This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier: C9q28ySb1yoGjfqXoHe5VYIgu6EggG0s6awDHrCKjJg=
Subject key identifier: 14:AB:37:3A:5E:83:58:28:D2:08:5E:5B:D7:10:BA:F5:F8:CE:E7:89
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial: 0866
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number: 085E
Signing time: Mon 22 Dec 2025 20:02:08 +0000
Manifest this update: Mon 22 Dec 2025 20:02:08 +0000
Manifest next update: Mon 29 Dec 2025 20:02:08 +0000
Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: +WtkKsCmria2mhqakLw13hE3QOFNBUP3om9uTnP4FgU=)
2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: QdFj4b+G66zoM24orGpWvQKYWAowBUe3I5QM3qjwxak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Validity
Not Before: Dec 22 20:02:08 2025 GMT
Not After : Dec 29 20:02:08 2025 GMT
Subject: CN=6949a3c0-b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:7b:c1:03:4e:c1:db:e8:05:72:ec:df:83:
91:b3:6c:26:b1:2d:82:70:88:2d:75:d2:dd:b3:b4:
0e:78:14:be:ba:3a:8e:31:e4:ce:62:20:0d:85:02:
60:9e:d4:92:a6:88:c2:04:d5:87:07:29:bd:d1:94:
2e:c5:db:c6:aa:05:4d:0d:13:66:d5:8b:35:d1:e9:
9d:1e:24:aa:6a:57:3a:2c:30:e9:ea:99:d4:5b:dd:
7e:da:0f:13:22:ca:cf:62:3b:8a:e9:6c:b1:b8:0a:
3d:de:f9:e8:e8:b5:24:a5:b3:22:92:08:bc:5a:f5:
29:6a:55:28:58:05:5f:85:4d:ae:fe:6d:27:6a:8d:
d8:1c:fd:68:41:47:f2:48:0b:4a:bf:78:93:19:67:
0e:f7:d6:a8:73:27:72:3c:15:75:1a:42:b5:3e:e1:
75:4c:d3:6f:46:ec:50:5b:2b:55:9e:56:89:01:be:
12:96:54:06:aa:fe:2d:63:12:ef:f2:8e:39:36:25:
84:ce:43:0f:70:32:d7:05:c9:09:ff:68:a4:b8:f5:
cd:55:2b:9c:2b:79:4e:2c:3b:a1:62:89:fc:65:02:
d0:cd:f3:68:b0:d7:ed:05:2a:e8:bb:37:8b:7b:a4:
2e:7a:21:eb:a5:c2:f9:3d:65:1b:2b:28:e4:9a:1b:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:37:3A:5E:83:58:28:D2:08:5E:5B:D7:10:BA:F5:F8:CE:E7:89
X509v3 Authority Key Identifier:
keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:09:42:69:2e:9e:74:81:54:c1:75:1d:08:9c:81:7f:06:86:
5e:70:66:78:de:3d:ff:6a:1f:27:d0:d4:b3:78:0a:df:35:9a:
ac:8c:2f:8e:dc:fc:2a:c9:07:3b:fc:f1:7c:69:20:19:5e:3a:
d4:df:ac:ea:8d:36:7d:ee:64:d5:8a:2e:2b:65:36:92:d8:29:
be:f1:23:e7:fe:69:85:11:96:62:2a:5f:48:f0:2e:6d:be:01:
83:1b:4a:64:b3:9b:75:a0:8e:36:24:b6:83:f5:12:a1:c6:c8:
0a:92:56:a2:a0:27:47:9e:66:91:0b:8c:79:35:cc:00:2f:cb:
ab:3a:50:b2:27:f6:d9:0b:e1:10:3d:b3:0f:d8:03:2c:39:ec:
53:6b:26:9b:cc:01:01:f5:96:41:ac:97:fe:b2:33:27:99:88:
e4:08:f7:89:b8:d6:b9:8b:ec:02:af:95:b1:1b:7a:2e:14:66:
00:47:43:74:e0:ca:f2:42:8d:33:a2:c9:42:ca:e0:0a:de:6f:
74:19:4d:09:2c:08:e3:63:57:a1:51:1d:4a:e1:0e:68:8d:27:
25:48:ec:3f:ae:24:cc:58:3f:c8:f2:35:58:9c:68:fe:a6:72:
f4:4d:14:38:b0:b5:32:55:74:a2:20:07:c8:54:e1:f6:2a:16:
43:b9:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:06 2025 by rpki-client