This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: 8FOeKqLhOHrGo8PRMnE9Wamwed22qUITCu657XuH26Y= Subject key identifier: 1D:F4:53:FA:76:3B:99:E7:9A:F0:2C:E9:56:C5:97:F2:22:07:F2:94 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A85 Signing time: Mon 22 Dec 2025 19:01:41 +0000 Manifest this update: Mon 22 Dec 2025 19:01:41 +0000 Manifest next update: Mon 29 Dec 2025 19:01:41 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: HqzUtYezncVYNxg12v5ooFM17MCgA9l5dPiZjjRr9oM=) 2: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) 3: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: +Z0u2AO6pzWMC+2Zqy2emMfgxJlMpGAWqdjJa7j1R38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2702 (0xa8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Dec 22 19:01:41 2025 GMT Not After : Dec 29 19:01:41 2025 GMT Subject: CN=69499595-9ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:74:c1:04:39:8f:25:5e:48:2a:22:62:a8: af:bb:de:77:35:46:4a:cd:9e:b4:84:0f:d3:10:dd: 76:8e:8b:22:b6:e0:6b:ab:46:55:7a:e3:40:b6:1a: f9:29:10:4e:1f:58:de:ce:6f:da:44:17:5c:80:8b: 6d:4e:fc:c8:06:b0:37:7f:2e:cb:0c:be:1e:41:b8: c2:e9:08:12:b7:e4:32:12:e2:af:d1:59:14:2b:f8: 0e:d7:cd:15:3e:8c:a6:1f:1a:5f:9b:83:01:ec:69: 14:c4:76:91:9c:6f:32:f2:a4:1a:e9:22:4d:ef:ed: 33:83:59:bd:a0:f8:31:1e:e4:5e:97:b3:3f:56:2a: ec:9f:e6:f7:28:50:59:8b:b2:4a:12:66:9a:fe:79: fc:7a:f7:1d:0e:d0:51:9c:78:3a:97:66:f0:d7:6b: 21:4d:2d:4d:c6:f6:15:ce:fd:72:29:73:90:8c:55: f5:83:d7:9f:28:93:29:fc:67:af:06:55:19:d4:72: 5e:cf:69:8b:34:3e:2f:83:24:90:76:71:78:15:5c: de:61:89:4c:a6:de:7b:33:98:44:64:d7:d6:68:2a: 97:dc:01:bf:05:30:ae:5d:de:71:a1:fc:6c:bd:24: 1b:73:cb:bb:9f:a1:da:1b:e5:b0:72:2a:93:cb:de: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F4:53:FA:76:3B:99:E7:9A:F0:2C:E9:56:C5:97:F2:22:07:F2:94 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:92:94:5a:c5:58:88:97:c2:4d:2b:92:c5:57:91:95:ab:a4: 5f:a0:52:e3:0c:29:ea:c5:0a:af:5b:b5:98:c8:63:95:3c:25: 5e:45:72:8f:c7:58:5a:58:68:07:27:e0:7c:1f:3a:28:b6:ed: 1a:d5:fa:6e:70:9c:6a:a5:8a:6c:eb:89:da:70:3a:c8:d8:f6: 63:a1:61:4d:21:f5:64:26:f0:06:c0:87:1c:ed:3a:3a:43:69: 98:7c:ce:0d:34:61:f3:81:93:22:ae:9e:b6:ce:8f:62:77:42: 97:6c:71:ee:f2:c0:cb:4d:6d:55:d2:b2:a4:90:bb:b0:df:bd: fc:af:15:0c:69:6f:cb:81:38:a8:cf:21:a7:98:a0:e1:f0:fb: 0b:5b:52:b1:63:db:9d:e7:06:d0:07:64:41:3a:01:f7:e1:47: c1:c8:fe:16:ec:bc:6c:d6:f9:7b:ec:2a:6d:bb:d2:bf:32:87: 08:f3:59:93:cf:f3:18:b6:47:61:7b:ba:a8:f0:1d:12:12:6f: 8e:f1:23:fd:ae:29:c5:9d:62:cd:e1:6d:98:c6:a1:a6:e1:47: 44:2a:1e:86:bc:2b:ab:50:3f:ef:20:cd:d9:b2:98:19:bb:4e: 6b:ab:05:1f:4e:11:de:8a:2e:50:87:01:64:97:98:42:05:ed: da:f8:b8:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUxMjIyMTkwMTQxWhcNMjUxMjI5MTkwMTQxWjAYMRYwFAYD VQQDDA02OTQ5OTU5NS05ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrd0wQQ5jyVeSCoiYqivu953NUZKzZ60hA/TEN12josituBrq0ZVeuNAthr5 KRBOH1jezm/aRBdcgIttTvzIBrA3fy7LDL4eQbjC6QgSt+QyEuKv0VkUK/gO180V PoymHxpfm4MB7GkUxHaRnG8y8qQa6SJN7+0zg1m9oPgxHuRel7M/Virsn+b3KFBZ i7JKEmaa/nn8evcdDtBRnHg6l2bw12shTS1NxvYVzv1yKXOQjFX1g9efKJMp/Gev BlUZ1HJez2mLND4vgySQdnF4FVzeYYlMpt57M5hEZNfWaCqX3AG/BTCuXd5xofxs vSQbc8u7n6HaG+WwciqTy97AiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB30U/p2 O5nnmvAs6VbFl/IiB/KUMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBckpRaxViIl8JNK5LFV5GVq6RfoFLjDCnqxQqvW7WYyGOVPCVeRXKP x1haWGgHJ+B8Hzootu0a1fpucJxqpYps64nacDrI2PZjoWFNIfVkJvAGwIcc7To6 Q2mYfM4NNGHzgZMirp62zo9id0KXbHHu8sDLTW1V0rKkkLuw3738rxUMaW/LgTio zyGnmKDh8PsLW1KxY9ud5wbQB2RBOgH34UfByP4W7Lxs1vl77Cptu9K/MocI81mT z/MYtkdhe7qo8B0SEm+O8SP9rinFnWLN4W2YxqGm4UdEKh6GvCurUD/vIM3ZspgZ u05rqwUfThHeii5QhwFkl5hCBe3a+LjH -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:48 2025 by rpki-client