This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: TQpovJgZzLBF0ZfWtahdIU4BbGOGcYrltnbYdsDRwqM= Subject key identifier: B3:90:02:79:8F:2C:25:3F:C2:F5:79:64:DF:6F:F6:E6:07:09:86:56 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 05B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 059F Signing time: Sat 20 Dec 2025 22:32:36 +0000 Manifest this update: Sat 20 Dec 2025 22:32:35 +0000 Manifest next update: Sat 27 Dec 2025 22:32:35 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: U6/djNk6ZNVrE/fMTIin7ItvaiA5gmmg4qKSsN9AF7E=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1461 (0x5b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Dec 20 22:32:35 2025 GMT Not After : Dec 27 22:32:35 2025 GMT Subject: CN=69472403-3116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:62:ba:13:36:8c:9b:02:c5:a8:3a:f3:e2: 2a:2e:be:6f:0d:4a:c4:ea:fa:4e:02:0e:bb:ba:ff: 7d:ac:eb:f1:63:48:c8:a8:97:36:9a:e4:72:4f:2a: 1c:11:31:da:37:67:d9:5d:ed:5b:de:ad:95:cd:67: 12:11:6f:8c:fa:64:86:65:24:34:ae:5d:5c:84:45: cd:89:81:c0:0b:34:c2:5e:26:99:58:ee:23:57:05: 48:86:75:3f:f2:98:11:81:0e:09:9b:44:b2:e6:8d: 35:f7:13:3a:db:17:e9:84:92:8e:8f:8d:76:e6:7a: 43:b3:a9:05:9f:cd:ff:30:44:3d:f2:df:70:af:ef: 59:ed:f6:79:f0:07:bd:bd:bc:43:b2:0d:f3:bf:62: f1:16:e3:98:76:3e:5e:96:e4:ea:c5:77:fa:58:d2: a0:c4:de:75:ec:a5:5d:d3:4c:12:88:3e:5b:5a:b6: cd:2c:76:bf:68:94:17:fc:82:91:f8:04:01:0e:7e: 86:2d:c3:f5:16:17:0e:8d:e6:b9:9c:64:0f:a7:36: 75:b3:1e:6e:b6:81:e3:95:8c:1e:54:c8:05:24:4a: ae:72:da:d1:4b:05:d2:52:ef:41:df:c1:b7:86:c8: 3f:dc:49:be:f9:43:72:7b:99:07:03:02:a4:3f:03: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:02:79:8F:2C:25:3F:C2:F5:79:64:DF:6F:F6:E6:07:09:86:56 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:30:42:88:a2:c7:68:9a:52:ee:31:ea:0c:f8:c8:1d:91:46: e2:dc:b3:58:37:b1:df:f0:48:39:23:36:58:28:7a:af:43:a4: 8d:32:6d:a5:2d:5a:c2:49:51:77:99:b0:74:ca:e1:2c:b8:fa: d1:7a:70:3e:9d:ff:7c:9e:c0:87:86:dd:98:24:3c:b3:54:7a: ea:8f:1d:89:b8:32:a7:b8:aa:9d:48:f4:42:ad:7e:da:fb:b0: d1:54:4f:4a:d5:25:41:06:0d:9c:ab:f6:f5:d8:52:c5:a1:7e: 2e:10:c9:a5:ae:07:b3:cd:ee:60:fa:56:ee:1e:07:a6:d5:5c: 29:67:c6:4a:f6:96:f1:c0:0e:27:80:5c:dc:dc:39:e6:e8:6d: 11:6c:43:aa:42:d4:0f:2d:ca:30:b1:dd:2e:11:09:2c:b0:c5: d6:4a:9f:e4:88:9b:b5:1f:16:9d:e3:c5:87:f9:f7:35:1f:42: 27:97:e0:51:5f:cf:64:6d:39:1b:de:a7:cc:c2:24:d4:8d:7d: 59:52:56:a7:1a:56:50:7e:29:54:83:b6:af:ff:24:0a:31:be: c6:f6:30:d2:8c:03:ba:e0:0c:3f:05:b0:b5:f2:d7:c0:a9:e6: 00:80:ab:b2:e2:fe:73:11:8f:e8:0c:4c:02:90:3c:8c:c1:af: 32:53:d0:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUxMjIwMjIzMjM1WhcNMjUxMjI3MjIzMjM1WjAYMRYwFAYD VQQDDA02OTQ3MjQwMy0zMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9RiuhM2jJsCxag68+IqLr5vDUrE6vpOAg67uv99rOvxY0jIqJc2muRyTyoc ETHaN2fZXe1b3q2VzWcSEW+M+mSGZSQ0rl1chEXNiYHACzTCXiaZWO4jVwVIhnU/ 8pgRgQ4Jm0Sy5o019xM62xfphJKOj4125npDs6kFn83/MEQ98t9wr+9Z7fZ58Ae9 vbxDsg3zv2LxFuOYdj5eluTqxXf6WNKgxN517KVd00wSiD5bWrbNLHa/aJQX/IKR +AQBDn6GLcP1FhcOjea5nGQPpzZ1sx5utoHjlYweVMgFJEquctrRSwXSUu9B38G3 hsg/3Em++UNye5kHAwKkPwM32QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOQAnmP LCU/wvV5ZN9v9uYHCYZWMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwMEKIosdomlLuMeoM+MgdkUbi3LNYN7Hf8Eg5IzZYKHqvQ6SNMm2l LVrCSVF3mbB0yuEsuPrRenA+nf98nsCHht2YJDyzVHrqjx2JuDKnuKqdSPRCrX7a +7DRVE9K1SVBBg2cq/b12FLFoX4uEMmlrgezze5g+lbuHgem1VwpZ8ZK9pbxwA4n gFzc3Dnm6G0RbEOqQtQPLcowsd0uEQkssMXWSp/kiJu1Hxad48WH+fc1H0Inl+BR X89kbTkb3qfMwiTUjX1ZUlanGlZQfilUg7av/yQKMb7G9jDSjAO64Aw/BbC18tfA qeYAgKuy4v5zEY/oDEwCkDyMwa8yU9Bl -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:51 2025 by rpki-client