This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: UoUP/Rsopi2KEErHe5m4ZpBCDx+UA/2E/efWJ9Tv80Y= Subject key identifier: 01:E4:C3:C4:CA:16:CA:1B:04:E6:7F:DA:1E:CF:D3:54:24:9E:37:AB Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 05A3 Signing time: Sat 06 Dec 2025 21:58:25 +0000 Manifest this update: Sat 06 Dec 2025 21:58:23 +0000 Manifest next update: Sat 13 Dec 2025 21:58:23 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: pYRvIwkhzrAwKi+S8WKN7h45V4UVWdf9G65OuHdixRA=) 2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: S07N/8Ez+PeXS+KaKtYo/aw1ppaoCrg3SZIV/r7xqcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: Dec 6 21:58:23 2025 GMT Not After : Dec 13 21:58:23 2025 GMT Subject: CN=6934a700-f0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:92:5b:28:d6:25:f0:7d:92:02:9e:87:49: d6:09:11:23:8e:32:3a:4a:89:8a:b0:5b:90:49:a4: fb:68:13:73:83:db:30:ff:69:d3:c8:3d:27:4b:24: a1:17:60:18:6e:a5:33:ed:97:95:6d:ec:b6:a9:a2: 2b:16:dd:a0:64:d8:5d:89:de:b7:5b:2f:fa:83:b9: 33:fe:38:c0:64:eb:a8:c4:b0:53:56:00:64:37:14: 15:50:2a:07:3e:19:f4:6f:f3:c3:61:41:2b:2e:46: 09:9d:53:d7:52:1b:22:aa:ef:d1:78:3c:19:7b:8c: 8f:2a:87:ab:5a:83:4c:af:82:e7:8d:9c:46:06:83: 9e:aa:59:a9:18:d4:03:4e:02:11:46:a5:8f:1f:f2: 35:e9:8b:66:81:b3:95:13:16:b4:ed:27:79:c8:9a: 3c:31:ba:6a:05:43:18:28:40:c0:9e:8b:66:24:0b: 53:cb:15:de:ba:92:d5:d2:e3:85:b9:5a:a7:29:b7: 3b:2a:cb:a7:9a:6d:2d:7b:eb:66:4a:3e:50:18:75: 6d:5a:8b:02:a5:44:7d:19:0b:19:84:7a:f4:b6:6c: 7e:31:db:72:c5:5f:f4:39:aa:13:da:b3:6d:2b:16: 17:0c:02:78:11:bb:9f:c3:9b:b0:67:89:0b:38:d7: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:C3:C4:CA:16:CA:1B:04:E6:7F:DA:1E:CF:D3:54:24:9E:37:AB X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:da:3e:12:10:be:73:6b:f4:70:5d:70:36:c1:d3:7c:5b:71: 0a:86:59:29:c6:c4:d4:a4:ff:e1:7f:f9:00:98:95:0b:74:3e: b2:aa:de:2a:88:41:b9:19:16:8e:cb:37:5b:1d:82:d0:cd:fe: a7:c5:df:ae:b3:28:86:b8:97:26:8d:0f:23:82:25:0c:3e:2b: ec:e0:e5:40:33:e0:cf:b1:a6:db:2c:1a:bf:8f:52:f9:7b:18: bd:41:d6:5d:ea:e9:90:c7:1a:18:45:e8:12:6a:54:58:dc:70: 5b:6a:c5:a4:21:9a:f7:c8:2f:84:46:92:87:57:5b:3f:a6:46: 11:4e:ec:f1:61:ff:56:d9:dd:96:fb:52:83:14:9c:3b:ef:b3: 9a:31:69:22:bc:69:dd:d2:01:9b:71:5e:46:c1:fb:32:eb:1a: 1f:ae:b8:73:25:98:36:31:1a:d7:d8:b0:b6:2d:57:ab:6d:43: bc:eb:0f:ae:20:ba:11:73:cc:40:7a:8d:4a:e4:74:ef:5d:7a: 4d:47:74:cb:2f:93:e2:13:18:e7:a8:d8:c0:61:6d:6c:9a:eb: 48:86:d8:33:41:53:86:3b:38:54:40:40:1c:ee:e5:26:d6:7e: 75:2a:9b:73:5c:53:3d:64:e1:70:8f:4a:ca:ae:f4:13:dc:15: cb:1a:56:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjUxMjA2MjE1ODIzWhcNMjUxMjEzMjE1ODIzWjAYMRYwFAYD VQQDEw02OTM0YTcwMC1mMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b+SWyjWJfB9kgKeh0nWCREjjjI6SomKsFuQSaT7aBNzg9sw/2nTyD0nSySh F2AYbqUz7ZeVbey2qaIrFt2gZNhdid63Wy/6g7kz/jjAZOuoxLBTVgBkNxQVUCoH Phn0b/PDYUErLkYJnVPXUhsiqu/ReDwZe4yPKoerWoNMr4LnjZxGBoOeqlmpGNQD TgIRRqWPH/I16YtmgbOVExa07Sd5yJo8MbpqBUMYKEDAnotmJAtTyxXeupLV0uOF uVqnKbc7Ksunmm0te+tmSj5QGHVtWosCpUR9GQsZhHr0tmx+MdtyxV/0OaoT2rNt KxYXDAJ4Ebufw5uwZ4kLONe3nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHkw8TK FsobBOZ/2h7P01QknjerMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ2j4SEL5za/RwXXA2wdN8W3EKhlkpxsTUpP/hf/kAmJULdD6yqt4q iEG5GRaOyzdbHYLQzf6nxd+usyiGuJcmjQ8jgiUMPivs4OVAM+DPsabbLBq/j1L5 exi9QdZd6umQxxoYRegSalRY3HBbasWkIZr3yC+ERpKHV1s/pkYRTuzxYf9W2d2W +1KDFJw777OaMWkivGnd0gGbcV5Gwfsy6xofrrhzJZg2MRrX2LC2LVerbUO86w+u ILoRc8xAeo1K5HTvXXpNR3TLL5PiExjnqNjAYW1smutIhtgzQVOGOzhUQEAc7uUm 1n51KptzXFM9ZOFwj0rKrvQT3BXLGlbx -----END CERTIFICATE-----Generated at Sun Dec 7 07:23:11 2025 by rpki-client