This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json)
Hash identifier: LtLZRlgsQxhAronuDKkbEe7uXDsu/wrKJ4Mt57jnAIA=
Subject key identifier: 7E:48:E6:50:3E:98:4C:22:CA:DF:F6:C9:BC:37:F2:89:DD:50:B8:20
Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
Manifest number: 0239
Signing time: Tue 23 Dec 2025 00:57:28 +0000
Manifest this update: Tue 23 Dec 2025 00:57:28 +0000
Manifest next update: Tue 30 Dec 2025 00:57:28 +0000
Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: txYI+NielZWaLbkJnVwGYw06qtE+BE9R+1n7JUsTkCs=)
2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl
rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Validity
Not Before: Dec 23 00:57:28 2025 GMT
Not After : Dec 30 00:57:28 2025 GMT
Subject: CN=6949e8f8-fbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:25:7f:85:17:73:d2:2b:7b:e4:65:cc:70:
ce:fd:88:0e:4a:0c:49:74:18:53:bc:08:fd:1a:73:
9b:36:30:2b:ef:48:82:6c:de:2e:8d:94:76:b5:db:
ee:73:fd:d9:ec:ea:45:a2:f1:29:4e:a6:91:14:f7:
ae:c8:08:89:dc:f4:86:ba:e4:57:5f:7a:14:21:84:
c7:91:e9:e4:14:96:08:93:20:23:ea:54:b5:9f:54:
65:6c:a8:24:72:f7:48:42:b8:3a:9a:c5:ef:25:f8:
2d:4b:b7:bc:2f:8c:d4:28:79:41:2c:c7:84:cd:34:
da:d3:a6:6f:20:ff:47:ae:05:1d:9c:50:f5:ad:10:
05:92:28:c5:66:29:43:34:7e:66:36:ef:93:dd:af:
3b:f8:57:3e:c4:3f:d4:09:67:a9:c7:ff:ba:73:8c:
d2:85:c7:fd:b5:3a:b6:96:84:dc:7e:8a:cb:39:4a:
15:67:11:19:6e:cc:1a:ba:33:26:17:10:4c:1c:52:
87:d1:d6:fc:eb:c4:30:84:2b:26:31:37:e1:71:1c:
12:ee:e2:0d:91:c8:3b:7f:4e:6d:09:e8:88:0b:e7:
9c:17:3f:d7:12:86:d0:11:a7:dd:28:c4:74:99:2f:
56:d9:ab:b0:d5:b9:90:9a:97:d6:f6:26:3f:cf:45:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:E6:50:3E:98:4C:22:CA:DF:F6:C9:BC:37:F2:89:DD:50:B8:20
X509v3 Authority Key Identifier:
keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:84:00:a1:97:95:fb:77:a3:72:63:8d:73:c1:4d:63:56:
4b:df:60:72:b1:f8:82:5e:a6:35:9f:5c:23:9a:17:2f:8b:7a:
16:4a:e4:8e:c8:8d:39:a1:3a:02:cb:87:12:ab:69:4a:56:d6:
5c:4b:86:cc:a0:56:ea:36:c4:0d:77:3a:70:b0:9d:ca:ca:6a:
2e:4f:9f:d5:62:d4:7c:0c:5d:97:ad:5c:31:c5:1e:e7:90:af:
8c:6f:0e:67:f9:a1:4f:65:5c:41:36:70:21:f0:f2:19:a1:9b:
1b:34:21:bb:1e:4c:23:6b:ce:a1:24:ac:9d:86:a4:b1:7d:cb:
0c:e8:94:f2:cf:a6:6c:88:33:15:29:77:ca:4c:fe:e1:aa:19:
cc:d3:45:07:25:5c:d7:53:09:ab:a1:86:45:62:cd:75:c2:be:
82:5a:d0:77:08:78:6c:31:76:9e:5d:8d:07:73:ef:ca:0f:74:
f4:db:5d:a1:ae:2e:a9:20:60:a0:65:2b:5e:0e:ea:33:b3:dd:
04:2b:2b:1c:44:89:26:b8:8f:69:6d:85:40:43:69:ca:57:2d:
04:e0:2c:f3:15:a9:b1:ef:c5:df:23:d5:7b:9b:c0:af:56:1e:
ed:53:f4:56:1c:2c:62:8c:81:50:26:50:ec:66:6d:73:f7:ea:
a4:94:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:50:28 2025 by rpki-client