This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: eLQapSahtx4rj5dAJir9+op+EO/z0a/lt2O+dtBSrLs= Subject key identifier: 61:62:FA:4A:F0:BF:A4:3B:C0:81:13:FB:34:31:85:2C:56:05:31:38 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 04F4 Signing time: Thu 18 Dec 2025 23:03:13 +0000 Manifest this update: Thu 18 Dec 2025 23:03:12 +0000 Manifest next update: Thu 25 Dec 2025 23:03:12 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: HsFjGqH7jd8pBhWGi3oLDFwMDFOsBbAyaThxU0EeYM8=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: JhgDE5ETFIhEXBruI39DaKib1cXEXGZCzHT5TsRcHiM=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: sNtdGhFP5+8wGIN0odNsPXpZSkmhBenTgX2lN0L4D9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Dec 18 23:03:12 2025 GMT Not After : Dec 25 23:03:12 2025 GMT Subject: CN=69448831-67df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:d9:22:6d:40:a5:d0:42:07:00:fc:f5:c0: d4:35:c5:02:5e:60:97:be:cd:e3:2c:ab:78:15:4f: 03:59:bb:3b:84:b1:59:86:2e:a7:a8:f9:79:dc:8c: f7:a0:cd:cc:3b:af:2e:1a:22:8a:f5:3c:0e:cc:09: a6:40:70:f3:bf:c7:b8:7b:ba:87:b0:d0:5f:49:24: 0e:49:5f:d7:a8:55:cf:70:22:6d:fc:1b:82:30:d6: db:08:a4:ad:52:45:2b:6d:ba:51:d4:d0:3c:45:c8: d9:9b:bb:ef:6b:ff:0a:ff:f6:09:86:76:83:3c:8a: 45:3c:ec:ca:32:24:b4:65:07:a5:86:2b:e9:ee:20: 7e:00:48:e3:24:08:34:4b:ee:bd:7f:4b:fc:a3:cf: 64:99:66:2e:95:2a:67:4d:fa:95:49:6c:33:de:66: 99:e7:5d:b4:13:7d:9c:93:ef:72:62:3e:e8:10:ae: ec:7c:8c:64:eb:b5:f8:1e:94:9e:e1:e5:0a:a0:83: 07:c4:0c:8c:3e:59:9e:f2:fb:7b:00:3b:a9:aa:dc: 21:f5:56:6d:16:3d:39:73:e6:59:84:07:44:61:3f: a0:a1:2e:a3:fb:c0:30:82:87:f0:15:fd:7f:45:7b: 3a:f8:c6:d3:c5:bb:7d:1f:9f:63:fb:3d:0e:33:d9: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:FA:4A:F0:BF:A4:3B:C0:81:13:FB:34:31:85:2C:56:05:31:38 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:17:48:86:8a:aa:66:43:56:4f:99:d6:12:3e:8d:c8:09:9d: dd:b2:b9:6e:b2:5f:9b:f4:57:6d:95:de:e9:bf:d7:19:55:ae: 66:8c:62:fb:d9:d7:62:b7:d4:9a:b9:0e:84:c0:26:42:a7:a7: 62:f5:4b:5f:04:ab:80:de:79:0a:49:58:f3:7b:a2:d0:71:fa: b0:85:74:7f:96:af:b1:96:24:76:77:54:58:19:57:f4:64:84: 2e:72:54:27:ad:30:58:f0:1b:35:fe:69:c8:cc:00:4c:10:50: 9b:13:dc:fa:4f:36:fa:7b:30:73:ae:60:b5:9e:9a:5c:23:9c: 72:af:68:08:b7:0b:e0:3d:9d:50:19:a2:ea:a7:a1:67:99:28: 3e:19:db:ce:26:1d:ae:51:e5:11:46:f3:96:58:7e:f8:8c:43: 84:9b:8f:6b:ca:45:59:0e:da:aa:48:fe:04:7d:30:9f:f0:0c: d2:c5:0e:30:08:e8:28:a2:1c:fd:ea:1b:05:9a:70:69:f0:f9: 49:38:af:93:02:a5:3b:79:4b:5f:ac:c1:a6:30:4a:f2:64:d6: 5e:23:5d:ba:7f:e0:05:91:b4:31:91:93:20:04:8f:50:34:50: d2:58:12:33:fd:2d:4e:f9:0f:fa:dd:9f:39:ca:11:23:69:e3: 31:a4:10:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUxMjE4MjMwMzEyWhcNMjUxMjI1MjMwMzEyWjAYMRYwFAYD VQQDDA02OTQ0ODgzMS02N2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupvZIm1ApdBCBwD89cDUNcUCXmCXvs3jLKt4FU8DWbs7hLFZhi6nqPl53Iz3 oM3MO68uGiKK9TwOzAmmQHDzv8e4e7qHsNBfSSQOSV/XqFXPcCJt/BuCMNbbCKSt UkUrbbpR1NA8RcjZm7vva/8K//YJhnaDPIpFPOzKMiS0ZQelhivp7iB+AEjjJAg0 S+69f0v8o89kmWYulSpnTfqVSWwz3maZ5120E32ck+9yYj7oEK7sfIxk67X4HpSe 4eUKoIMHxAyMPlme8vt7ADupqtwh9VZtFj05c+ZZhAdEYT+goS6j+8AwgofwFf1/ RXs6+MbTxbt9H59j+z0OM9ktnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFi+krw v6Q7wIET+zQxhSxWBTE4MB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUF0iGiqpmQ1ZPmdYSPo3ICZ3dsrlusl+b9Fdtld7pv9cZVa5mjGL7 2ddit9SauQ6EwCZCp6di9UtfBKuA3nkKSVjze6LQcfqwhXR/lq+xliR2d1RYGVf0 ZIQuclQnrTBY8Bs1/mnIzABMEFCbE9z6Tzb6ezBzrmC1nppcI5xyr2gItwvgPZ1Q GaLqp6FnmSg+GdvOJh2uUeURRvOWWH74jEOEm49rykVZDtqqSP4EfTCf8AzSxQ4w COgoohz96hsFmnBp8PlJOK+TAqU7eUtfrMGmMEryZNZeI126f+AFkbQxkZMgBI9Q NFDSWBIz/S1O+Q/63Z85yhEjaeMxpBAk -----END CERTIFICATE-----Generated at Sat Dec 20 21:42:01 2025 by rpki-client