This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: TlQK2J87SBH9NYRibvRfgaMVD2VfXd/LW2R/2ljetwM= Subject key identifier: 73:0E:D3:9C:84:76:C6:19:B0:64:8F:FB:38:4E:87:0D:A0:1D:54:B1 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: CB Signing time: Fri 19 Dec 2025 04:53:28 +0000 Manifest this update: Fri 19 Dec 2025 04:53:27 +0000 Manifest next update: Fri 26 Dec 2025 04:53:27 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: WatEvJQ+y2wNV9Tw243N5b+itbCOytpblsGIu8tylhU=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Dec 19 04:53:27 2025 GMT Not After : Dec 26 04:53:27 2025 GMT Subject: CN=6944da48-2b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:7f:f2:4a:d4:79:28:8a:69:df:8c:38:2e: f5:a4:72:42:77:e9:0a:55:16:93:06:b3:b2:46:de: 70:17:a9:ea:7b:44:59:3c:18:2e:b9:5c:a8:80:e3: e0:94:e6:a8:a7:de:27:6e:90:42:c2:1b:69:98:0b: 4b:7a:2d:e1:1f:64:2b:d3:9d:33:52:e0:7b:01:1a: 5d:61:73:73:7b:83:32:71:5f:23:5a:cd:ac:a6:b9: b0:ad:af:3c:16:73:99:11:11:8e:c2:4f:de:7c:90: 7e:2b:33:bf:ca:ca:37:fe:8e:b8:8b:12:1d:ef:54: e1:01:8d:de:6b:db:2a:9e:4b:59:3a:80:33:c9:22: c2:78:f3:f3:89:87:4d:14:27:dc:aa:13:1a:a7:20: 71:60:09:f0:14:11:ce:00:09:9f:a7:68:83:71:a8: 29:8b:4b:36:2f:39:09:18:d1:d2:92:1c:53:67:51: bd:cc:c7:1c:40:a8:78:8e:63:f5:0d:25:30:77:23: d9:65:23:de:27:70:4a:76:ca:96:4d:81:1a:54:ba: 5e:4b:13:1f:29:7e:ef:d6:0e:34:a4:f4:78:03:aa: 58:ea:d7:dc:07:ed:9b:e8:c0:fa:c3:b7:14:58:f3: a5:61:4d:3c:90:c5:10:6d:9c:f5:89:44:70:f2:9b: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:D3:9C:84:76:C6:19:B0:64:8F:FB:38:4E:87:0D:A0:1D:54:B1 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2c:16:24:0a:9c:19:31:ee:8e:36:c6:bf:9b:d5:9f:05:ff: 9d:0e:0e:ea:d1:95:5c:ec:f3:f4:d8:4c:ad:f0:da:e1:af:3f: 30:f9:18:3c:d3:8c:1f:fd:42:aa:c1:08:08:31:ad:42:10:1e: ac:a4:9a:55:b8:42:b5:78:7c:f6:3c:e4:cf:2e:93:59:76:28: 72:cc:2a:7a:5b:53:cc:af:0a:45:39:f5:8a:ed:7d:81:0b:04: 07:25:c3:61:47:2e:69:d5:1f:5f:7d:e5:36:66:a5:3f:25:98: 25:c0:7e:84:67:42:7b:62:3b:67:f5:ec:51:55:28:cf:23:ea: 57:6f:bc:ec:8e:e2:ca:5b:34:a0:82:8c:62:fe:93:d4:e3:70: 09:64:ce:ae:bd:36:80:07:91:ea:7b:ac:c4:f0:b0:4b:68:49: 24:bb:35:a5:18:c0:46:be:92:63:9b:ce:9f:c1:5f:90:f7:f4: f8:19:e3:82:91:f1:00:22:e8:80:40:a7:f1:5e:ee:55:78:44: b8:c9:5c:dc:b5:a9:4d:d6:44:7e:4d:c7:5f:b4:de:50:b1:5e: 4f:3e:c0:fd:b9:c9:6f:58:3f:08:42:57:79:9d:76:cc:cd:b1: 86:85:c8:95:fc:5e:cd:00:a3:37:61:9a:87:81:93:17:41:6c: 7a:69:79:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUxMjE5MDQ1MzI3WhcNMjUxMjI2MDQ1MzI3WjAYMRYwFAYD VQQDDA02OTQ0ZGE0OC0yYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUV/8krUeSiKad+MOC71pHJCd+kKVRaTBrOyRt5wF6nqe0RZPBguuVyogOPg lOaop94nbpBCwhtpmAtLei3hH2Qr050zUuB7ARpdYXNze4MycV8jWs2sprmwra88 FnOZERGOwk/efJB+KzO/yso3/o64ixId71ThAY3ea9sqnktZOoAzySLCePPziYdN FCfcqhMapyBxYAnwFBHOAAmfp2iDcagpi0s2LzkJGNHSkhxTZ1G9zMccQKh4jmP1 DSUwdyPZZSPeJ3BKdsqWTYEaVLpeSxMfKX7v1g40pPR4A6pY6tfcB+2b6MD6w7cU WPOlYU08kMUQbZz1iURw8ptH8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMO05yE dsYZsGSP+zhOhw2gHVSxMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfLBYkCpwZMe6ONsa/m9WfBf+dDg7q0ZVc7PP02Eyt8Nrhrz8w+Rg8 04wf/UKqwQgIMa1CEB6spJpVuEK1eHz2POTPLpNZdihyzCp6W1PMrwpFOfWK7X2B CwQHJcNhRy5p1R9ffeU2ZqU/JZglwH6EZ0J7Yjtn9exRVSjPI+pXb7zsjuLKWzSg goxi/pPU43AJZM6uvTaAB5Hqe6zE8LBLaEkkuzWlGMBGvpJjm86fwV+Q9/T4GeOC kfEAIuiAQKfxXu5VeES4yVzctalN1kR+TcdftN5QsV5PPsD9uclvWD8IQld5nXbM zbGGhciV/F7NAKM3YZqHgZMXQWx6aXlE -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:58 2025 by rpki-client