This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: MFOIa/Emtqq9QvHvyByZOD7kbFxqZZgULGEV1LrfNwA= Subject key identifier: 8D:D2:4E:6D:68:B0:27:E9:55:DD:7E:E2:BA:84:9D:C9:EF:73:F2:21 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 010F Signing time: Tue 23 Dec 2025 03:56:54 +0000 Manifest this update: Tue 23 Dec 2025 03:56:53 +0000 Manifest next update: Tue 30 Dec 2025 03:56:53 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: /w/zVfFaVbPHx251BfMLUqFFTDDbcwvPNF3AAAzhM9Q=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: piBG26jjxocqk1EfDzKmzUArtL5VT+oZB8alGAtK9pg=) 3: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: V4JYvS6vIh92au5uufnZnSFxlfzupkzvK15Gc19h2ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Dec 23 03:56:53 2025 GMT Not After : Dec 30 03:56:53 2025 GMT Subject: CN=694a1306-1d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:c2:84:02:ae:ab:cb:3e:1a:02:38:55:f3: 16:b6:ea:34:ba:43:d9:22:fc:39:ea:31:3a:79:a1: df:17:9b:9f:7a:c7:26:9f:61:db:b2:44:d7:4a:09: 3d:ad:27:8f:c5:a6:6c:50:fa:ff:b9:cf:91:5d:12: 1f:60:76:99:4e:85:db:23:56:ab:f6:20:2f:07:b0: b7:18:3f:74:ca:56:39:30:83:bb:37:24:69:cd:ec: 67:32:b6:8a:43:be:0d:11:86:d2:4a:36:76:3e:eb: d8:95:29:3b:9a:39:1f:46:ad:ba:c2:88:7f:53:03: c4:ef:cb:37:6b:5b:e3:e2:db:39:05:5c:15:3d:a0: ef:fb:72:dc:32:75:b4:14:d1:66:9f:48:b2:ce:b8: da:55:13:95:85:2c:7b:1c:77:7b:1d:2b:9b:86:20: bb:93:0a:84:af:7f:8a:44:52:32:d7:43:10:84:6e: 12:78:5b:0f:fa:25:7e:b9:5d:c3:a6:f2:fc:91:72: 53:3d:56:2a:13:30:5b:1d:c0:44:c2:46:19:bd:68: 33:c7:57:69:38:f4:c2:48:c9:d2:47:fd:53:ff:90: 3c:2a:f7:12:f3:f1:49:6f:11:8d:c1:90:24:e2:3b: 0c:dc:57:15:12:14:b2:cd:6e:9f:60:99:60:bf:c0: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D2:4E:6D:68:B0:27:E9:55:DD:7E:E2:BA:84:9D:C9:EF:73:F2:21 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ca:64:80:2c:03:2e:14:2a:ea:f7:15:ab:cd:88:68:6e:28: cb:3b:bd:e3:50:a2:21:18:8d:8f:1a:93:00:ad:b9:cf:af:13: 44:c4:65:6a:e3:d0:cf:8c:43:7d:da:26:90:a0:e2:aa:a3:9a: 2d:ea:d9:78:fd:52:1b:31:61:8a:0c:90:55:73:f2:95:a3:52: 16:b1:f6:b9:8b:d9:77:47:ea:24:2f:ac:e9:9e:5e:fd:f0:a3: 31:4b:b2:5b:7d:09:bc:c1:e0:07:3f:07:fe:cb:40:04:1a:7d: 8f:34:86:85:64:b0:86:60:16:92:d9:8c:59:f7:1d:9f:9a:ec: 05:96:5b:34:95:2b:45:30:1d:35:5e:5e:55:3b:e8:ee:71:31: 40:5e:de:90:95:6c:98:b1:de:3d:75:e5:af:58:b9:c5:d7:0a: 41:b8:e4:3b:9b:c0:94:c5:9b:0e:51:f6:5a:d0:ad:d7:d3:c3: 81:25:4c:dc:80:35:e9:ca:73:00:54:62:d9:ca:6b:23:72:86: f2:c2:a2:4c:fe:11:37:59:a6:67:f9:de:43:41:84:fe:35:8f: 0a:89:67:20:53:0d:47:17:50:bd:a7:7a:65:1c:5d:cc:be:1c: d2:3f:53:97:d4:7d:ec:9e:b2:e5:17:d2:bf:25:74:09:94:10: 24:98:10:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjUxMjIzMDM1NjUzWhcNMjUxMjMwMDM1NjUzWjAYMRYwFAYD VQQDDA02OTRhMTMwNi0xZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoijChAKuq8s+GgI4VfMWtuo0ukPZIvw56jE6eaHfF5ufescmn2HbskTXSgk9 rSePxaZsUPr/uc+RXRIfYHaZToXbI1ar9iAvB7C3GD90ylY5MIO7NyRpzexnMraK Q74NEYbSSjZ2PuvYlSk7mjkfRq26woh/UwPE78s3a1vj4ts5BVwVPaDv+3LcMnW0 FNFmn0iyzrjaVROVhSx7HHd7HSubhiC7kwqEr3+KRFIy10MQhG4SeFsP+iV+uV3D pvL8kXJTPVYqEzBbHcBEwkYZvWgzx1dpOPTCSMnSR/1T/5A8KvcS8/FJbxGNwZAk 4jsM3FcVEhSyzW6fYJlgv8DlrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3STm1o sCfpVd1+4rqEncnvc/IhMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVymSALAMuFCrq9xWrzYhobijLO73jUKIhGI2PGpMArbnPrxNExGVq 49DPjEN92iaQoOKqo5ot6tl4/VIbMWGKDJBVc/KVo1IWsfa5i9l3R+okL6zpnl79 8KMxS7JbfQm8weAHPwf+y0AEGn2PNIaFZLCGYBaS2YxZ9x2fmuwFlls0lStFMB01 Xl5VO+jucTFAXt6QlWyYsd49deWvWLnF1wpBuOQ7m8CUxZsOUfZa0K3X08OBJUzc gDXpynMAVGLZymsjcobywqJM/hE3WaZn+d5DQYT+NY8KiWcgUw1HF1C9p3plHF3M vhzSP1OX1H3snrLlF9K/JXQJlBAkmBAx -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:15 2025 by rpki-client