This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: PbukvZ8H5L58VjUaweyTDTZkT13EUD3Hm1QWMGUE/L0= Subject key identifier: 30:E6:37:5E:66:01:B1:F1:15:DA:CB:51:3D:AE:9E:6F:71:C1:30:22 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 01A0 Signing time: Sun 07 Dec 2025 02:49:19 +0000 Manifest this update: Sun 07 Dec 2025 02:49:18 +0000 Manifest next update: Sun 14 Dec 2025 02:49:18 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: sglGXjUG8Efiyzu+wF4JifPSwzLXNWKg4o2N7HkAaAo=) 2: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: 4jQKo5E0XfC+Bh102tpwq0SPDRbmpx2RDfSXwme/Vtk=) 3: 68BCC70EBD2D11F086C1B125C4F9AE02.roa (hash: qFy+PfRK0ljik7CZvuqMAh56bKlP5ErsYf4UfvP1xJQ=) 4: D1825C02598911F0848EA472C4F9AE02.roa (hash: 6FiZKuLIgUtIYIA1D6XNL/A4ah2P8QXaPUVRBeti7CE=) 5: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 6: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) 7: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: XpEdNMaKGtUEN6hIgRHzqxQfHq0kQwSpdYHVdb7TK5A=) 8: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 7e1bIIpY60NREKCU3ueEl2g/koitX0hrLn6cquJbTFo=) 9: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Dec 7 02:49:18 2025 GMT Not After : Dec 14 02:49:18 2025 GMT Subject: CN=6934eb2f-4e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5b:76:11:3b:0f:02:4d:3b:42:5c:ac:97:30: 33:61:00:8b:a8:09:e3:4a:de:e4:2d:23:fc:da:7c: 10:67:75:23:4e:fd:82:e1:70:35:2e:e8:e9:2e:55: 66:83:26:f4:77:27:95:26:d7:9a:a3:ea:1a:46:29: 4c:a3:16:fe:b6:fc:41:55:25:73:2e:bf:a5:b1:f8: 02:4f:e7:3e:2e:db:de:9d:a9:01:66:07:09:cc:5d: 06:14:3c:5c:a9:8d:2a:0a:54:82:0b:7a:b6:19:6d: 30:66:1c:87:c9:12:4a:7d:ae:92:5c:ca:fb:d7:b2: 9b:6a:0c:73:84:b8:f3:3f:fe:59:d8:e3:bb:18:31: c6:ad:17:3d:af:94:a0:a8:e5:e9:c4:f8:98:3a:1c: 9d:c0:48:8c:f3:c3:34:a5:dd:d6:b3:88:e0:f1:0c: d4:d8:f7:14:e7:f5:d4:76:c1:68:3b:27:74:21:4b: 44:47:5e:5b:80:db:a2:ab:25:b0:18:ad:8b:27:8d: 81:75:1f:ad:ce:34:bf:52:8b:4b:f5:57:10:b3:6f: 5d:07:25:94:f8:12:ae:e4:ec:4b:81:2c:8f:45:98: bd:4f:da:f3:bc:27:48:46:c9:9b:6d:93:c8:75:56: de:24:36:0a:0d:b4:c3:bd:4c:23:b2:0d:52:ff:90: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E6:37:5E:66:01:B1:F1:15:DA:CB:51:3D:AE:9E:6F:71:C1:30:22 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:66:23:23:63:32:f2:a9:32:a8:e8:22:4c:3e:54:8b:24:89: e5:b4:70:b4:bd:aa:8b:25:da:6c:a4:c8:f3:6a:c8:72:a8:f4: a9:d7:48:ce:7f:e7:42:98:fe:5f:f0:88:60:fb:0d:a6:0b:7c: ae:ab:37:cc:00:26:3f:48:55:0c:e0:dd:9e:f5:5d:cd:2d:4b: 3c:76:7f:7b:6c:5d:c4:72:4a:3d:99:e1:08:a5:22:67:0a:3e: 6f:de:e7:ca:52:25:75:10:6a:58:d9:d4:23:d6:ba:10:aa:a5: b1:4d:e2:35:e8:6d:d7:92:ab:30:61:35:e8:05:48:10:c8:78: 9e:09:cf:01:bc:9f:2b:e4:f8:ff:bf:bc:6d:23:e9:8c:72:4c: 49:22:22:85:8a:eb:54:f4:80:4c:36:ba:ed:fc:da:80:ef:5c: 38:c8:14:19:44:90:34:a5:a9:93:a3:c2:5a:c4:ba:21:d5:d5: 64:7b:30:c4:c5:db:ba:fb:fc:d4:59:fd:96:0d:1c:30:f9:9b: 67:44:5a:6b:86:ad:1d:62:9c:35:ef:12:6b:47:64:b0:90:33: cb:49:5f:e0:cc:85:43:df:08:b7:75:a2:19:b1:bc:66:3b:ef: 59:4f:e9:55:4e:7a:cb:74:c8:27:5d:08:10:16:1c:20:7e:f5: 2a:0c:6a:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUxMjA3MDI0OTE4WhcNMjUxMjE0MDI0OTE4WjAYMRYwFAYD VQQDEw02OTM0ZWIyZi00ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lt2ETsPAk07QlyslzAzYQCLqAnjSt7kLSP82nwQZ3UjTv2C4XA1LujpLlVm gyb0dyeVJteao+oaRilMoxb+tvxBVSVzLr+lsfgCT+c+LtvenakBZgcJzF0GFDxc qY0qClSCC3q2GW0wZhyHyRJKfa6SXMr717KbagxzhLjzP/5Z2OO7GDHGrRc9r5Sg qOXpxPiYOhydwEiM88M0pd3Ws4jg8QzU2PcU5/XUdsFoOyd0IUtER15bgNuiqyWw GK2LJ42BdR+tzjS/UotL9VcQs29dByWU+BKu5OxLgSyPRZi9T9rzvCdIRsmbbZPI dVbeJDYKDbTDvUwjsg1S/5BPdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDmN15m AbHxFdrLUT2unm9xwTAiMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgZiMjYzLyqTKo6CJMPlSLJInltHC0vaqLJdpspMjzashyqPSp10jO f+dCmP5f8Ihg+w2mC3yuqzfMACY/SFUM4N2e9V3NLUs8dn97bF3Ecko9meEIpSJn Cj5v3ufKUiV1EGpY2dQj1roQqqWxTeI16G3XkqswYTXoBUgQyHieCc8BvJ8r5Pj/ v7xtI+mMckxJIiKFiutU9IBMNrrt/NqA71w4yBQZRJA0pamTo8JaxLoh1dVkezDE xdu6+/zUWf2WDRww+ZtnRFprhq0dYpw17xJrR2SwkDPLSV/gzIVD3wi3daIZsbxm O+9ZT+lVTnrLdMgnXQgQFhwgfvUqDGoh -----END CERTIFICATE-----Generated at Mon Dec 8 06:14:07 2025 by rpki-client