This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
File: TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json)
Hash identifier: h5yzumONHmG6Did6X7sYK6KaYWPniieK22HN+g2rx4s=
Subject key identifier: 81:B3:59:E1:60:10:0F:40:C7:B6:D5:0A:ED:03:8D:EF:53:F3:17:E8
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Certificate issuer: /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
Manifest number: D3
Signing time: Sun 21 Dec 2025 04:53:51 +0000
Manifest this update: Sun 21 Dec 2025 04:53:50 +0000
Manifest next update: Sun 28 Dec 2025 04:53:50 +0000
Files and hashes: 1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: fzpBULU9BwDdPp4WqVmx4x4wEykga2wfkYPExEpXNsQ=)
2: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (hash: m6Ln5a7ZSeIX81Tm2886H7n9SlKXj8hnsIcbsYsTN7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Validity
Not Before: Dec 21 04:53:50 2025 GMT
Not After : Dec 28 04:53:50 2025 GMT
Subject: CN=69477d5e-6bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:4c:58:d4:b6:38:d9:b8:f6:57:fa:62:e8:
a5:21:31:84:61:9d:33:4a:b6:18:67:35:1c:f2:b3:
aa:3b:d6:ff:e6:80:f7:f0:91:f8:7c:5b:68:33:7d:
42:51:9e:16:2d:be:4f:10:f1:a7:75:fa:6d:b3:bc:
51:1a:09:5b:17:33:e9:46:0a:d2:73:89:9d:fe:d8:
1f:c5:9d:bd:20:2f:8d:59:d6:1a:0a:90:ff:76:a7:
ab:30:59:78:2e:45:80:86:d4:7a:c4:5d:41:cb:dd:
10:15:cd:f0:cf:a3:17:d3:4e:a4:6d:e2:a3:0b:83:
cb:bb:76:7c:e8:58:7d:b1:88:bd:d8:b5:b1:f4:9e:
9c:92:c6:3d:f1:db:61:94:5e:29:aa:10:fa:53:65:
dd:44:62:57:8e:ee:ae:2a:04:70:6d:46:ce:48:fb:
d3:e3:43:0a:91:15:c7:15:2a:e7:54:e3:ae:9f:2a:
73:36:1c:8c:f3:81:ea:66:7e:6a:1b:f4:83:51:59:
1c:a7:b2:d9:f9:b4:db:be:55:6f:9e:ce:86:a1:c9:
d2:4b:8d:c3:d6:35:ac:df:e6:0e:aa:cd:88:69:94:
49:5c:e5:c2:32:e3:9f:9f:17:46:7f:f0:50:40:27:
eb:e2:86:b7:b6:4b:e8:83:99:8e:e7:7b:32:da:71:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:59:E1:60:10:0F:40:C7:B6:D5:0A:ED:03:8D:EF:53:F3:17:E8
X509v3 Authority Key Identifier:
keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:96:39:b2:ce:28:86:1b:49:9e:2a:30:4e:02:a3:de:ef:
2b:1c:9d:a2:99:2b:6c:cd:f8:0b:49:32:99:91:25:8c:0d:63:
a9:79:77:60:0b:1c:f9:53:04:65:e4:d5:ea:7f:1f:15:8d:06:
0f:52:3a:29:e5:3c:01:23:7e:f3:77:42:0e:35:47:28:b0:95:
09:5b:01:e6:04:bc:44:e8:91:99:b3:1d:42:fc:2b:a1:85:f5:
47:5b:5b:a5:3c:f9:52:4f:82:e6:d8:ff:ad:b5:10:27:d5:d4:
c7:c9:ab:a1:0f:9b:4d:16:5d:2a:84:4d:c4:44:ff:ed:73:ad:
e7:4e:18:a4:1f:f9:07:34:06:56:ab:f2:69:a0:b0:b5:6f:94:
88:bc:aa:f7:33:69:f2:bd:fc:0c:b8:d7:e3:8d:38:cb:34:c2:
e8:26:04:99:1c:4f:46:d3:e5:4e:63:39:ba:d6:6b:48:58:ad:
a9:b1:81:53:c8:70:dd:55:da:1f:db:39:9d:64:0f:1b:54:c3:
00:46:51:b8:11:6c:18:4e:db:df:f4:3d:1b:7c:59:93:96:d1:
46:2f:48:85:c2:8d:3a:8a:af:a2:f2:d1:f2:04:93:fe:b4:14:
4c:7a:10:04:e5:f5:45:20:4e:30:ae:10:d2:d8:cc:e4:af:49:
fe:9f:97:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgyNUQxMTAvBgNVBAUTKDRDQTAyRUMxMTE4NzRBRTBFN0QwNTU1QTI1RkYzMzAy
RjkxMkVCOEMwHhcNMjUxMjIxMDQ1MzUwWhcNMjUxMjI4MDQ1MzUwWjAYMRYwFAYD
VQQDDA02OTQ3N2Q1ZS02YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytRMWNS2ONm49lf6YuilITGEYZ0zSrYYZzUc8rOqO9b/5oD38JH4fFtoM31C
UZ4WLb5PEPGndfpts7xRGglbFzPpRgrSc4md/tgfxZ29IC+NWdYaCpD/dqerMFl4
LkWAhtR6xF1By90QFc3wz6MX006kbeKjC4PLu3Z86Fh9sYi92LWx9J6cksY98dth
lF4pqhD6U2XdRGJXju6uKgRwbUbOSPvT40MKkRXHFSrnVOOunypzNhyM84HqZn5q
G/SDUVkcp7LZ+bTbvlVvns6GocnSS43D1jWs3+YOqs2IaZRJXOXCMuOfnxdGf/BQ
QCfr4oa3tkvog5mO53sy2nFbTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGzWeFg
EA9Ax7bVCu0Dje9T8xfoMB8GA1UdIwQYMBaAFEygLsERh0rg59BVWiX/MwL5EuuM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODI1RC9ERDcxRDU2OEE0
NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi9US0F1d1JHSFN1RG4wRlZhSmY4ekF2a1M2
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RLQXV3UkdIU3VEbjBGVmFKZjh6QXZrUzY0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODI1RC9ERDcxRDU2OEE0NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi9US0F1d1JHSFN1
RG4wRlZhSmY4ekF2a1M2NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAK3pY5ss4ohhtJniowTgKj3u8rHJ2imStszfgLSTKZkSWMDWOpeXdg
Cxz5UwRl5NXqfx8VjQYPUjop5TwBI37zd0IONUcosJUJWwHmBLxE6JGZsx1C/Cuh
hfVHW1ulPPlST4Lm2P+ttRAn1dTHyauhD5tNFl0qhE3ERP/tc63nThikH/kHNAZW
q/JpoLC1b5SIvKr3M2nyvfwMuNfjjTjLNMLoJgSZHE9G0+VOYzm61mtIWK2psYFT
yHDdVdof2zmdZA8bVMMARlG4EWwYTtvf9D0bfFmTltFGL0iFwo06iq+i8tHyBJP+
tBRMehAE5fVFIE4wrhDS2Mzkr0n+n5cu
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:33:20 2025 by rpki-client