This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json) Hash identifier: n+Xl48mo9Fy5bj3GSEqjg/ANbvTTxbFjREljhP5syD8= Subject key identifier: F0:49:D6:7B:D5:D4:63:98:49:4D:4E:63:F2:A2:6F:DA:A8:7E:66:F5 Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Certificate serial: 05D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft Manifest number: 060B Signing time: Sat 20 Dec 2025 22:20:55 +0000 Manifest this update: Sat 20 Dec 2025 22:20:55 +0000 Manifest next update: Sat 27 Dec 2025 22:20:55 +0000 Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: r3eIAlek5LokgA0kohHmF3ah3coVbtxhsGsre/XGr4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Validity Not Before: Dec 20 22:20:55 2025 GMT Not After : Dec 27 22:20:55 2025 GMT Subject: CN=69472147-beee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:0e:f5:c1:0a:aa:06:7a:05:0d:06:f2:77: 2f:0a:52:77:fc:12:f2:7a:13:2d:8f:22:5c:ec:bf: 7c:99:b7:d5:70:8b:e7:3e:b5:b0:78:db:7b:6a:00: 88:19:a1:15:68:c2:2d:28:af:3b:28:5b:7e:98:a6: 9e:4b:9e:ce:9b:31:b1:c3:8b:d2:d0:ca:da:e7:f7: cb:de:b4:d5:ce:e3:03:72:c2:aa:5e:60:54:ec:45: 7f:75:f9:00:68:71:3a:93:24:9d:ef:31:37:ef:38: d6:93:c7:b8:58:46:c0:8b:10:6f:9b:6d:8d:d3:b2: f8:e0:90:e0:4d:f6:6e:4d:f3:b9:b9:64:b7:be:52: 51:42:7f:a2:bc:24:2a:52:e8:0f:d8:68:c7:90:cc: 85:11:44:8d:14:f2:8d:f0:4b:c9:69:01:48:c5:24: a4:8c:30:10:ff:c3:45:b8:c2:da:a8:39:78:44:90: a9:6f:5c:00:91:bb:ae:54:ae:51:5a:f6:87:d3:8a: 74:91:d9:98:a9:99:b0:6e:7c:40:bf:62:0c:37:e8: 89:f9:9e:eb:fb:4a:6c:2e:02:46:03:e4:50:e0:db: d4:07:98:23:0b:99:67:c9:ca:37:e8:11:2b:46:29: 7c:5e:af:1c:9c:e4:b3:8f:61:85:e8:b6:fb:ef:8e: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:49:D6:7B:D5:D4:63:98:49:4D:4E:63:F2:A2:6F:DA:A8:7E:66:F5 X509v3 Authority Key Identifier: keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a1:59:fd:2e:2f:f6:ea:ec:b0:59:df:22:4d:21:91:24:5d: 09:18:78:c9:10:4e:1e:5f:58:72:31:f4:57:24:6b:bc:49:32: b9:6b:29:33:6c:f9:e0:c1:ac:61:70:d5:d9:6c:1c:a5:e6:0b: 25:c3:a7:49:32:2b:cd:21:ec:d0:07:df:33:ed:09:a9:63:51: a2:04:37:41:3a:a0:d8:e5:36:77:fa:e6:4f:95:35:4a:f6:99: 18:c6:56:76:43:90:50:26:dc:16:84:fc:63:e5:f7:01:c6:71: 74:4d:d4:0c:a9:7a:ae:59:83:27:70:b0:a9:0e:5c:fa:a0:24: ca:d5:69:f2:50:62:d4:bf:a0:af:98:e7:ea:64:37:b3:6d:a2: bb:16:98:28:c4:c1:5b:27:da:ce:3e:ee:fd:e3:0f:46:30:f5: 2a:20:50:1f:83:b6:67:b4:5e:10:e5:04:8d:8c:e9:c9:3d:38: 9b:d9:0d:46:af:3f:97:29:7c:8e:70:5d:13:39:b3:ae:de:2a: 4a:dc:43:4a:f2:75:52:b0:ba:1a:d7:ce:8f:95:ff:c0:39:fc: 64:05:4d:ff:04:1d:a9:3a:53:76:1d:b8:31:9b:f3:60:a4:76: d1:ec:58:17:b1:42:9f:5f:15:da:11:ae:e1:d4:cd:ea:05:76: 6a:95:00:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1 NzZGOEMxMDUwHhcNMjUxMjIwMjIyMDU1WhcNMjUxMjI3MjIyMDU1WjAYMRYwFAYD VQQDDA02OTQ3MjE0Ny1iZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/cO9cEKqgZ6BQ0G8ncvClJ3/BLyehMtjyJc7L98mbfVcIvnPrWweNt7agCI GaEVaMItKK87KFt+mKaeS57OmzGxw4vS0Mra5/fL3rTVzuMDcsKqXmBU7EV/dfkA aHE6kySd7zE37zjWk8e4WEbAixBvm22N07L44JDgTfZuTfO5uWS3vlJRQn+ivCQq UugP2GjHkMyFEUSNFPKN8EvJaQFIxSSkjDAQ/8NFuMLaqDl4RJCpb1wAkbuuVK5R WvaH04p0kdmYqZmwbnxAv2IMN+iJ+Z7r+0psLgJGA+RQ4NvUB5gjC5lnyco36BEr Ril8Xq8cnOSzj2GF6Lb77473RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBJ1nvV 1GOYSU1OY/Kib9qofmb1MB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3 UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2 Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeoVn9Li/26uywWd8iTSGRJF0JGHjJEE4eX1hyMfRXJGu8STK5aykz bPngwaxhcNXZbByl5gslw6dJMivNIezQB98z7QmpY1GiBDdBOqDY5TZ3+uZPlTVK 9pkYxlZ2Q5BQJtwWhPxj5fcBxnF0TdQMqXquWYMncLCpDlz6oCTK1WnyUGLUv6Cv mOfqZDezbaK7FpgoxMFbJ9rOPu794w9GMPUqIFAfg7ZntF4Q5QSNjOnJPTib2Q1G rz+XKXyOcF0TObOu3ipK3ENK8nVSsLoa186Plf/AOfxkBU3/BB2pOlN2Hbgxm/Ng pHbR7FgXsUKfXxXaEa7h1M3qBXZqlQAg -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:51 2025 by rpki-client