This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: 3F4TFAZsMVSXJl+HQCximIw8asrqk/jM0AjU/zjAGJk= Subject key identifier: 07:DC:DF:96:79:56:E2:9B:DB:76:74:D7:61:23:7D:12:5E:2E:0E:F1 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 0835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 0831 Signing time: Sat 06 Dec 2025 19:53:10 +0000 Manifest this update: Sat 06 Dec 2025 19:53:09 +0000 Manifest next update: Sat 13 Dec 2025 19:53:09 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: TaRZnGYQm3TxQrjTnPTWE8k/ZeJQpJ3XhxzPEndNY7o=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: /F/gYX/L863YX0w0vTOKFM1DOvBiDwzCSuLCvUmNqSk=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: CJo3Y0RDZ6WOA9pdaOgsipKbuYOBA79WFUuGjeqh4aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2101 (0x835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Dec 6 19:53:09 2025 GMT Not After : Dec 13 19:53:09 2025 GMT Subject: CN=693489a6-c61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:82:5f:e8:89:8a:de:80:77:3b:f6:78:9b: c1:78:45:a5:10:02:c0:39:31:a0:1f:b4:3e:ae:78: ba:51:47:43:c4:d2:6e:3e:e8:c8:72:b9:6c:07:59: 5d:70:ea:02:97:0a:08:a5:81:77:2c:55:a6:d0:aa: 2b:ed:72:df:d1:aa:a1:8d:5b:47:10:ba:b8:af:49: b7:68:05:00:9c:e3:bf:5a:22:33:bb:d8:89:1d:4c: 0a:6b:d0:3b:05:1e:c2:47:11:30:70:cc:c4:cd:73: 70:96:0d:bb:80:30:e1:c0:ac:d6:a3:2c:68:d6:63: 43:04:41:01:1f:09:33:67:ed:a1:78:e1:00:64:0a: 8e:bb:90:e9:3a:83:68:7f:8b:a9:2f:d0:46:0b:cc: 29:34:78:81:3a:67:3d:e8:b1:14:79:bc:dd:95:42: a2:6a:04:0a:35:2d:6d:59:31:6d:fa:bf:e9:87:22: db:71:62:65:2c:75:a5:2a:77:50:3a:62:45:d1:ac: 12:c6:ef:42:a0:a4:99:30:ca:68:3c:78:28:01:23: 95:fd:9b:26:35:dc:34:92:e8:1f:7d:08:1b:7a:0c: e1:af:4f:7d:50:48:9d:f9:c4:f2:0d:14:4e:7f:ae: 61:b5:f9:f6:7d:8c:37:bc:d6:a5:51:00:77:28:c6: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:DF:96:79:56:E2:9B:DB:76:74:D7:61:23:7D:12:5E:2E:0E:F1 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7c:7e:90:c6:5f:ad:51:2b:22:6f:91:c7:65:95:a5:8b:f2: d6:74:5e:b9:10:05:63:32:4a:a9:4e:02:cd:ec:13:ac:47:96: 8f:3e:38:9b:f9:d3:ac:7e:6f:90:6f:1a:7f:50:54:91:42:a7: 47:b5:d2:7f:71:cd:65:69:49:06:4d:c0:dd:64:e1:c8:79:6e: 40:67:24:95:bd:1d:3f:fd:71:aa:96:4d:f9:84:a3:36:fd:b7: 70:99:57:0c:d2:69:51:ea:26:0d:22:5a:1d:35:8e:55:9c:a0: 52:cf:00:95:70:2a:8c:72:96:00:55:be:5a:aa:3d:72:5f:66: 19:72:43:dd:cb:bb:4f:ac:64:74:ac:0e:9e:f3:09:38:a0:04: 9b:78:85:2f:fb:4c:9a:1e:35:56:61:30:3f:66:9c:12:15:5b: 26:90:3f:fb:55:3e:e8:61:b7:2c:e6:46:2f:1a:24:d2:1a:09: d5:1e:4a:5f:d6:1a:ed:91:6e:ea:0a:f1:af:86:ea:e2:29:7f: e3:26:27:8c:09:4a:c0:6e:91:7a:dc:a6:7c:32:1f:72:2a:f4: e6:77:f7:a2:b3:e4:39:f3:a7:41:21:e9:b5:ab:bc:f0:2e:39: f5:07:55:a3:82:f0:59:46:4d:6c:70:68:e6:e3:6c:cd:d2:40: 52:d7:d9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUxMjA2MTk1MzA5WhcNMjUxMjEzMTk1MzA5WjAYMRYwFAYD VQQDEw02OTM0ODlhNi1jNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEOCX+iJit6Adzv2eJvBeEWlEALAOTGgH7Q+rni6UUdDxNJuPujIcrlsB1ld cOoClwoIpYF3LFWm0Kor7XLf0aqhjVtHELq4r0m3aAUAnOO/WiIzu9iJHUwKa9A7 BR7CRxEwcMzEzXNwlg27gDDhwKzWoyxo1mNDBEEBHwkzZ+2heOEAZAqOu5DpOoNo f4upL9BGC8wpNHiBOmc96LEUebzdlUKiagQKNS1tWTFt+r/phyLbcWJlLHWlKndQ OmJF0awSxu9CoKSZMMpoPHgoASOV/ZsmNdw0kugffQgbegzhr099UEid+cTyDRRO f65htfn2fYw3vNalUQB3KMaqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfc35Z5 VuKb23Z012EjfRJeLg7xMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYfH6Qxl+tUSsib5HHZZWli/LWdF65EAVjMkqpTgLN7BOsR5aPPjib +dOsfm+Qbxp/UFSRQqdHtdJ/cc1laUkGTcDdZOHIeW5AZySVvR0//XGqlk35hKM2 /bdwmVcM0mlR6iYNIlodNY5VnKBSzwCVcCqMcpYAVb5aqj1yX2YZckPdy7tPrGR0 rA6e8wk4oASbeIUv+0yaHjVWYTA/ZpwSFVsmkD/7VT7oYbcs5kYvGiTSGgnVHkpf 1hrtkW7qCvGvhuriKX/jJieMCUrAbpF63KZ8Mh9yKvTmd/eis+Q586dBIem1q7zw Ljn1B1WjgvBZRk1scGjm42zN0kBS19nV -----END CERTIFICATE-----Generated at Mon Dec 8 04:15:38 2025 by rpki-client