This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json) Hash identifier: z1EL54firzkHOjMZz92LqvKSV0Bg10pSn1ctAwDgUM4= Subject key identifier: B0:87:0B:D9:B7:32:AE:3E:BE:AF:00:87:FA:F0:6F:CD:C2:3D:6E:FE Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft Manifest number: 1E Signing time: Tue 23 Dec 2025 06:37:52 +0000 Manifest this update: Tue 23 Dec 2025 06:37:51 +0000 Manifest next update: Tue 30 Dec 2025 06:37:51 +0000 Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: Vl8Wtr4b0veYqG9sEqlrvyKDhIlQAidVQTRiunSx/rU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Validity Not Before: Dec 23 06:37:51 2025 GMT Not After : Dec 30 06:37:51 2025 GMT Subject: CN=694a38c0-337d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:58:ce:65:61:a6:bb:c6:8f:e3:e6:09:7f: 1d:0a:5f:7d:08:a0:2d:02:fb:29:80:09:ff:8e:c2: f9:77:95:a0:5f:40:9a:5f:28:c1:bd:09:ee:95:6b: dd:9c:ea:22:d6:b8:5d:93:94:18:b8:ac:a5:bc:b2: 56:7a:95:b3:60:72:d5:0a:37:66:65:50:00:7f:60: 07:b8:8f:ec:7e:60:47:ed:8b:83:ab:87:69:26:13: ca:25:7d:b4:f6:80:84:ec:19:99:80:b7:cc:31:91: 53:a6:4f:84:d1:7e:06:08:80:86:6b:ed:d6:73:45: 07:0f:fa:51:42:23:97:78:f5:c9:90:c1:91:ed:84: 19:87:02:79:5a:d5:0c:05:73:3c:61:00:cb:88:9e: 5a:f5:70:6f:74:65:1b:a4:05:4e:62:04:d2:82:3e: 4d:5b:08:5d:ec:20:4e:0f:50:fa:2b:a9:7c:95:57: c4:b7:91:3d:d8:6a:6a:de:01:0a:5e:44:0b:9a:a3: f0:07:e7:6c:a7:b6:f7:fa:e3:7a:82:4c:05:6e:6c: 68:f6:4b:b2:d5:8b:84:2c:9a:12:80:6a:7c:cb:2a: af:0f:57:58:e9:b3:72:f6:56:f1:a5:15:88:da:98: 3f:16:e7:97:1f:5c:cc:c0:b3:2d:cf:3d:2e:ca:c6: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:87:0B:D9:B7:32:AE:3E:BE:AF:00:87:FA:F0:6F:CD:C2:3D:6E:FE X509v3 Authority Key Identifier: keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7f:27:d1:24:58:f9:3e:28:07:6d:2c:ab:a9:7c:58:c7:fd: 02:cc:7b:21:fe:2e:91:80:da:52:a4:95:29:5b:94:96:84:47: 65:04:5b:b1:8d:7b:cb:01:79:35:43:44:fa:61:41:ae:ec:de: c4:cb:b7:4f:19:3d:75:50:df:db:d6:7b:02:46:c1:33:34:8c: bd:59:80:8f:fd:a1:4a:db:c8:ef:17:72:c0:28:3f:6d:24:57: d2:74:f4:48:0a:4c:50:42:36:d6:74:e7:b9:cd:ac:65:39:89: 61:6c:fb:6c:62:84:59:33:4d:f8:a5:11:6b:b5:c6:53:b2:2b: 97:f5:64:d9:2d:90:ed:b2:c8:1b:37:82:ac:20:10:e8:aa:21: ba:d7:8f:2b:bc:1f:e5:ee:7e:6d:25:2d:e9:1c:8a:f9:df:d9: a6:0a:65:19:74:9c:23:d1:d9:22:de:40:33:3a:51:92:06:b2: 31:93:a5:01:f8:df:2b:f1:50:ac:d5:7b:af:35:1c:04:4f:41: 99:1d:1e:83:b8:be:c1:92:2c:00:a4:51:31:ee:96:df:45:4c: 8b:1f:90:2c:b5:c3:b5:40:f1:c2:df:2d:f3:26:e9:51:00:4d: 79:44:e4:f6:a9:66:8f:38:c5:6d:5d:4e:90:aa:2c:9d:9d:af: 5f:8f:14:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEZGRDExMC8GA1UEBRMoQjY3Q0Q0RjMwQURDMTk1MEI5MkRDMzQ5OEY5QjUzNTI2 NjA1QkY3NjAeFw0yNTEyMjMwNjM3NTFaFw0yNTEyMzAwNjM3NTFaMBgxFjAUBgNV BAMMDTY5NGEzOGMwLTMzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuhVjOZWGmu8aP4+YJfx0KX30IoC0C+ymACf+Owvl3laBfQJpfKMG9Ce6Va92c 6iLWuF2TlBi4rKW8slZ6lbNgctUKN2ZlUAB/YAe4j+x+YEfti4Orh2kmE8olfbT2 gITsGZmAt8wxkVOmT4TRfgYIgIZr7dZzRQcP+lFCI5d49cmQwZHthBmHAnla1QwF czxhAMuInlr1cG90ZRukBU5iBNKCPk1bCF3sIE4PUPorqXyVV8S3kT3YamreAQpe RAuao/AH52yntvf643qCTAVubGj2S7LVi4QsmhKAanzLKq8PV1jps3L2VvGlFYja mD8W55cfXMzAsy3PPS7KxjLPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsIcL2bcy rj6+rwCH+vBvzcI9bv4wHwYDVR0jBBgwFoAUtnzU8wrcGVC5LcNJj5tTUmYFv3Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RkZEL0VFRTY4QzY0QjQ4 ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZDNUxjTkpqNXRUVW1ZRnYz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdG56VTh3cmNHVkM1TGNOSmo1dFRVbVlGdjNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RkZEL0VFRTY4QzY0QjQ4ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZD NUxjTkpqNXRUVW1ZRnYzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1/J9EkWPk+KAdtLKupfFjH/QLMeyH+LpGA2lKklSlblJaER2UEW7GN e8sBeTVDRPphQa7s3sTLt08ZPXVQ39vWewJGwTM0jL1ZgI/9oUrbyO8XcsAoP20k V9J09EgKTFBCNtZ057nNrGU5iWFs+2xihFkzTfilEWu1xlOyK5f1ZNktkO2yyBs3 gqwgEOiqIbrXjyu8H+Xufm0lLekcivnf2aYKZRl0nCPR2SLeQDM6UZIGsjGTpQH4 3yvxUKzVe681HARPQZkdHoO4vsGSLACkUTHult9FTIsfkCy1w7VA8cLfLfMm6VEA TXlE5PapZo84xW1dTpCqLJ2dr1+PFCc= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:20 2025 by rpki-client