This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: nthBjOXe2sZJDOWts3FS/+V+mgL01F2oBBnyk84XRrs= Subject key identifier: D8:5B:A3:D8:D2:85:04:74:40:34:80:12:97:C9:0D:61:65:CF:B6:B0 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 0257 Signing time: Wed 17 Dec 2025 01:05:24 +0000 Manifest this update: Wed 17 Dec 2025 01:05:23 +0000 Manifest next update: Wed 24 Dec 2025 01:05:23 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: QRheDZJM7rZ8MAfpjUEE3hw7OljZBwrGDVuL3cw5lfU=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: cudmTORiPOjO86ET5m2jamgFluRVUo1k1HWtotYNeG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 01:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Dec 17 01:05:23 2025 GMT Not After : Dec 24 01:05:23 2025 GMT Subject: CN=694201d4-24e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f7:b3:48:23:11:e7:7c:d8:64:5a:48:c5:cc: fd:cf:12:55:04:b1:88:1c:75:63:f1:57:f2:e3:a6: 57:f6:69:b5:6e:9c:bb:e2:84:6d:8f:d9:54:07:c5: 7f:08:75:b7:0d:ac:d5:ed:1c:9d:6a:51:9e:2f:5d: 25:a2:be:a2:51:ec:56:07:2a:03:a4:cb:83:2a:aa: f6:de:11:5c:7c:fb:26:2d:f4:40:da:3e:25:78:ee: 9a:cc:82:2e:0d:d2:a0:2c:21:53:16:fd:7f:80:1d: e7:5f:88:c7:19:8d:1d:08:d5:0e:84:c6:85:22:bb: 4e:0f:22:ee:85:63:67:63:c9:1d:d4:fa:4b:27:5e: e3:11:f5:00:11:c1:fc:e4:b9:3c:6c:74:13:eb:a4: c9:67:11:a2:c5:d5:a1:6f:e2:cc:f2:3e:fa:b0:8e: 95:75:62:37:70:d3:e0:a5:2f:e8:f0:19:6f:ac:8f: 02:70:77:e3:fb:83:92:04:57:d9:0a:49:4c:26:38: 4a:70:c0:ee:46:3a:4b:dd:22:8f:d0:d9:02:f0:72: 00:6b:db:73:49:79:22:a9:55:e0:92:c3:65:92:18: 25:83:c9:5a:6f:2f:a8:48:60:a6:1c:cc:75:8b:a3: 53:c1:53:92:9e:21:fc:b9:4b:f4:db:0f:bb:33:dd: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:A3:D8:D2:85:04:74:40:34:80:12:97:C9:0D:61:65:CF:B6:B0 X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:39:01:9e:f2:46:21:c8:ee:5a:ce:ea:f5:43:90:7c:9d:09: 03:1f:8e:c3:b5:e6:a4:b1:92:5a:b4:43:00:12:f9:90:0a:e5: fe:1d:12:6e:0b:ee:63:ed:59:df:b7:be:cb:37:f1:cc:57:33: 71:37:b9:69:9f:f1:6b:35:42:6c:e0:df:65:33:9e:80:bc:f2: 1b:0b:f8:2b:8b:71:b4:8f:c9:7a:16:f9:f6:71:21:62:e0:dd: b9:34:58:cf:7d:f0:89:ec:c0:15:03:cb:7c:fc:98:99:4b:54: fb:32:06:07:6d:33:25:b9:cf:0c:2f:29:6c:84:29:b6:6b:16: cb:d1:e6:3a:de:0c:70:55:27:d9:42:05:24:bd:8f:d8:05:2d: 0f:99:4c:27:08:5f:0c:9f:d2:1e:4e:94:22:99:61:cd:7b:f3: ab:6c:77:75:f4:b0:92:66:60:79:fa:72:f4:3b:62:2b:62:86: ae:14:de:11:a5:13:ef:77:85:a1:b0:df:09:5c:10:f2:50:da: 42:9d:6a:74:a6:e1:d2:bf:5b:d0:6a:93:80:c4:e5:f7:5b:ef: 07:48:0a:6d:81:37:59:77:37:4f:88:17:07:ff:4e:1a:4e:68: 09:c6:59:ec:15:ef:9d:5f:d2:c0:3a:f2:55:1b:6f:4e:cc:8b: d2:e1:65:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUxMjE3MDEwNTIzWhcNMjUxMjI0MDEwNTIzWjAYMRYwFAYD VQQDDA02OTQyMDFkNC0yNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vezSCMR53zYZFpIxcz9zxJVBLGIHHVj8Vfy46ZX9mm1bpy74oRtj9lUB8V/ CHW3DazV7RydalGeL10lor6iUexWByoDpMuDKqr23hFcfPsmLfRA2j4leO6azIIu DdKgLCFTFv1/gB3nX4jHGY0dCNUOhMaFIrtODyLuhWNnY8kd1PpLJ17jEfUAEcH8 5Lk8bHQT66TJZxGixdWhb+LM8j76sI6VdWI3cNPgpS/o8BlvrI8CcHfj+4OSBFfZ CklMJjhKcMDuRjpL3SKP0NkC8HIAa9tzSXkiqVXgksNlkhglg8laby+oSGCmHMx1 i6NTwVOSniH8uUv02w+7M91+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhbo9jS hQR0QDSAEpfJDWFlz7awMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsOQGe8kYhyO5azur1Q5B8nQkDH47DteaksZJatEMAEvmQCuX+HRJu C+5j7Vnft77LN/HMVzNxN7lpn/FrNUJs4N9lM56AvPIbC/gri3G0j8l6Fvn2cSFi 4N25NFjPffCJ7MAVA8t8/JiZS1T7MgYHbTMluc8MLylshCm2axbL0eY63gxwVSfZ QgUkvY/YBS0PmUwnCF8Mn9IeTpQimWHNe/OrbHd19LCSZmB5+nL0O2IrYoauFN4R pRPvd4WhsN8JXBDyUNpCnWp0puHSv1vQapOAxOX3W+8HSAptgTdZdzdPiBcH/04a TmgJxlnsFe+dX9LAOvJVG29OzIvS4WV5 -----END CERTIFICATE-----Generated at Wed Dec 17 10:39:16 2025 by rpki-client