This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File: TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier: jydRxNzEAxqIcmPTBTILe7vbPhbCLHSk1WazNpMtniw=
Subject key identifier: 31:CE:59:DA:E6:72:D2:B0:F2:60:DC:C4:28:32:32:6D:0D:2C:0A:E5
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial: 0D22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number: 0D04
Signing time: Tue 16 Dec 2025 17:56:21 +0000
Manifest this update: Tue 16 Dec 2025 17:56:21 +0000
Manifest next update: Tue 23 Dec 2025 17:56:21 +0000
Files and hashes: 1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: aOCWJYti6RxJz/+S8xF+DaALFK9dx3muwiXB53lewRY=)
2: D0A73A449B8511F09D2ADB37C4F9AE02.roa (hash: dD6j+sczHYx/xPgDziOIUSB6+t7p5ThcbsCjerYQNgo=)
3: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
4: 67C349FA9B8011F0A7C4F875C4F9AE02.roa (hash: uhrbx22Mj7VPipJqiTCyDkTOObnHgzhVyzrHGF2K3fo=)
5: 6953C1BE9B8011F0A7C4F875C4F9AE02.roa (hash: Czi9t9FosAi4B7FBGuvwgOvx85ntHpJmoFPT2ay3ZXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 17:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Validity
Not Before: Dec 16 17:56:21 2025 GMT
Not After : Dec 23 17:56:21 2025 GMT
Subject: CN=69419d45-f369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:aa:65:b8:f6:4f:42:99:38:dd:51:d2:ab:
7f:51:c7:df:4e:0e:7e:c9:5f:59:2f:6d:c0:98:2b:
38:e4:c6:45:de:6d:fe:5f:70:5f:e9:37:ba:d4:80:
13:6f:ed:81:05:e3:7b:5a:4f:7c:b3:e1:cf:24:e6:
a2:19:61:01:16:d2:79:8b:2f:41:14:05:a4:f7:83:
7b:d1:58:18:f3:b1:50:1b:6a:81:b4:6f:3a:7a:6e:
41:3e:50:44:6c:3a:20:4b:8d:5c:6c:00:be:9e:9d:
d1:02:04:3b:4f:16:a5:2a:2d:62:80:70:05:c4:52:
38:a6:9d:7c:d8:05:b6:b1:62:dd:9d:4e:a7:67:8a:
78:4b:1c:72:b5:0e:4c:40:e8:62:3d:68:15:a5:c1:
76:bd:25:3a:8c:05:da:a3:48:7f:6a:af:fe:4e:4b:
c3:c5:c2:cc:b1:93:ef:68:20:4e:bb:57:1a:5a:36:
17:5d:4d:6b:57:23:67:75:36:3c:58:dc:de:b2:ca:
b9:73:bb:cc:a1:22:c0:39:41:44:97:bc:33:8d:6d:
3e:05:bf:cd:bf:aa:ea:4f:5e:de:f6:68:f4:60:d2:
bb:5c:16:bf:31:31:47:c8:dc:79:ef:f7:64:bd:27:
e6:4d:4f:f0:92:f5:29:c5:d2:5d:a7:0a:50:75:e4:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:59:DA:E6:72:D2:B0:F2:60:DC:C4:28:32:32:6D:0D:2C:0A:E5
X509v3 Authority Key Identifier:
keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c3:6a:be:8a:1d:ce:60:c3:75:2c:b7:fd:5d:a3:f6:a1:2d:
50:2f:0d:e5:74:79:3c:52:53:45:e8:7b:15:6a:f2:6d:b4:20:
1b:21:c5:aa:10:c8:3d:83:18:14:df:fc:d5:70:cb:12:fb:12:
f9:18:77:f2:d2:70:c1:1e:f4:fe:48:54:e0:72:9e:c3:8f:c4:
12:7f:01:45:fe:a2:b3:b2:e7:eb:d2:a0:51:a1:06:5a:39:b3:
cd:8c:7b:91:ed:c7:b3:45:9d:bb:10:38:26:c3:b0:8a:68:e4:
d7:46:63:dd:5b:f6:fb:5d:5c:0b:b6:a5:1f:76:9e:6a:81:c9:
9d:d0:eb:0b:41:ca:39:70:b4:ed:c4:fa:08:3c:68:47:40:46:
6a:7f:e3:d1:e4:9b:1e:55:13:e4:f0:7c:52:b1:cb:b9:4a:4b:
c4:12:a6:7c:9b:b5:3d:f7:86:5d:fc:fd:1b:f9:2d:80:cf:ae:
02:42:75:61:16:02:7e:a2:bd:7c:5f:c4:f9:d5:0d:fc:66:cf:
21:70:07:13:67:a7:80:f6:e9:5c:85:f4:1d:db:88:26:30:3b:
d4:f8:35:04:65:68:d9:72:24:a2:25:f6:28:f5:f5:16:4b:cb:
fd:01:a8:0d:65:38:00:b2:ca:61:17:8c:dc:c7:30:38:07:dd:
71:21:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:30:49 2025 by rpki-client