This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft File: TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json) Hash identifier: 29sClbZeL6nN6/nbPp68dCvOAToSjaY3XPPNwwTabJI= Subject key identifier: 67:3A:B1:D2:89:79:A1:E0:E8:AB:18:3A:A5:0A:CB:ED:86:E8:EE:B7 Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft Manifest number: 0773 Signing time: Mon 22 Dec 2025 20:54:01 +0000 Manifest this update: Mon 22 Dec 2025 20:54:01 +0000 Manifest next update: Mon 29 Dec 2025 20:54:01 +0000 Files and hashes: 1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: p90bZ8MF/CJkVt1OigeJo/HrTsVWKTpfa4JejGVmSn0=) 2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: 8umaFtJV5TgBXJUzmNOXuQWmgpWLTZbpyNtna3LX4IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Validity Not Before: Dec 22 20:54:01 2025 GMT Not After : Dec 29 20:54:01 2025 GMT Subject: CN=6949afe9-46ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:61:16:80:f8:ba:6f:04:17:a1:c4:40:1e: a7:40:80:d6:82:4d:ca:a0:be:87:1d:36:2d:f1:ef: 7f:98:86:4a:1e:a1:50:91:9a:d1:0b:51:a0:36:bd: 0e:9d:72:5c:f6:ed:bd:63:3e:ce:fd:b1:d9:d0:2e: 7c:9a:9b:ce:5f:17:5d:1a:f7:db:a1:a0:50:e7:3e: 13:80:c4:a9:af:59:be:ff:07:58:e0:dc:fe:2d:c6: 24:4c:11:64:a7:a8:f1:d5:3a:e5:15:e5:4a:3f:cf: 31:4f:10:65:fb:45:07:fd:4b:ef:e8:c1:d1:b4:d6: 50:99:c7:8b:cb:99:5b:2e:05:0c:7b:a8:b5:fe:79: fd:0d:15:6f:d9:fd:1b:5a:5f:94:df:e6:0a:82:9b: f9:5a:fe:45:f5:4e:07:ad:c8:4a:ef:40:6b:b9:04: cb:c2:27:d6:7f:88:bd:10:13:c3:e6:27:25:4f:cf: 19:91:d8:77:83:42:4b:6c:8e:10:27:69:74:bd:34: 31:40:42:99:db:0e:58:00:4d:1b:7e:8b:6c:6d:20: ed:4e:81:98:90:76:90:18:94:56:9c:1c:42:71:ab: 8f:7d:c2:4f:ee:a9:c9:b9:22:a3:fd:17:39:67:aa: 9c:72:80:4b:c2:a8:32:68:6a:5c:e3:ea:e8:91:48: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3A:B1:D2:89:79:A1:E0:E8:AB:18:3A:A5:0A:CB:ED:86:E8:EE:B7 X509v3 Authority Key Identifier: keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:86:ea:b3:07:86:9f:72:e6:75:73:76:92:43:25:6d:d6:bb: 62:91:66:63:21:75:5a:81:2b:df:49:30:6c:85:3c:bc:24:18: e5:19:4e:90:16:e0:40:b5:d5:50:a2:72:d3:4f:e7:76:b7:c0: 3c:18:7b:71:44:eb:c5:9d:9c:8b:92:b9:a3:6d:29:0e:f4:c4: 6b:ae:99:e8:20:86:3c:c9:09:9b:0a:63:45:6f:66:be:76:cf: f4:65:e0:48:ce:a7:eb:16:a9:d9:46:ed:f8:b0:7e:f0:d3:c5: a9:c7:8a:5b:56:e8:18:d2:77:89:0e:92:9c:19:35:19:6f:44: be:d3:47:a6:7e:2f:2e:a7:08:6b:3c:95:15:00:3e:88:40:f8: 90:6a:d5:53:22:8e:87:e0:bf:3c:73:93:4c:ed:70:21:2b:36: 29:a0:aa:89:6d:6e:67:25:29:59:44:72:74:92:cf:cb:e7:0a: 1c:1b:c9:a9:a9:66:4e:ec:d4:da:42:5d:a5:42:a5:54:d8:ce: 7b:20:38:61:d2:cd:fd:d6:5c:3d:ee:55:42:d6:7f:86:5b:3d: 30:5f:8b:57:22:d1:64:f7:13:03:ff:11:39:47:16:f2:f6:38: 12:c4:bb:26:8e:95:26:06:dc:e6:eb:b5:b3:53:e6:31:3c:91: cd:6b:19:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD NDJEM0I4QUYwHhcNMjUxMjIyMjA1NDAxWhcNMjUxMjI5MjA1NDAxWjAYMRYwFAYD VQQDDA02OTQ5YWZlOS00NmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskphFoD4um8EF6HEQB6nQIDWgk3KoL6HHTYt8e9/mIZKHqFQkZrRC1GgNr0O nXJc9u29Yz7O/bHZ0C58mpvOXxddGvfboaBQ5z4TgMSpr1m+/wdY4Nz+LcYkTBFk p6jx1TrlFeVKP88xTxBl+0UH/Uvv6MHRtNZQmceLy5lbLgUMe6i1/nn9DRVv2f0b Wl+U3+YKgpv5Wv5F9U4HrchK70BruQTLwifWf4i9EBPD5iclT88Zkdh3g0JLbI4Q J2l0vTQxQEKZ2w5YAE0bfotsbSDtToGYkHaQGJRWnBxCcauPfcJP7qnJuSKj/Rc5 Z6qccoBLwqgyaGpc4+rokUiq/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc6sdKJ eaHg6KsYOqUKy+2G6O63MB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1 SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARhuqzB4afcuZ1c3aSQyVt1rtikWZjIXVagSvfSTBshTy8JBjlGU6Q FuBAtdVQonLTT+d2t8A8GHtxROvFnZyLkrmjbSkO9MRrrpnoIIY8yQmbCmNFb2a+ ds/0ZeBIzqfrFqnZRu34sH7w08Wpx4pbVugY0neJDpKcGTUZb0S+00emfi8upwhr PJUVAD6IQPiQatVTIo6H4L88c5NM7XAhKzYpoKqJbW5nJSlZRHJ0ks/L5wocG8mp qWZO7NTaQl2lQqVU2M57IDhh0s391lw97lVC1n+GWz0wX4tXItFk9xMD/xE5Rxby 9jgSxLsmjpUmBtzm67WzU+YxPJHNaxkH -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:53 2025 by rpki-client