This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: yk/w0qV3Lw5GAOLT6BJsyUN7H8FzUb20ADSOM4XZxpE= Subject key identifier: 5C:E7:01:F1:FD:4A:C4:06:49:79:C4:C4:00:1A:DD:6B:ED:D4:70:AC Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 0333 Signing time: Sun 21 Dec 2025 00:16:44 +0000 Manifest this update: Sun 21 Dec 2025 00:16:43 +0000 Manifest next update: Sun 28 Dec 2025 00:16:43 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: AZN+nR7BwR1picpZjEzJbVOAyN9BacaU0sDNr2hJ9R4=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: pBwxys1yivtkEToGBFIFFmXXN52OvE5FFgRhewDkeko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Dec 21 00:16:43 2025 GMT Not After : Dec 28 00:16:43 2025 GMT Subject: CN=69473c6b-94f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:3e:5d:b7:6e:81:87:60:1e:fc:48:59:3a: 62:d4:07:d2:bb:e0:1d:3a:d4:35:2f:97:a9:9e:9a: 19:33:48:44:11:60:99:68:a8:c5:f1:2c:e8:f3:65: 7f:64:3a:14:65:61:f4:0e:d8:ff:92:82:0c:83:a4: ae:e6:06:8a:15:e6:3b:2b:ce:29:20:c0:0b:c0:ce: e9:bd:38:91:39:fc:81:27:55:ae:e3:02:04:72:33: bd:68:03:df:41:4a:c5:aa:a8:6d:84:ed:64:2d:1c: 98:08:30:4d:d6:62:96:c0:f6:a5:ff:2b:0c:9f:d5: 19:99:08:89:64:65:24:0a:99:2f:51:7b:7d:88:a9: 6a:6d:8b:64:18:15:0b:81:c8:a0:21:be:6b:3c:f5: a4:ce:53:43:f9:8d:6e:86:53:28:b1:85:ed:ca:99: d0:67:f4:70:75:05:96:99:0a:c8:80:d4:74:95:55: e1:30:d6:c8:15:e2:76:c7:aa:c7:25:2f:c2:78:6b: de:2a:15:dc:dd:f2:bd:f1:4b:19:13:11:e4:f4:48: 5c:03:a7:28:a4:d0:6e:47:08:67:f1:47:d7:e8:8d: e7:e0:f1:a5:1f:b5:71:dd:3e:42:1f:cc:06:b0:cd: 9d:f1:84:e5:f9:a2:24:20:5a:f0:e8:02:6c:f6:92: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E7:01:F1:FD:4A:C4:06:49:79:C4:C4:00:1A:DD:6B:ED:D4:70:AC X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:59:ad:57:71:56:40:dd:63:da:0d:c5:07:6b:3b:ee:e9: 69:fa:d1:d1:ce:94:8b:ee:4f:23:24:e1:f7:24:5b:e9:5b:84: 75:88:0d:b2:97:5b:1e:35:9b:d9:e9:22:ec:98:56:5b:cb:c6: f0:8e:3d:3c:a5:09:c8:95:eb:a2:90:ed:d2:2c:ca:05:6d:ae: a5:13:51:be:45:2f:68:0e:50:1b:22:2d:79:56:87:a7:ed:c0: 3a:ff:c7:08:23:ba:71:fb:97:89:19:cd:35:31:6f:2d:bd:96: b1:6d:77:ee:38:22:7d:4d:4b:76:2f:a6:70:d8:d2:68:ec:ba: 7c:0b:ee:7f:7c:3e:ab:21:9e:b2:6e:14:63:b3:76:55:90:ad: 99:a9:7b:54:b5:19:51:a2:73:13:5f:7d:dc:b0:7d:fe:09:6c: bd:16:4e:13:32:87:16:d6:7e:e5:60:b4:81:63:45:8e:24:41: 90:b2:94:7a:ff:57:94:16:dc:ca:fc:b6:7b:d9:9d:cf:5b:69: 86:a2:66:c9:fc:9b:dd:4b:fc:44:4f:26:8f:2b:fa:6b:c7:a4: 9b:e5:2a:0a:71:1a:62:b8:7d:df:60:af:c9:c1:07:09:48:43: 2d:71:33:78:17:db:68:a3:ac:7f:3b:14:3a:2f:59:20:c5:98: 5f:d9:48:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUxMjIxMDAxNjQzWhcNMjUxMjI4MDAxNjQzWjAYMRYwFAYD VQQDDA02OTQ3M2M2Yi05NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaQ+XbdugYdgHvxIWTpi1AfSu+AdOtQ1L5epnpoZM0hEEWCZaKjF8Szo82V/ ZDoUZWH0Dtj/koIMg6Su5gaKFeY7K84pIMALwM7pvTiROfyBJ1Wu4wIEcjO9aAPf QUrFqqhthO1kLRyYCDBN1mKWwPal/ysMn9UZmQiJZGUkCpkvUXt9iKlqbYtkGBUL gcigIb5rPPWkzlND+Y1uhlMosYXtypnQZ/RwdQWWmQrIgNR0lVXhMNbIFeJ2x6rH JS/CeGveKhXc3fK98UsZExHk9EhcA6copNBuRwhn8UfX6I3n4PGlH7Vx3T5CH8wG sM2d8YTl+aIkIFrw6AJs9pI1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFznAfH9 SsQGSXnExAAa3Wvt1HCsMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk9FmtV3FWQN1j2g3FB2s77ulp+tHRzpSL7k8jJOH3JFvpW4R1iA2y l1seNZvZ6SLsmFZby8bwjj08pQnIleuikO3SLMoFba6lE1G+RS9oDlAbIi15Voen 7cA6/8cII7px+5eJGc01MW8tvZaxbXfuOCJ9TUt2L6Zw2NJo7Lp8C+5/fD6rIZ6y bhRjs3ZVkK2ZqXtUtRlRonMTX33csH3+CWy9Fk4TMocW1n7lYLSBY0WOJEGQspR6 /1eUFtzK/LZ72Z3PW2mGombJ/JvdS/xETyaPK/prx6Sb5SoKcRpiuH3fYK/JwQcJ SEMtcTN4F9too6x/OxQ6L1kgxZhf2Uhc -----END CERTIFICATE-----Generated at Sun Dec 21 02:47:40 2025 by rpki-client