This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: d6bZRdyzFH+iEcshAbvfIQnX8E1LJMSs4NnTR6YLFhw= Subject key identifier: 9F:CC:BF:5E:FE:CD:39:BD:1C:87:46:E6:61:A5:1A:8A:16:2D:23:85 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B75 Signing time: Sat 20 Dec 2025 18:39:48 +0000 Manifest this update: Sat 20 Dec 2025 18:39:48 +0000 Manifest next update: Sat 27 Dec 2025 18:39:48 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: JZySgny72MyiwgpXqpJF51mVXk8wVOECSoC9bzl+UYE=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8tDMb7QbvAxPwaQ73OW8ydvRFg2I4adHfXyKJL4c0jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Dec 20 18:39:48 2025 GMT Not After : Dec 27 18:39:48 2025 GMT Subject: CN=6946ed74-7edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:b7:9f:88:06:f1:1f:de:66:f7:36:2b:41: 3d:0c:c9:59:2e:44:e5:e0:ad:a8:5f:9b:05:e2:69: 2b:91:03:a3:9b:50:3b:04:e3:c2:ed:a3:6f:ff:c0: 1f:bb:73:5e:5c:77:de:2b:26:a2:c9:46:a7:4e:a0: 6e:f3:93:0b:44:59:ca:0b:6c:df:35:15:1f:8e:c3: f7:af:e4:9a:a3:79:5d:15:3a:39:08:47:df:81:28: 78:96:0b:81:c6:30:e5:67:1c:7f:aa:0e:33:16:37: b0:82:c6:e2:2c:00:0a:a1:7b:2a:f1:0d:da:a4:b3: 89:a3:9a:20:8a:55:98:cc:72:2c:98:3e:86:29:0a: 7f:d4:80:ae:cb:db:6b:5c:81:bb:f3:f3:d5:b1:65: 26:e5:c9:2d:ec:bb:04:27:16:bf:29:d0:eb:fb:7f: 11:c4:12:a9:51:01:ed:5c:31:22:72:29:7b:fa:d3: ac:9b:d9:39:58:f8:8c:a0:59:46:d9:60:44:2a:06: d2:68:5d:d1:bf:a6:ee:d6:39:e1:8d:ef:d1:79:47: c1:92:a1:ca:ee:18:4c:aa:da:55:88:50:e4:a7:41: aa:88:f6:c9:f4:5f:0c:4b:2f:7c:b2:7e:2f:24:c0: e3:c8:6d:40:60:e5:9c:a8:21:e1:b6:14:76:e7:46: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CC:BF:5E:FE:CD:39:BD:1C:87:46:E6:61:A5:1A:8A:16:2D:23:85 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:cd:2b:7a:7f:c0:a2:71:61:4b:47:f7:fd:13:80:e3:e9:51: 39:84:bf:d8:c0:d2:dd:4b:b2:f3:7b:70:76:af:cc:4a:57:cf: 72:a2:a3:49:ac:ae:0f:ba:36:f5:a6:9d:b6:59:11:30:42:24: c3:9e:e6:51:da:c1:f9:c1:68:ac:ce:4c:3c:72:48:da:d0:34: ed:c7:03:9d:4d:c6:73:1e:18:12:73:25:a2:8e:1d:58:b6:5a: 59:e0:b7:eb:b1:26:a9:b7:79:5a:f2:8a:13:d0:e2:f1:57:37: 4d:75:aa:ef:a0:15:80:78:61:01:b4:ec:29:b4:53:f7:89:6f: 11:92:aa:be:bc:e6:fc:d4:a7:b5:86:3f:17:83:9d:af:49:84: a2:e3:21:ad:f7:95:6d:4c:0d:a9:82:46:f3:e6:7a:43:93:9c: b5:8b:fc:fd:f5:0d:94:8f:98:70:a0:4d:cd:2c:e3:19:23:b8: a9:d1:a7:a5:a7:3e:b1:6e:c3:c9:73:f4:a6:02:de:96:57:f7: e3:89:67:d6:df:46:20:54:3c:04:16:a3:72:ba:b7:c7:93:1c: b3:14:6e:e2:d7:02:09:eb:08:ef:e6:49:52:da:fe:15:4f:34: 06:bc:f3:db:2a:d0:ac:c0:aa:1a:6c:5f:07:bc:34:6c:ce:d0: 1e:8a:50:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUxMjIwMTgzOTQ4WhcNMjUxMjI3MTgzOTQ4WjAYMRYwFAYD VQQDDA02OTQ2ZWQ3NC03ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1m3n4gG8R/eZvc2K0E9DMlZLkTl4K2oX5sF4mkrkQOjm1A7BOPC7aNv/8Af u3NeXHfeKyaiyUanTqBu85MLRFnKC2zfNRUfjsP3r+Sao3ldFTo5CEffgSh4lguB xjDlZxx/qg4zFjewgsbiLAAKoXsq8Q3apLOJo5ogilWYzHIsmD6GKQp/1ICuy9tr XIG78/PVsWUm5ckt7LsEJxa/KdDr+38RxBKpUQHtXDEicil7+tOsm9k5WPiMoFlG 2WBEKgbSaF3Rv6bu1jnhje/ReUfBkqHK7hhMqtpViFDkp0GqiPbJ9F8MSy98sn4v JMDjyG1AYOWcqCHhthR250YGQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/Mv17+ zTm9HIdG5mGlGooWLSOFMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACzSt6f8CicWFLR/f9E4Dj6VE5hL/YwNLdS7Lze3B2r8xKV89yoqNJ rK4Pujb1pp22WREwQiTDnuZR2sH5wWiszkw8ckja0DTtxwOdTcZzHhgScyWijh1Y tlpZ4LfrsSapt3la8ooT0OLxVzdNdarvoBWAeGEBtOwptFP3iW8Rkqq+vOb81Ke1 hj8Xg52vSYSi4yGt95VtTA2pgkbz5npDk5y1i/z99Q2Uj5hwoE3NLOMZI7ip0ael pz6xbsPJc/SmAt6WV/fjiWfW30YgVDwEFqNyurfHkxyzFG7i1wIJ6wjv5klS2v4V TzQGvPPbKtCswKoabF8HvDRsztAeilBw -----END CERTIFICATE-----Generated at Mon Dec 22 05:52:10 2025 by rpki-client