This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: NrkaXn5I+dq/eUQBGlRIhLOF1UhxU+UIs5rJ8UrhlLM= Subject key identifier: D3:D5:F4:0C:50:40:2A:0D:5E:35:C9:FF:4E:77:F5:33:32:00:89:0B Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: E9 Signing time: Sun 21 Dec 2025 04:42:00 +0000 Manifest this update: Sun 21 Dec 2025 04:42:00 +0000 Manifest next update: Sun 28 Dec 2025 04:42:00 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: yGSdjl1lMGtJNBlFfl3zRwlgYpRNNiRm4gROa4fLH18=) 2: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=) 3: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=) 4: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=) 5: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=) 6: 9B3123BEC38C11F0A8D49A37C4F9AE02.roa (hash: Lzk2R03/ZF2ufkOlf+mVkfGkNvSjsS669eniiKj8mTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Dec 21 04:42:00 2025 GMT Not After : Dec 28 04:42:00 2025 GMT Subject: CN=69477a98-fc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:70:54:30:1a:8f:04:1d:1a:97:4f:2d:3d: 90:81:c3:2b:9c:44:0e:cf:60:25:df:a2:bc:ca:b8: aa:15:76:4b:5e:5c:61:a7:fa:f1:6d:0d:70:70:7f: 54:23:8c:bb:ea:b6:00:e8:85:26:7d:fe:1d:14:66: 94:b2:e8:8e:e1:18:af:bc:32:fb:8c:f5:b0:aa:88: ba:20:0d:df:be:df:20:05:9e:d6:f0:7b:77:c6:02: 87:d2:bf:88:cd:69:29:fb:52:9a:8f:d2:75:4f:8b: 63:67:6e:03:11:d5:4b:60:1b:d4:e2:9f:a6:5b:3a: 04:c7:b6:a5:b5:94:bb:6c:c2:e6:03:ab:8f:e5:30: ae:73:4a:5c:a0:7b:ea:da:cb:93:18:81:be:57:e6: 52:ea:ae:9e:a0:6e:51:69:d6:2b:2c:7a:b8:fe:cd: 9f:68:ad:14:23:4c:73:d1:be:d7:1b:08:14:5e:12: 05:27:36:58:3b:42:40:2a:7b:07:c7:fd:ed:49:24: 71:9f:f9:16:20:19:c8:fd:70:4e:9d:6c:c4:b2:b0: 02:d0:f3:60:0f:47:0d:a8:cd:18:78:5b:51:bf:ba: e2:3e:0a:83:41:bf:7f:94:f7:9f:e0:f9:ff:05:6f: 25:ba:65:7c:44:ee:40:9e:49:7e:e2:9e:e2:c0:32: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D5:F4:0C:50:40:2A:0D:5E:35:C9:FF:4E:77:F5:33:32:00:89:0B X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:41:2f:ab:5f:a6:f4:4b:da:8c:55:cf:8a:88:82:01:e4:1b: 72:0f:00:b2:4b:5a:53:d6:b1:01:7c:10:f8:b0:fe:27:93:ec: 08:29:bf:56:ca:cf:e7:34:0f:74:3c:e9:c1:37:da:b4:29:8e: e3:92:ae:9a:60:62:c2:4e:ae:82:3b:dd:f4:c9:71:10:e8:b0: 5e:23:b6:5c:66:b5:76:66:3e:fb:86:37:4f:38:e8:9a:69:0d: 59:69:23:57:1b:3b:56:ce:49:a3:0f:50:32:51:ae:a5:63:22: e0:67:fa:fd:c6:a2:52:e5:97:5f:86:6f:3b:97:16:31:35:82: b5:2d:72:9a:4d:e4:a4:85:5f:87:ec:74:87:c0:46:dd:a1:aa: 2b:da:63:c7:b8:9c:06:0d:be:f6:d1:da:be:9f:6b:16:45:b7: a0:a4:4b:95:fc:8c:9a:6b:26:20:4c:97:e7:45:55:5f:54:33: eb:a5:63:fb:68:31:87:95:ea:60:68:3e:e4:3c:04:68:19:9d: d6:38:ec:03:bf:55:21:fb:19:1a:99:32:17:c5:88:d7:37:29: d6:49:c5:a0:fe:13:a5:dc:db:22:69:9f:b5:b4:fc:f5:f9:e3: 3d:08:f5:d8:dd:1e:02:3d:5b:12:5e:2d:a9:a7:32:1a:c3:a1: c7:59:41:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMjIxMDQ0MjAwWhcNMjUxMjI4MDQ0MjAwWjAYMRYwFAYD VQQDDA02OTQ3N2E5OC1mYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolBwVDAajwQdGpdPLT2QgcMrnEQOz2Al36K8yriqFXZLXlxhp/rxbQ1wcH9U I4y76rYA6IUmff4dFGaUsuiO4RivvDL7jPWwqoi6IA3fvt8gBZ7W8Ht3xgKH0r+I zWkp+1Kaj9J1T4tjZ24DEdVLYBvU4p+mWzoEx7altZS7bMLmA6uP5TCuc0pcoHvq 2suTGIG+V+ZS6q6eoG5RadYrLHq4/s2faK0UI0xz0b7XGwgUXhIFJzZYO0JAKnsH x/3tSSRxn/kWIBnI/XBOnWzEsrAC0PNgD0cNqM0YeFtRv7riPgqDQb9/lPef4Pn/ BW8lumV8RO5Ankl+4p7iwDJjlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPV9AxQ QCoNXjXJ/0539TMyAIkLMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8QS+rX6b0S9qMVc+KiIIB5BtyDwCyS1pT1rEBfBD4sP4nk+wIKb9W ys/nNA90POnBN9q0KY7jkq6aYGLCTq6CO930yXEQ6LBeI7ZcZrV2Zj77hjdPOOia aQ1ZaSNXGztWzkmjD1AyUa6lYyLgZ/r9xqJS5Zdfhm87lxYxNYK1LXKaTeSkhV+H 7HSHwEbdoaor2mPHuJwGDb720dq+n2sWRbegpEuV/IyaayYgTJfnRVVfVDPrpWP7 aDGHlepgaD7kPARoGZ3WOOwDv1Uh+xkamTIXxYjXNynWScWg/hOl3NsiaZ+1tPz1 +eM9CPXY3R4CPVsSXi2ppzIaw6HHWUGs -----END CERTIFICATE-----Generated at Sun Dec 21 06:44:11 2025 by rpki-client