This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft File: Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json) Hash identifier: K/UiPe/or7aHIxbypTogDkKujuTqWcnn9Vv9mex10uA= Subject key identifier: B3:3D:B3:30:C3:AB:7A:2F:B5:A5:E1:02:0B:F1:D8:DB:F9:66:0A:74 Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 Certificate issuer: /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Certificate serial: 1A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft Manifest number: 1A33 Signing time: Sun 14 Dec 2025 16:13:46 +0000 Manifest this update: Sun 14 Dec 2025 16:13:46 +0000 Manifest next update: Sun 21 Dec 2025 16:13:46 +0000 Files and hashes: 1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: zZyHEuXDEEPmDkC7P3Zs54nsHCIy97R/XPJc26+Vsjo=) 2: CDD1E222775711EF95F9762FC4F9AE02.roa (hash: Aoh8CUhINnfnEgUDz3yDlYTd3FWs346Lf8sfNhEQYQg=) 3: 1AC872EC2C9611EF84447F23C4F9AE02.roa (hash: 8vP78yz7Gdq/cMm0DibfnzyJKPtLE3SNx9Zurp6T4Tw=) 4: 3D9FCF3CB74511EBB4D47C23C4F9AE02.roa (hash: OyLQ+Oe7TKMDzLYNaYKVwb7JYXn+SADf8IpDxucp7XM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6732 (0x1a4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Validity Not Before: Dec 14 16:13:46 2025 GMT Not After : Dec 21 16:13:46 2025 GMT Subject: CN=693ee23a-177b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:33:93:31:a5:41:bf:e1:48:03:4c:8c:c0: e5:fe:b3:c0:3a:b3:b7:e5:dd:a6:7a:40:c8:18:0d: 3f:31:09:1f:dd:04:84:81:37:96:0b:b6:8b:9c:37: bb:42:29:b1:ec:9a:d5:62:3a:a6:9c:b5:61:c3:5a: 23:dc:26:fd:9f:bb:7f:70:8d:36:b2:c7:b6:1b:dc: 2c:5c:fa:ce:c7:38:73:2b:95:70:ec:f1:3d:0c:28: c3:7e:42:85:56:84:bd:1e:a1:fd:99:6c:84:56:fb: ef:40:d7:86:92:4f:6e:13:8f:3d:ee:7e:fa:19:5c: 16:82:02:3e:d7:d1:61:f0:19:f3:23:d4:c3:da:64: fe:ed:96:ea:14:53:e2:c5:db:56:bd:0e:e8:40:d9: c5:e0:9c:ac:13:15:d7:9d:20:bb:a0:10:35:f8:3f: 77:11:d6:f8:74:35:62:a3:bc:f5:0d:e4:d8:34:23: df:b9:b8:a5:7d:70:e7:7d:d7:d3:03:35:40:55:0c: 51:86:19:d1:08:39:52:b7:fc:24:3d:d0:b0:d8:0a: 2f:57:36:da:e6:24:1a:61:b2:d1:d0:5d:ed:a2:15: 66:2a:fe:d9:34:96:18:5b:34:d2:42:88:57:55:04: ac:e0:c7:05:57:c4:9c:94:89:e9:81:69:7c:a8:0c: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:B3:30:C3:AB:7A:2F:B5:A5:E1:02:0B:F1:D8:DB:F9:66:0A:74 X509v3 Authority Key Identifier: keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b4:d2:7e:93:30:74:fa:3e:16:85:1a:0d:ae:cd:33:50:1b: 