This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft File: tGgNFzsLuF80uLi77cMmOXlY2O4.mft (raw, json) Hash identifier: Qjnx7N1wYI84xxd/oc7sTiZKacilRdxfwfatnnJpL40= Subject key identifier: 57:FB:2E:5A:7D:E2:26:79:B9:B5:6F:24:1E:54:35:53:63:E5:E5:41 Authority key identifier: B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE Certificate issuer: /CN=A913F474/serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft Manifest number: 22 Signing time: Tue 23 Dec 2025 06:35:17 +0000 Manifest this update: Tue 23 Dec 2025 06:35:17 +0000 Manifest next update: Tue 30 Dec 2025 06:35:17 +0000 Files and hashes: 1: tGgNFzsLuF80uLi77cMmOXlY2O4.crl (hash: mDQQNY5ckhP8/413eWm+PU0LPGTPQqUaOc9uNT7Dku0=) 2: F265F888AE6C11F0B33E1454C4F9AE02.roa (hash: PwkeWMT2PFnmytpJenwW/pPPAGqdRGXyqS8HBrt6Ivw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F474, serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Validity Not Before: Dec 23 06:35:17 2025 GMT Not After : Dec 30 06:35:17 2025 GMT Subject: CN=694a3825-e1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:7c:2c:2f:6c:76:ad:a1:f2:29:07:3a:de: 79:0f:88:a5:e7:37:f0:24:40:ca:05:48:a4:6f:e0: f4:df:29:f9:c5:6f:7e:91:5a:0a:e2:48:10:b2:25: 56:99:1d:d7:e7:27:3d:bf:e9:6a:ed:5f:05:66:f5: a6:64:b9:f5:a7:8d:05:d6:9c:f0:47:86:e8:d1:ea: 93:09:93:52:e3:df:ca:a8:4f:6e:5e:36:e5:af:64: ac:50:d2:0f:03:39:4d:56:2a:87:19:43:ae:cc:c5: 0b:d9:49:1b:98:81:d5:f0:93:87:43:8d:ba:08:10: 7e:c4:c2:85:2f:89:e8:50:74:38:2a:dd:e1:7d:81: 28:2a:08:91:15:d8:cb:82:61:1d:5b:7d:18:6e:04: b8:79:50:f6:77:35:5f:b5:2b:a6:5b:f0:61:d4:3a: 27:87:2b:c4:3a:27:7c:33:3b:0f:f9:bd:7f:25:5c: 08:20:80:7b:9f:67:25:36:bb:10:e7:a9:fa:11:c4: 6c:b1:1d:a4:ba:48:1c:15:f3:9e:f1:a4:b9:dc:6a: 93:22:ee:ee:c6:26:e3:00:54:75:c2:c8:54:cc:e7: ed:81:1a:c2:d9:92:50:da:c5:b7:20:df:16:f3:2a: c9:9a:c2:42:79:e6:8c:e9:b1:61:1f:e9:87:aa:12: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FB:2E:5A:7D:E2:26:79:B9:B5:6F:24:1E:54:35:53:63:E5:E5:41 X509v3 Authority Key Identifier: keyid:B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:42:0f:31:e4:19:8a:3b:91:4b:40:51:89:54:d9:2f:2e:59: d0:4a:cc:45:0f:9e:80:ae:55:e2:32:d3:88:11:02:52:c6:46: 4f:fc:2b:79:f4:8c:5d:f1:3a:16:2e:76:7e:bd:d9:b0:31:3c: ea:97:e9:ec:b6:2b:c2:1a:e9:3a:e1:a7:fe:5d:f9:7b:c5:47: 0c:ef:4c:6b:f9:d1:21:e4:f7:92:b3:02:c0:c0:05:94:5f:95: d3:d2:0e:ee:82:ca:d8:1e:f9:a0:94:29:d3:bc:2d:cf:dd:1d: d5:2a:3b:d4:e1:f8:11:c2:fc:d1:8f:2e:6f:3f:3f:72:34:91: 75:f8:cf:8b:03:35:43:88:6f:72:5b:f4:8c:82:f3:a9:80:be: cf:ba:44:b0:06:37:79:12:2d:fb:02:7b:b3:4e:ed:10:ed:bd: cc:a2:1b:8c:c5:c9:1f:b7:13:26:35:59:62:fe:e4:84:94:44: 25:ea:fb:11:7e:0d:05:b8:bc:6e:74:c8:36:a4:23:90:08:73: 10:5a:1e:be:bf:69:d2:3b:a2:08:09:c0:df:37:c5:68:5a:04: 79:56:3f:cd:34:0f:e4:d0:a5:c5:04:d7:12:d5:d1:32:97:a8: 40:b6:b1:be:cf:50:fc:50:1e:38:eb:19:ce:b7:97:12:9a:69: b1:7f:6f:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjQ3NDExMC8GA1UEBRMoQjQ2ODBEMTczQjBCQjg1RjM0QjhCOEJCRURDMzI2Mzk3 OTU4RDhFRTAeFw0yNTEyMjMwNjM1MTdaFw0yNTEyMzAwNjM1MTdaMBgxFjAUBgNV BAMMDTY5NGEzODI1LWUxZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeWnwsL2x2raHyKQc63nkPiKXnN/AkQMoFSKRv4PTfKfnFb36RWgriSBCyJVaZ HdfnJz2/6WrtXwVm9aZkufWnjQXWnPBHhujR6pMJk1Lj38qoT25eNuWvZKxQ0g8D OU1WKocZQ67MxQvZSRuYgdXwk4dDjboIEH7EwoUviehQdDgq3eF9gSgqCJEV2MuC YR1bfRhuBLh5UPZ3NV+1K6Zb8GHUOieHK8Q6J3wzOw/5vX8lXAgggHufZyU2uxDn qfoRxGyxHaS6SBwV857xpLncapMi7u7GJuMAVHXCyFTM5+2BGsLZklDaxbcg3xbz KsmawkJ55ozpsWEf6YeqEulfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV/suWn3i Jnm5tW8kHlQ1U2Pl5UEwHwYDVR0jBBgwFoAUtGgNFzsLuF80uLi77cMmOXlY2O4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGNDc0LzEzRDZCNEZFQUU2 QzExRjA4Nzk0QkI1MkM0RjlBRTAyL3RHZ05GenNMdUY4MHVMaTc3Y01tT1hsWTJP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEdnTkZ6c0x1RjgwdUxpNzdjTW1PWGxZMk80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG NDc0LzEzRDZCNEZFQUU2QzExRjA4Nzk0QkI1MkM0RjlBRTAyL3RHZ05GenNMdUY4 MHVMaTc3Y01tT1hsWTJPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHFCDzHkGYo7kUtAUYlU2S8uWdBKzEUPnoCuVeIy04gRAlLGRk/8K3n0 jF3xOhYudn692bAxPOqX6ey2K8Ia6Trhp/5d+XvFRwzvTGv50SHk95KzAsDABZRf ldPSDu6Cytge+aCUKdO8Lc/dHdUqO9Th+BHC/NGPLm8/P3I0kXX4z4sDNUOIb3Jb 9IyC86mAvs+6RLAGN3kSLfsCe7NO7RDtvcyiG4zFyR+3EyY1WWL+5ISURCXq+xF+ DQW4vG50yDakI5AIcxBaHr6/adI7oggJwN83xWhaBHlWP800D+TQpcUE1xLV0TKX qEC2sb7PUPxQHjjrGc63lxKaabF/b04= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:20 2025 by rpki-client