This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: n3vJ7TQaDPcbPnLcw/NAJdXMzXdP+y3d2zGzCBEeTq0= Subject key identifier: 1F:BD:AC:AB:2E:60:9E:94:B6:09:B8:C2:69:B8:6F:2F:CB:B2:E5:68 Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B6B Signing time: Mon 22 Dec 2025 18:40:57 +0000 Manifest this update: Mon 22 Dec 2025 18:40:57 +0000 Manifest next update: Mon 29 Dec 2025 18:40:57 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: BAb9+qZRj0z6BNgpvWSHZi6oywOXZkCjHGBlTw8Qhdg=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: eH7lKxC1fSAwRwADOegzWnR0eN8xp2QzqcA2Q9e7qkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2944 (0xb80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Dec 22 18:40:57 2025 GMT Not After : Dec 29 18:40:57 2025 GMT Subject: CN=694990b9-b339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:bd:dd:e1:ac:f8:1c:20:17:ff:05:97:c1: 8c:40:73:e9:c8:14:21:07:a6:d5:dd:64:c9:68:e6: 75:32:15:1c:bd:ae:08:5a:95:f6:4b:ad:c5:38:28: 46:5a:86:eb:2d:cd:82:bf:18:e0:da:1a:0d:b2:59: c9:10:3e:31:fe:22:06:09:f5:8f:f0:b5:27:b8:31: 28:e3:6b:0a:45:b6:a5:d8:bd:27:f4:a0:b7:bf:55: 21:00:11:15:95:1f:f1:65:37:3f:fd:5a:69:a5:5b: cd:91:44:13:65:b6:67:2e:86:11:37:f8:3a:7c:a7: 82:90:3e:d6:38:c8:06:8c:5b:84:c0:ab:2c:a7:f5: 2e:33:04:75:76:83:5b:a2:92:22:c9:5d:ab:52:b4: e8:4e:f6:8b:78:8b:fc:23:86:3b:05:31:ad:c3:82: 5c:db:fa:fb:ea:ef:89:d9:e6:d2:ad:8b:10:d1:50: 81:56:b8:8b:8c:a7:4e:55:62:e4:c4:20:63:0a:f8: 37:22:f9:7c:69:60:a6:76:c9:a7:af:4c:b6:05:73: 14:04:85:08:b1:18:9c:70:9f:99:71:ee:7e:13:30: 18:42:08:c0:da:fc:57:20:71:54:bd:ff:cd:e0:19: cb:db:75:4e:f7:ca:73:d9:30:9f:2a:3a:63:73:4a: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:AC:AB:2E:60:9E:94:B6:09:B8:C2:69:B8:6F:2F:CB:B2:E5:68 X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c9:b8:fc:a6:2e:d7:1c:3b:e2:66:87:eb:ba:9e:13:c5:95: e9:f0:1e:12:bf:5b:9c:59:52:bf:36:7b:4f:a4:14:64:06:e5: c6:9d:72:41:ed:c0:e1:83:55:76:b6:55:fb:b8:5e:9a:d2:f2: d1:c3:8f:58:ba:ba:68:1a:59:57:2f:91:3c:d2:8b:6e:28:bb: b8:1f:f8:79:51:ce:e3:10:d0:c0:94:98:72:66:66:f2:e8:4c: af:13:f2:fa:35:85:e3:1d:64:1d:24:02:35:50:fd:e4:ea:80: e2:6a:6b:27:03:f8:35:04:46:ad:b1:da:3e:ae:f1:3c:2c:79: 9e:75:73:cb:02:c6:cb:9c:04:ee:37:25:85:6e:82:71:72:41: 06:50:8c:75:a9:aa:15:71:2e:f5:04:d4:c5:ee:c5:be:ae:01: 7c:39:e2:d8:37:f6:6b:d3:55:ee:98:32:86:9f:fd:95:95:cf: c7:8d:2e:ec:60:55:cb:fd:fd:f8:9c:07:d7:05:91:39:37:1f: 33:41:ee:9c:6d:4c:df:8c:5b:03:3c:7a:46:1c:cc:47:b2:63: b2:83:bd:8d:c3:4d:b6:cc:f9:2a:15:2b:50:c8:4d:35:52:70: f0:7f:17:ea:6a:fa:ca:5c:c1:50:bb:65:8e:42:b4:21:ed:35: 3c:a8:1d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUxMjIyMTg0MDU3WhcNMjUxMjI5MTg0MDU3WjAYMRYwFAYD VQQDDA02OTQ5OTBiOS1iMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1693eGs+BwgF/8Fl8GMQHPpyBQhB6bV3WTJaOZ1MhUcva4IWpX2S63FOChG WobrLc2Cvxjg2hoNslnJED4x/iIGCfWP8LUnuDEo42sKRbal2L0n9KC3v1UhABEV lR/xZTc//VpppVvNkUQTZbZnLoYRN/g6fKeCkD7WOMgGjFuEwKssp/UuMwR1doNb opIiyV2rUrToTvaLeIv8I4Y7BTGtw4Jc2/r76u+J2ebSrYsQ0VCBVriLjKdOVWLk xCBjCvg3Ivl8aWCmdsmnr0y2BXMUBIUIsRiccJ+Zce5+EzAYQgjA2vxXIHFUvf/N 4BnL23VO98pz2TCfKjpjc0qIKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+9rKsu YJ6Utgm4wmm4by/LsuVoMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeybj8pi7XHDviZofrup4TxZXp8B4Sv1ucWVK/NntPpBRkBuXGnXJB 7cDhg1V2tlX7uF6a0vLRw49YurpoGllXL5E80otuKLu4H/h5Uc7jENDAlJhyZmby 6EyvE/L6NYXjHWQdJAI1UP3k6oDiamsnA/g1BEatsdo+rvE8LHmedXPLAsbLnATu NyWFboJxckEGUIx1qaoVcS71BNTF7sW+rgF8OeLYN/Zr01XumDKGn/2Vlc/HjS7s YFXL/f34nAfXBZE5Nx8zQe6cbUzfjFsDPHpGHMxHsmOyg72Nw022zPkqFStQyE01 UnDwfxfqavrKXMFQu2WOQrQh7TU8qB0k -----END CERTIFICATE-----Generated at Tue Dec 23 20:03:59 2025 by rpki-client