This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft File: TA-99pF0oywUEWcaumPJ6rdWs4E.mft (raw, json) Hash identifier: gMXDnzEtQZQha3jsn1biMPt0ZxmZrBzE1a3dsvovbGs= Subject key identifier: 8E:07:D5:8F:2A:D8:C8:04:1F:33:F1:A6:AA:8C:CE:D0:B7:FA:64:09 Authority key identifier: 4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81 Certificate issuer: /CN=A915F38F/serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft Manifest number: 0E Signing time: Tue 23 Dec 2025 06:53:25 +0000 Manifest this update: Tue 23 Dec 2025 06:53:25 +0000 Manifest next update: Tue 30 Dec 2025 06:53:25 +0000 Files and hashes: 1: TA-99pF0oywUEWcaumPJ6rdWs4E.crl (hash: EMG/JplVQEVt4IvBg+04ILBtWFflmdwfPbNL8INIYQs=) 2: 75576E0ED0E911F0BF43FD85C4F9AE02.roa (hash: /kj7WboS4PQ5Q7ZqEzY/HV0rhtjZXSuSw5c8x6VnBPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F38F, serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381 Validity Not Before: Dec 23 06:53:25 2025 GMT Not After : Dec 30 06:53:25 2025 GMT Subject: CN=694a3c65-6532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:13:bd:bb:88:48:57:c2:4a:a3:ca:76:90: 29:0a:89:4f:cb:58:db:a6:be:d9:26:de:55:15:fa: 30:52:ee:c7:4c:4a:e4:8e:18:f3:2b:15:44:cd:5e: 61:42:54:fe:61:8b:8f:59:b0:02:bb:48:b1:85:1e: b1:d0:9e:e5:c3:a6:f9:e5:c6:b5:ae:87:43:97:4a: 9f:4e:ba:85:a4:e4:93:4a:02:17:fd:d4:60:d4:cd: 99:f1:7f:8e:71:4d:ae:8a:d2:30:3c:b4:bc:8c:05: d9:0d:83:62:64:56:0d:45:18:fb:b0:d3:29:89:50: 3f:30:dd:79:b2:83:7a:82:79:05:47:e3:83:dd:2a: 76:53:a7:97:f1:c4:58:31:80:f2:55:c1:2e:fe:1d: 95:6b:79:c1:9e:13:99:a2:06:5d:25:06:d9:86:03: dc:60:1e:6f:6b:33:f3:9b:9a:98:4a:8d:8f:5b:9a: 03:7d:f6:77:0e:c7:52:b8:29:f9:20:af:e8:2d:89: db:a5:ff:0d:97:9b:ac:66:39:11:82:f8:29:15:e0: 34:bd:09:b4:3b:72:98:94:7c:a0:06:8c:a3:5e:1a: ef:73:ab:43:b7:a0:3c:04:85:11:49:a5:76:49:6f: 03:81:f1:fd:95:85:29:df:96:f1:4d:b9:73:25:f2: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:07:D5:8F:2A:D8:C8:04:1F:33:F1:A6:AA:8C:CE:D0:B7:FA:64:09 X509v3 Authority Key Identifier: keyid:4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0e:08:3b:fd:19:d5:4d:72:ee:d4:19:ce:c0:ac:e5:f8:53: 84:11:62:7b:0f:0b:8d:61:48:b7:eb:d2:75:0e:ac:02:32:86: 00:85:79:1a:91:be:7b:f6:f6:94:d4:3b:be:01:01:d7:60:c9: af:ca:22:13:c9:67:db:e3:0c:cb:85:e4:ba:db:de:47:bf:ef: d7:e1:de:a8:ff:c3:dd:0f:f6:ff:cd:40:21:02:8c:94:61:4c: 74:78:04:a5:87:c3:eb:db:fa:15:7b:05:2e:48:b9:58:f3:c9: fa:0c:fd:8c:b4:a4:9d:14:62:a5:4f:a6:93:58:0b:47:0e:b7: 48:4f:58:7f:1d:05:86:55:f8:ab:2d:d7:8f:fb:1b:2f:9f:c7: e8:18:4b:ae:0b:87:52:32:f8:46:ae:8a:c3:7c:fb:a6:a3:05: 85:78:91:04:7c:7f:93:12:b8:7f:3e:ee:d9:bc:1a:27:4e:da: d6:6c:13:74:1a:67:df:49:e3:81:1d:12:bb:85:f0:66:d0:5d: 37:99:a6:f0:43:96:24:49:6f:8a:d1:5a:30:54:cd:58:1a:d4: 63:4a:58:dd:63:f1:7c:9e:61:f1:e8:ef:d1:16:6a:f7:cd:c6: 0d:fe:54:2c:d7:87:17:45:02:98:53:33:c0:00:5a:1f:a7:c3: 81:52:e9:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RjM4RjExMC8GA1UEBRMoNEMwRkJERjY5MTc0QTMyQzE0MTE2NzFBQkE2M0M5RUFC NzU2QjM4MTAeFw0yNTEyMjMwNjUzMjVaFw0yNTEyMzAwNjUzMjVaMBgxFjAUBgNV BAMMDTY5NGEzYzY1LTY1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxhRO9u4hIV8JKo8p2kCkKiU/LWNumvtkm3lUV+jBS7sdMSuSOGPMrFUTNXmFC VP5hi49ZsAK7SLGFHrHQnuXDpvnlxrWuh0OXSp9OuoWk5JNKAhf91GDUzZnxf45x Ta6K0jA8tLyMBdkNg2JkVg1FGPuw0ymJUD8w3Xmyg3qCeQVH44PdKnZTp5fxxFgx gPJVwS7+HZVrecGeE5miBl0lBtmGA9xgHm9rM/ObmphKjY9bmgN99ncOx1K4Kfkg r+gtidul/w2Xm6xmORGC+CkV4DS9CbQ7cpiUfKAGjKNeGu9zq0O3oDwEhRFJpXZJ bwOB8f2VhSnflvFNuXMl8o6xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjgfVjyrY yAQfM/GmqozO0Lf6ZAkwHwYDVR0jBBgwFoAUTA+99pF0oywUEWcaumPJ6rdWs4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGMzhGL0Y2QzdERjFDRDBE QzExRjBCMUQ5QjE1NUM0RjlBRTAyL1RBLTk5cEYwb3l3VUVXY2F1bVBKNnJkV3M0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEEtOTlwRjBveXdVRVdjYXVtUEo2cmRXczRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG MzhGL0Y2QzdERjFDRDBEQzExRjBCMUQ5QjE1NUM0RjlBRTAyL1RBLTk5cEYwb3l3 VUVXY2F1bVBKNnJkV3M0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYOCDv9GdVNcu7UGc7ArOX4U4QRYnsPC41hSLfr0nUOrAIyhgCFeRqR vnv29pTUO74BAddgya/KIhPJZ9vjDMuF5Lrb3ke/79fh3qj/w90P9v/NQCECjJRh THR4BKWHw+vb+hV7BS5IuVjzyfoM/Yy0pJ0UYqVPppNYC0cOt0hPWH8dBYZV+Kst 14/7Gy+fx+gYS64Lh1Iy+EauisN8+6ajBYV4kQR8f5MSuH8+7tm8GidO2tZsE3Qa Z99J44EdEruF8GbQXTeZpvBDliRJb4rRWjBUzVga1GNKWN1j8XyeYfHo79EWavfN xg3+VCzXhxdFAphTM8AAWh+nw4FS6TA= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:34 2025 by rpki-client