6d:77:76:7c:74:12:29:a8:55:e4:87:b8:77:c5:43:ac:24:93: d7:81:c7:23:84:03:6f:dd:86:9a:20:2a:66:55:40:dd:11:f9: cf:7d:7e:e9:d0:d4:8b:3a:48:84:04:2a:b1:19:6c:a5:6d:35: 00:df:76:94:81:d1:04:23:c8:be:09:6e:ff:3a:97:f2:1f:c4: 25:ac:21:a9:76:88:4d:ee:f0:6c:f2:4d:c9:a3:f2:d1:ad:05: c1:a4:32:61:97:c1:ce:0d:78:fe:6c:18:54:71:a3:90:bf:1b: 99:61:f6:10:11:58:8c:78:a4:df:0a:ab:f1:75:9a:7d:fb:d6: 5c:51:1c:f8:89:61:ab:b6:73:43:97:be:8b:6c:f0:cc:23:fb: d4:f5:80:7c:49:6a:8a:26:48:ed:53:af:f2:94:7a:1b:14:2f: 26:62:fe:b3:31:56:b2:67:84:70:69:56:b0:a7:6a:38:60:aa: c2:90:cd:d2:6f:b6:13:0a:b9:e1:6f:8b:c7:f9:ad:54:67:98: bb:db:8a:24:1c:7b:21:aa:fd:2b:b9:d3:f5:51:75:28:bf:9b: a9:be:d0:46:25:39:ad:f9:2e:e3:ef:73:b0:04:51:dc:3d:7e: 82:ad:e8:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyQUUxMTAvBgNVBAUTKDREQUE3NzZGODc5MjgwMEY0MkI4OTc4MEYzMkQ5RTcz Mjc2MTU1RDQwHhcNMjUxMjE0MTYxMzQ2WhcNMjUxMjIxMTYxMzQ2WjAYMRYwFAYD VQQDDA02OTNlZTIzYS0xNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXQzkzGlQb/hSANMjMDl/rPAOrO35d2mekDIGA0/MQkf3QSEgTeWC7aLnDe7 Qimx7JrVYjqmnLVhw1oj3Cb9n7t/cI02sse2G9wsXPrOxzhzK5Vw7PE9DCjDfkKF VoS9HqH9mWyEVvvvQNeGkk9uE4897n76GVwWggI+19Fh8BnzI9TD2mT+7ZbqFFPi xdtWvQ7oQNnF4JysExXXnSC7oBA1+D93Edb4dDVio7z1DeTYNCPfubilfXDnfdfT AzVAVQxRhhnRCDlSt/wkPdCw2AovVzba5iQaYbLR0F3tohVmKv7ZNJYYWzTSQohX VQSs4McFV8SclInpgWl8qAwxaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM9szDD q3ovtaXhAgvx2Nv5Zgp0MB8GA1UdIwQYMBaAFE2qd2+HkoAPQriXgPMtnnMnYVXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTJBRS8zMzZFRjY3NjYw RTgxMUU3QUMxNzUyNTlDNEY5QUUwMi9UYXAzYjRlU2dBOUN1SmVBOHkyZWN5ZGhW ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RhcDNiNGVTZ0E5Q3VKZUE4eTJlY3lkaFZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTJBRS8zMzZFRjY3NjYwRTgxMUU3QUMxNzUyNTlDNEY5QUUwMi9UYXAzYjRlU2dB OUN1SmVBOHkyZWN5ZGhWZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRtNJ+kzB0+j4WhRoNrs0zUBttd3Z8dBIpqFXkh7h3xUOsJJPXgccj hANv3YaaICpmVUDdEfnPfX7p0NSLOkiEBCqxGWylbTUA33aUgdEEI8i+CW7/Opfy H8QlrCGpdohN7vBs8k3Jo/LRrQXBpDJhl8HODXj+bBhUcaOQvxuZYfYQEViMeKTf CqvxdZp9+9ZcURz4iWGrtnNDl76LbPDMI/vU9YB8SWqKJkjtU6/ylHobFC8mYv6z MVayZ4RwaVawp2o4YKrCkM3Sb7YTCrnhb4vH+a1UZ5i724okHHshqv0rudP1UXUo v5upvtBGJTmt+S7j73OwBFHcPX6CrejP -----END CERTIFICATE-----Generated at Tue Dec 16 12:12:33 2025 by rpki-client