This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: ojXmutBEZntU3jIXD1qRApNbzJfaIkP/ckAbTkQ/Mnk= Subject key identifier: 74:56:C1:4A:3D:65:8B:95:49:E7:2E:6C:A3:8B:DF:04:B7:9D:5F:A1 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 0849 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 083C Signing time: Mon 22 Dec 2025 20:10:05 +0000 Manifest this update: Mon 22 Dec 2025 20:10:05 +0000 Manifest next update: Mon 29 Dec 2025 20:10:05 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: HCFhmMGy5vFdujRFA0V7SYOvS/ZTprYiJyri8TXRDWk=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Dec 22 20:10:05 2025 GMT Not After : Dec 29 20:10:05 2025 GMT Subject: CN=6949a59d-bfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:67:ee:fc:77:21:b3:25:b0:5e:7a:a5:ec: d7:08:5c:dd:bb:5f:ec:7d:ff:40:b9:6b:09:ad:84: 84:80:27:b3:e0:81:ab:3e:15:10:38:47:d2:cc:c5: 1c:df:79:e8:49:bb:1f:be:54:c9:0e:e2:54:50:bf: 21:cf:f9:c7:37:00:ad:ca:af:05:ad:49:cb:21:0f: 5e:0d:e4:e8:1d:23:5e:67:a4:0f:ca:06:c3:21:0b: e3:48:31:4d:7b:c4:3b:95:a3:96:55:72:eb:8d:1a: 19:e9:45:ca:71:6e:80:45:0a:00:76:64:4d:e6:b6: 6d:27:49:d3:45:fa:7d:2d:79:96:58:a0:9a:54:93: 5e:44:df:5f:92:33:48:b6:9a:ef:ad:1c:8c:fd:2a: aa:d7:9e:91:19:4d:ca:21:bf:38:20:95:5e:c8:88: 9a:3f:a5:54:6d:a6:12:98:0d:9e:91:83:30:2f:da: c1:08:e0:4c:20:68:b8:22:84:e2:9e:c3:7e:39:fd: b1:e2:80:28:74:75:0a:58:b1:ff:da:73:96:87:38: 78:4b:64:02:05:99:0e:09:dd:a1:08:82:48:e2:17: 0d:99:aa:15:d5:8d:ea:dc:de:53:fa:a9:93:3e:c6: 75:dd:ad:e8:d1:63:da:dd:6e:90:19:e1:d6:1e:b5: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:56:C1:4A:3D:65:8B:95:49:E7:2E:6C:A3:8B:DF:04:B7:9D:5F:A1 X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c0:90:6b:7d:b8:a3:f0:6b:2b:bd:49:a4:ab:41:b3:bb:5e: 78:47:88:23:a6:f8:d2:ff:03:d2:21:e6:a5:f7:b7:4a:3b:af: 57:e7:7a:e4:01:78:e8:7d:6a:a4:6e:6b:a4:27:4f:d1:2c:18: 79:45:37:43:42:f8:ff:7c:56:3a:aa:c1:69:55:fd:31:50:7c: 90:74:f7:d2:85:91:2d:3d:59:21:96:63:6c:42:0d:4f:3e:e3: 8c:f8:dd:c1:ca:60:26:3c:db:a2:da:48:9a:b0:9d:80:ed:71: a8:55:01:33:e2:58:77:8c:38:17:66:c0:35:f5:c3:e9:f5:9b: 19:93:d6:ca:70:b4:c6:87:00:f7:07:d9:15:c0:52:5f:8e:1d: 39:11:3c:a8:d7:a3:a9:e3:50:93:8c:98:7f:02:21:46:9f:4c: 7b:d8:2f:e2:79:95:8d:c7:0d:fc:1a:56:a1:45:6f:cc:9f:30: 5f:35:e2:b8:10:2e:30:fd:f7:8c:09:1b:f6:c9:61:6d:fe:a9: 15:74:d1:ee:b6:bf:ec:08:cf:4f:e8:8e:dc:8d:c4:38:98:11: f2:fc:07:ca:be:e0:fd:0f:dd:9e:fa:5b:18:c4:3d:67:e4:68: d1:ca:50:b1:2d:b9:6d:d6:a7:90:2b:01:d5:b2:25:ff:28:9a: 66:cb:95:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUxMjIyMjAxMDA1WhcNMjUxMjI5MjAxMDA1WjAYMRYwFAYD VQQDDA02OTQ5YTU5ZC1iZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFZn7vx3IbMlsF56pezXCFzdu1/sff9AuWsJrYSEgCez4IGrPhUQOEfSzMUc 33noSbsfvlTJDuJUUL8hz/nHNwCtyq8FrUnLIQ9eDeToHSNeZ6QPygbDIQvjSDFN e8Q7laOWVXLrjRoZ6UXKcW6ARQoAdmRN5rZtJ0nTRfp9LXmWWKCaVJNeRN9fkjNI tprvrRyM/Sqq156RGU3KIb84IJVeyIiaP6VUbaYSmA2ekYMwL9rBCOBMIGi4IoTi nsN+Of2x4oAodHUKWLH/2nOWhzh4S2QCBZkOCd2hCIJI4hcNmaoV1Y3q3N5T+qmT PsZ13a3o0WPa3W6QGeHWHrUjPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRWwUo9 ZYuVSecubKOL3wS3nV+hMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7wJBrfbij8GsrvUmkq0Gzu154R4gjpvjS/wPSIeal97dKO69X53rk AXjofWqkbmukJ0/RLBh5RTdDQvj/fFY6qsFpVf0xUHyQdPfShZEtPVkhlmNsQg1P PuOM+N3BymAmPNui2kiasJ2A7XGoVQEz4lh3jDgXZsA19cPp9ZsZk9bKcLTGhwD3 B9kVwFJfjh05ETyo16Op41CTjJh/AiFGn0x72C/ieZWNxw38GlahRW/MnzBfNeK4 EC4w/feMCRv2yWFt/qkVdNHutr/sCM9P6I7cjcQ4mBHy/AfKvuD9D92e+lsYxD1n 5GjRylCxLblt1qeQKwHVsiX/KJpmy5U7 -----END CERTIFICATE-----Generated at Tue Dec 23 22:42:29 2025 by rpki-client