This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: T+JuaD4guU/7I++GNCsBcK3VHsyRSHUsLve1RzIy5OQ= Subject key identifier: 44:78:78:08:BF:37:C7:E0:EA:74:71:4D:24:EB:59:0C:08:F1:B7:11 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 12E6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 12DE Signing time: Sat 06 Dec 2025 16:35:33 +0000 Manifest this update: Sat 06 Dec 2025 16:35:32 +0000 Manifest next update: Sat 13 Dec 2025 16:35:32 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: yYcQJ2FP89/O9DZg5wXtlIR6Dcx9U6BuZUH8nKRmdrg=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: QOShMQ6mMEZRjJ5JESydTLr4xwZz//rE2YbhLSt51RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4838 (0x12e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Dec 6 16:35:32 2025 GMT Not After : Dec 13 16:35:32 2025 GMT Subject: CN=69345b55-de57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:68:f1:c6:97:dc:50:cf:b6:4a:85:27:9f: 84:1e:65:a6:8d:ae:c5:d1:a4:7c:25:bc:a3:f5:76: dd:c5:57:37:5a:0e:a6:4d:d1:5e:d3:21:8e:71:53: c9:f2:9c:a9:ec:de:0f:2f:28:d5:e4:d9:80:5e:9e: f0:1a:01:dc:42:00:90:3b:06:2c:ef:be:3a:18:7a: 49:7a:46:b2:01:a4:ae:69:12:5e:4b:74:f8:ea:f4: e3:06:df:48:0d:3a:08:d4:ad:47:45:c6:68:07:9e: ec:ea:f6:c4:09:55:91:f9:b5:b1:c0:b5:fe:bd:f3: d5:7c:15:17:e1:71:16:58:b1:08:88:12:17:74:fd: 30:8d:67:e7:ab:85:c4:66:93:8c:6c:5d:65:a6:f1: a4:00:7d:84:7d:1b:62:30:d7:60:b7:b8:6b:58:bb: 7c:7b:b9:da:bd:f2:00:11:51:19:24:5f:a5:ad:d3: 04:a6:56:a8:b2:82:20:19:9f:10:c6:b2:5a:ab:b5: 86:a2:78:2c:b8:e2:5e:e0:37:3e:61:05:b9:39:79: ff:4a:cf:67:d5:4c:83:f9:52:6b:66:e1:bf:f2:3a: 66:cc:80:0b:8a:fe:77:38:55:6b:92:33:45:43:4b: 9a:72:c7:a0:77:44:5a:79:38:fd:96:b1:34:c3:19: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:78:78:08:BF:37:C7:E0:EA:74:71:4D:24:EB:59:0C:08:F1:B7:11 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:64:96:64:a9:c7:d2:3e:41:fd:4d:9f:43:07:cc:80:b6:88: 67:16:f3:36:9e:7e:df:3c:ee:2d:3f:c7:2d:8b:55:f5:70:00: 53:8d:f0:a9:da:87:2e:52:c0:37:2d:e5:df:1a:0a:e7:60:c8: 14:38:a6:49:33:56:af:e4:2f:12:95:33:e4:0d:4f:e5:de:2a: d3:43:fb:29:22:c9:81:9c:0f:89:7c:b4:b3:9b:e2:93:bb:ff: b4:ad:ba:51:d7:00:9f:a0:a0:74:a5:39:fd:da:3d:b3:54:16: 70:79:70:00:84:4c:2a:cf:5a:33:a5:24:14:ba:2a:ca:77:02: 54:f8:bd:c8:62:d0:3c:bb:91:99:11:ea:c1:6a:4d:75:d3:0d: 4c:a0:ea:33:f9:5a:a7:7d:19:1a:8d:d0:dd:91:7d:8e:5a:6a: 88:61:7e:6e:cf:a6:2d:e4:bc:8c:2c:67:d3:18:b7:27:ba:32: 88:7c:ea:99:25:a4:55:8a:60:83:4e:cb:65:ac:65:e3:c3:02: f3:25:4e:6b:42:7f:3c:22:d6:18:f2:53:98:63:0e:65:7b:3e: 63:6d:0c:5f:b6:86:72:c0:08:49:07:5e:55:29:43:58:36:99: 6c:1d:b4:f6:f5:89:66:de:ad:1a:cb:21:6d:4b:57:53:f9:fe: 21:10:46:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUxMjA2MTYzNTMyWhcNMjUxMjEzMTYzNTMyWjAYMRYwFAYD VQQDEw02OTM0NWI1NS1kZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rNo8caX3FDPtkqFJ5+EHmWmja7F0aR8Jbyj9XbdxVc3Wg6mTdFe0yGOcVPJ 8pyp7N4PLyjV5NmAXp7wGgHcQgCQOwYs7746GHpJekayAaSuaRJeS3T46vTjBt9I DToI1K1HRcZoB57s6vbECVWR+bWxwLX+vfPVfBUX4XEWWLEIiBIXdP0wjWfnq4XE ZpOMbF1lpvGkAH2EfRtiMNdgt7hrWLt8e7navfIAEVEZJF+lrdMEplaosoIgGZ8Q xrJaq7WGongsuOJe4Dc+YQW5OXn/Ss9n1UyD+VJrZuG/8jpmzIALiv53OFVrkjNF Q0uacsegd0RaeTj9lrE0wxkQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER4eAi/ N8fg6nRxTSTrWQwI8bcRMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjZJZkqcfSPkH9TZ9DB8yAtohnFvM2nn7fPO4tP8cti1X1cABTjfCp 2ocuUsA3LeXfGgrnYMgUOKZJM1av5C8SlTPkDU/l3irTQ/spIsmBnA+JfLSzm+KT u/+0rbpR1wCfoKB0pTn92j2zVBZweXAAhEwqz1ozpSQUuirKdwJU+L3IYtA8u5GZ EerBak110w1MoOoz+VqnfRkajdDdkX2OWmqIYX5uz6Yt5LyMLGfTGLcnujKIfOqZ JaRVimCDTstlrGXjwwLzJU5rQn88ItYY8lOYYw5lez5jbQxftoZywAhJB15VKUNY NplsHbT29Ylm3q0ayyFtS1dT+f4hEEaQ -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:56 2025 by rpki-client