This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: PB+jBi3qmsQtxPNVBIe2gejA2fvBe1AwBeCM+fulj9o= Subject key identifier: E1:3B:3D:C2:78:D9:ED:7E:72:62:4D:15:FD:B6:2A:1D:27:63:7E:F7 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 06AA Signing time: Mon 22 Dec 2025 21:21:17 +0000 Manifest this update: Mon 22 Dec 2025 21:21:16 +0000 Manifest next update: Mon 29 Dec 2025 21:21:16 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: H1n1Q39rt/zCwi6ZPipvfWRUrk2KnqhIu8EQc9a6ht8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Dec 22 21:21:16 2025 GMT Not After : Dec 29 21:21:16 2025 GMT Subject: CN=6949b64d-86de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:0e:53:c9:79:af:33:71:ab:25:e3:48:59: 6c:74:23:09:02:93:f1:24:fe:c0:d3:ca:3c:26:c5: 06:35:dc:3e:be:ea:3b:1a:7d:96:b1:44:fb:42:ac: 9c:c2:db:2e:bc:10:41:cd:05:f2:d8:8c:e6:3d:44: b7:66:5e:ee:b0:32:48:40:57:8a:05:d5:ef:d8:15: 56:3c:34:80:26:da:48:ba:27:be:11:ab:29:57:70: f4:37:c4:b1:1a:f8:67:1a:d6:5c:be:d3:8b:a7:93: 93:7e:25:01:93:0e:3c:41:51:7d:3e:1d:26:25:2a: cc:81:a8:14:27:e5:90:a2:6d:8d:ee:99:96:db:8e: 3c:07:d4:b1:b9:b1:d7:d7:61:45:db:7b:1f:ec:eb: df:fb:a1:f8:ac:b8:5c:f3:c7:4b:52:14:94:77:0f: bc:70:8a:fb:b0:6e:19:41:8d:06:1f:3c:e1:93:55: c9:c2:45:7c:b7:6f:4b:fa:2e:82:b8:25:4c:11:4e: 06:54:b9:da:5d:34:20:1a:4b:b7:65:05:70:30:af: 69:d1:ed:82:33:d5:f2:a4:cd:8a:50:a4:56:29:c1: 94:27:08:00:1b:86:35:f3:20:3d:09:09:01:71:fa: 1e:e4:66:a4:3b:a8:cf:61:e5:06:62:8e:43:0d:93: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3B:3D:C2:78:D9:ED:7E:72:62:4D:15:FD:B6:2A:1D:27:63:7E:F7 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d9:70:a3:63:02:b7:f8:7a:c7:e0:14:af:82:0b:2f:ee:62: 97:3e:de:7e:86:c0:a9:2e:81:62:54:09:6c:7e:38:7c:37:53: c9:bb:e7:d6:e9:52:3f:3c:89:c5:7e:b7:ed:07:b3:0d:58:ca: 5b:27:2d:e7:f5:65:d4:54:8c:45:ff:99:1f:f3:15:88:6a:51: 83:57:e2:a4:c2:e4:48:16:f8:14:83:05:4c:49:de:ed:3e:9c: 63:c2:7f:9c:81:c2:29:5b:f2:73:f0:2c:12:fa:f2:30:ae:38: 05:ae:56:0f:e4:34:af:ca:85:4f:2a:73:6a:71:1f:c5:e8:67: ce:e2:fa:cf:e5:60:3a:29:55:b5:97:a0:6f:79:86:84:d6:52: 2b:35:03:4a:17:9b:a7:8d:f4:ef:96:01:30:07:95:ed:be:68: f2:96:a3:b4:74:f1:9c:05:b9:18:74:f2:8a:af:18:4c:76:77: 12:d5:64:55:c9:aa:3e:5d:4b:a3:b1:14:db:1b:61:80:48:21: 50:2f:72:9d:bf:c8:46:62:ba:dd:6d:dd:c3:3a:b9:92:a3:c9: 5e:63:e2:5b:8d:c8:f3:96:22:f5:f0:30:bf:15:46:81:e5:b3: 31:2a:f8:62:6a:ed:1f:2d:d3:e5:e1:ae:40:de:39:35:e6:06: b5:56:ed:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUxMjIyMjEyMTE2WhcNMjUxMjI5MjEyMTE2WjAYMRYwFAYD VQQDDA02OTQ5YjY0ZC04NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzagOU8l5rzNxqyXjSFlsdCMJApPxJP7A08o8JsUGNdw+vuo7Gn2WsUT7Qqyc wtsuvBBBzQXy2IzmPUS3Zl7usDJIQFeKBdXv2BVWPDSAJtpIuie+EaspV3D0N8Sx GvhnGtZcvtOLp5OTfiUBkw48QVF9Ph0mJSrMgagUJ+WQom2N7pmW2448B9SxubHX 12FF23sf7Ovf+6H4rLhc88dLUhSUdw+8cIr7sG4ZQY0GHzzhk1XJwkV8t29L+i6C uCVMEU4GVLnaXTQgGku3ZQVwMK9p0e2CM9XypM2KUKRWKcGUJwgAG4Y18yA9CQkB cfoe5GakO6jPYeUGYo5DDZMaAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE7PcJ4 2e1+cmJNFf22Kh0nY373MB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK2XCjYwK3+HrH4BSvggsv7mKXPt5+hsCpLoFiVAlsfjh8N1PJu+fW 6VI/PInFfrftB7MNWMpbJy3n9WXUVIxF/5kf8xWIalGDV+KkwuRIFvgUgwVMSd7t Ppxjwn+cgcIpW/Jz8CwS+vIwrjgFrlYP5DSvyoVPKnNqcR/F6GfO4vrP5WA6KVW1 l6BveYaE1lIrNQNKF5unjfTvlgEwB5XtvmjylqO0dPGcBbkYdPKKrxhMdncS1WRV yao+XUujsRTbG2GASCFQL3Kdv8hGYrrdbd3DOrmSo8leY+JbjcjzliL18DC/FUaB 5bMxKvhiau0fLdPl4a5A3jk15ga1Vu3X -----END CERTIFICATE-----Generated at Tue Dec 23 07:55:26 2025 by rpki-client