This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: szBvciStqqeA+hVoEW6td/yGl2dDtFAj3v16ROBz9Sc= Subject key identifier: C7:54:4C:C4:99:0A:96:9B:EA:B1:BB:68:3A:5D:50:97:B4:95:65:A5 Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: 0160 Signing time: Tue 23 Dec 2025 03:35:39 +0000 Manifest this update: Tue 23 Dec 2025 03:35:38 +0000 Manifest next update: Tue 30 Dec 2025 03:35:38 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: e6oS7/DUR5Gq0F+ZW47pWacy+aaZCbCcOboQRnxJFm8=) 2: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: VTVe81N4pW9ER21bMKt6sFjbfFvf/H+A7jZRhppZ5sg=) 3: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: ewzcoiNaimySvhHJOyKRgxhzXnmqi6m6Eh7TiLS4dlQ=) 4: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: YWa1hveaHvtRq7W9Wa0tUWbU8dV2y1xZGgeRGYH2cCw=) 5: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: 1Eq/vBclyWsRKM4D4caA/umlvuEELi4/AbXwk1feOGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Dec 23 03:35:38 2025 GMT Not After : Dec 30 03:35:38 2025 GMT Subject: CN=694a0e0a-6c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:27:f1:32:1a:5f:b9:1d:e4:2a:fa:ff:84: ac:97:e5:81:5f:ed:af:e5:bd:ee:68:41:4c:30:cc: 7f:c4:18:2d:d6:26:53:f8:89:fb:85:f8:4a:6c:82: ee:19:e9:cd:65:0d:8a:ee:11:9e:fa:3e:60:ae:55: 07:c9:f7:03:af:18:bf:4f:a6:95:34:6d:71:eb:f2: 15:82:08:7d:d7:ec:5a:44:9c:ca:ac:7b:64:e2:96: 13:19:4f:bf:cc:74:70:30:05:62:a0:ac:f1:ab:cc: 2c:46:5b:b6:88:2d:97:a1:aa:14:03:79:60:17:94: d4:de:3c:09:df:fa:8e:12:36:01:02:61:c3:2a:1e: 77:1c:07:11:64:a5:6b:f8:7a:25:cc:51:c6:78:65: a6:ef:70:66:67:71:ab:84:79:1a:40:be:e8:f9:4c: 08:d2:9a:c8:54:2d:e0:22:34:d2:28:0a:bb:81:00: 59:f8:41:95:45:f6:20:aa:97:26:c2:d0:0b:1e:ed: 13:bb:3a:af:19:ce:66:7e:a9:91:50:90:94:4b:87: 98:d8:5f:1f:c9:ad:62:79:f1:e1:88:13:43:7e:77: 77:9d:5b:be:7c:87:d4:93:33:16:7d:89:f6:51:19: 02:af:ac:51:85:2b:08:65:bd:b8:69:9d:6d:52:c0: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:54:4C:C4:99:0A:96:9B:EA:B1:BB:68:3A:5D:50:97:B4:95:65:A5 X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:25:33:5d:77:92:f5:9e:08:9f:02:55:2b:92:3e:20:3a:b6: 5a:04:69:90:07:e9:c2:78:cf:f3:28:51:c9:27:05:ce:eb:01: 77:c0:f3:e0:d5:af:66:13:ef:a9:b7:56:7b:c1:48:c2:71:ca: aa:02:17:e4:8e:42:86:db:25:f9:ce:b6:8d:db:11:5b:8d:f1: d5:80:60:b9:e3:2e:d0:b3:e9:2d:45:39:cf:3b:39:b2:94:31: 5f:d8:8c:37:53:95:67:68:fb:d9:45:66:87:b5:a4:68:ab:0c: e6:17:f2:0b:d0:58:2a:2a:5f:fa:74:de:10:db:7f:75:f2:3d: c5:a7:2e:ab:91:65:6f:01:6e:86:3e:a9:1c:00:49:c3:66:a6: f6:49:5c:36:01:f4:9c:91:73:14:da:07:da:6d:cc:0a:cc:70: fd:48:65:40:5f:cf:73:d0:e2:6e:d7:48:0e:17:23:16:d7:d0: 30:63:25:87:45:ef:00:98:4a:20:d7:65:2a:76:ca:4c:92:cd: e3:ac:bf:75:9f:0f:b1:ec:e3:59:67:e9:fa:73:dd:d9:eb:52: b0:6d:ae:79:30:81:dd:c7:9e:c4:23:0f:7b:b2:b1:bd:56:91: 5b:6d:a1:49:2c:ac:a0:f3:8a:da:74:9c:79:98:7d:fe:11:d7: b4:4a:d7:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUxMjIzMDMzNTM4WhcNMjUxMjMwMDMzNTM4WjAYMRYwFAYD VQQDDA02OTRhMGUwYS02YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs60n8TIaX7kd5Cr6/4Ssl+WBX+2v5b3uaEFMMMx/xBgt1iZT+In7hfhKbILu GenNZQ2K7hGe+j5grlUHyfcDrxi/T6aVNG1x6/IVggh91+xaRJzKrHtk4pYTGU+/ zHRwMAVioKzxq8wsRlu2iC2XoaoUA3lgF5TU3jwJ3/qOEjYBAmHDKh53HAcRZKVr +HolzFHGeGWm73BmZ3GrhHkaQL7o+UwI0prIVC3gIjTSKAq7gQBZ+EGVRfYgqpcm wtALHu0TuzqvGc5mfqmRUJCUS4eY2F8fya1iefHhiBNDfnd3nVu+fIfUkzMWfYn2 URkCr6xRhSsIZb24aZ1tUsDTPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdUTMSZ Cpab6rG7aDpdUJe0lWWlMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQJTNdd5L1ngifAlUrkj4gOrZaBGmQB+nCeM/zKFHJJwXO6wF3wPPg 1a9mE++pt1Z7wUjCccqqAhfkjkKG2yX5zraN2xFbjfHVgGC54y7Qs+ktRTnPOzmy lDFf2Iw3U5VnaPvZRWaHtaRoqwzmF/IL0FgqKl/6dN4Q23918j3Fpy6rkWVvAW6G PqkcAEnDZqb2SVw2AfSckXMU2gfabcwKzHD9SGVAX89z0OJu10gOFyMW19AwYyWH Re8AmEog12UqdspMks3jrL91nw+x7ONZZ+n6c93Z61Kwba55MIHdx57EIw97srG9 VpFbbaFJLKyg84radJx5mH3+Ede0Stca -----END CERTIFICATE-----Generated at Tue Dec 23 22:28:06 2025 by rpki-client