:f3:cf:5f:ae:bb: 23:77:22:bc:31:13:dc:66:e5:2d:c5:b2:1c:91:a8:3a:aa:3c: 2e:ea:88:ed:5e:9e:41:ec:3c:72:94:2e:05:1a:2d:ca:bf:35: b8:23:fc:f5:42:b6:12:97:59:40:64:c3:5f:c1:bb:cd:4b:9d: 56:05:ac:4f:8b:f7:f9:88:41:b9:8b:c0:4f:d4:22:b3:97:15: e4:cc:2a:02:76:d5:6a:42:a4:d9:a2:d0:f0:cf:d9:38:fc:80: b3:9e:49:38:55:54:b2:b6:4c:25:b0:22:51:0a:d4:a9:53:48: eb:48:14:11:2d:72:82:99:4a:ff:b7:bc:3f:bf:cf:a1:c0:91: aa:a8:f0:01:5a:dd:75:22:1f:2c:13:bf:37:b6:19:0d:64:31: e7:fe:a9:d7:60:3e:1f:57:ad:14:46:e5:32:08:08:42:8c:71: 06:10:cb:b8:b6:fa:80:15:af:2d:9f:dd:66:a8:72:2b:3f:3f: e4:f3:35:1a:3e:b0:2d:c9:89:f0:39:5c:d3:e2:32:55:5c:68: fa:6f:32:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUxMjE5MDA1NzI1WhcNMjUxMjI2MDA1NzI1WjAYMRYwFAYD VQQDDA02OTQ0YTJmNS02OGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXh2j2byvRAPbF9KMgwF2/LXzqMBmA7YRFw8bLZOguYPgLe18nsDVxC31BOG 9/gvqFM+iVczbMIHZlGeQZXBQghLyelau+IhCGSgzjToOgPTkLTR4TTVLcq8ZsTA 1x5XIm8+058DeeZ79OJdo5BHsYWUYfNlo9bSdoJfSlN4XuYbH9NQ50nloJZQfpl5 bZJli6c1kFMvM1stDpKVvFmT2l76RtnPRnDoc+KxRGRMZajXTDcMgwgUI0+LqKqU 0RTsFeUEstzKUBBlbryh1wJV1m+T0AgpT1Kvhw2PIfC4Sn/vxmzEvvhpl3vzwIqi v3UBzr2zJwzK/ySERAkvTkptpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz9oKJR lD3RsCxpTtansdoine6TMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAClLxqCNFC516Y/D0dJ4/Vqv6stHjidmsIvMKH7jZQRuctMNYZmbOk sxVnanUlicEW889frrsjdyK8MRPcZuUtxbIckag6qjwu6ojtXp5B7DxylC4FGi3K vzW4I/z1QrYSl1lAZMNfwbvNS51WBaxPi/f5iEG5i8BP1CKzlxXkzCoCdtVqQqTZ otDwz9k4/ICznkk4VVSytkwlsCJRCtSpU0jrSBQRLXKCmUr/t7w/v8+hwJGqqPAB Wt11Ih8sE783thkNZDHn/qnXYD4fV60URuUyCAhCjHEGEMu4tvqAFa8tn91mqHIr Pz/k8zUaPrAtyYnwOVzT4jJVXGj6bzLK -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:11 2025 by rpki-client