This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
File: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft (raw, json)
Hash identifier: y6bRbVJEzf+7E+x2MpUW79g08NVXYEA5KAlLlj0FF1E=
Subject key identifier: C3:C3:4C:6A:CA:62:96:96:15:4B:90:4B:E0:55:2C:59:F2:FB:67:05
Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
Certificate issuer: /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Certificate serial: 09FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
Manifest number: 09F1
Signing time: Mon 22 Dec 2025 19:18:30 +0000
Manifest this update: Mon 22 Dec 2025 19:18:29 +0000
Manifest next update: Mon 29 Dec 2025 19:18:29 +0000
Files and hashes: 1: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl (hash: woYemABrZGwq1Mk5KwB0pS/sPfFpEh8lN6c6OFcZIJk=)
2: A7FF3E74AD2511EFB6717A1CC4F9AE02.roa (hash: 63XpX2kGWp3lPr6OU9PfcVXrD0xIXlydeDV24SgJERs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2557 (0x9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C016, serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Validity
Not Before: Dec 22 19:18:29 2025 GMT
Not After : Dec 29 19:18:29 2025 GMT
Subject: CN=69499986-0a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:da:07:88:02:7d:2c:9e:51:10:6b:d7:ce:
ab:e1:ce:29:1a:dc:61:b8:32:17:38:17:0d:bf:4e:
1a:c6:fb:14:d7:85:91:b8:18:ba:40:fd:94:4b:fa:
9f:1a:30:2e:d9:a6:b4:21:ec:d1:45:e6:e5:77:c9:
9e:3f:f4:e5:2c:9d:36:0f:22:02:0a:76:93:eb:f2:
e9:45:b1:af:fc:53:92:f6:ed:a4:b9:2e:d3:53:51:
2a:d3:68:d8:f8:07:4a:87:5e:6e:68:f7:56:e8:48:
1f:48:21:f2:95:cf:21:80:38:0a:b7:7e:29:c3:40:
f4:87:fa:ca:13:82:58:bc:c7:ba:28:c0:27:0f:9c:
4d:dd:51:58:a7:05:68:73:00:d0:8d:23:72:9f:21:
94:6b:d6:a6:5a:8a:9a:de:39:b8:00:df:5c:98:55:
72:5d:a0:a8:ed:77:9e:09:74:0c:69:98:ba:8d:3f:
1b:7a:88:1e:81:06:79:ce:54:cf:a1:70:fe:05:da:
28:78:e7:a5:97:83:55:60:05:5f:eb:71:22:61:28:
1a:ab:fe:c9:b9:08:f7:cd:a0:89:06:90:c7:77:22:
ef:aa:59:d5:e4:39:e2:07:78:97:e7:78:fe:c6:d8:
76:75:73:88:1f:49:67:2e:e1:61:af:c2:d6:75:e1:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:4C:6A:CA:62:96:96:15:4B:90:4B:E0:55:2C:59:F2:FB:67:05
X509v3 Authority Key Identifier:
keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:ee:90:98:a3:36:56:ca:4f:1f:00:23:21:ad:28:6b:9e:
dc:ad:86:6e:84:07:79:13:3b:4a:d4:84:dc:11:85:44:ef:0b:
b5:32:fd:cb:a1:1b:b7:ae:c8:84:a9:40:c0:60:79:ed:63:4a:
93:96:81:1d:bf:66:fa:f4:b1:d5:3c:07:0e:e5:34:5f:32:3c:
13:9d:41:9a:4c:08:b0:d9:f4:66:47:13:af:27:21:6d:1a:39:
65:9c:fd:c4:9a:8a:40:4f:dc:98:b0:4d:12:f7:8d:ac:7c:90:
32:8f:04:04:e6:d4:a6:d5:e6:e8:34:fa:25:93:88:fe:1a:f8:
4d:56:b8:4c:cb:b6:9b:37:14:48:9a:05:fa:7c:1e:33:33:5f:
ea:cc:6c:a6:a3:a2:f3:f4:20:92:96:54:4f:ca:b9:3e:2b:12:
f1:1b:fe:49:e7:a3:71:68:d4:4b:e8:ef:99:ce:e6:30:0d:5e:
a9:e0:1a:59:ac:b3:4f:33:81:75:bc:e6:1e:76:96:28:8b:d4:
89:02:f4:8c:a2:d2:0b:c1:4f:b8:4c:d1:0d:a1:38:28:6f:c1:
37:94:59:60:f5:d3:e0:78:c9:6e:86:87:f9:03:d8:12:4c:b9:
d6:ae:f3:29:f1:30:72:6d:0c:ab:c7:b5:fd:f7:09:d7:fd:04:
4e:7c:24:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMwMTYxMTAvBgNVBAUTKEI1QUU0N0RBRDA0QTQ2NTkzQTNBRDA4MjUyMDZFMTBC
Q0Y5NkY4Q0EwHhcNMjUxMjIyMTkxODI5WhcNMjUxMjI5MTkxODI5WjAYMRYwFAYD
VQQDDA02OTQ5OTk4Ni0wYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5XaB4gCfSyeURBr186r4c4pGtxhuDIXOBcNv04axvsU14WRuBi6QP2US/qf
GjAu2aa0IezRRebld8meP/TlLJ02DyICCnaT6/LpRbGv/FOS9u2kuS7TU1Eq02jY
+AdKh15uaPdW6EgfSCHylc8hgDgKt34pw0D0h/rKE4JYvMe6KMAnD5xN3VFYpwVo
cwDQjSNynyGUa9amWoqa3jm4AN9cmFVyXaCo7XeeCXQMaZi6jT8beogegQZ5zlTP
oXD+BdooeOell4NVYAVf63EiYSgaq/7JuQj3zaCJBpDHdyLvqlnV5DniB3iX53j+
xth2dXOIH0lnLuFhr8LWdeF5PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPDTGrK
YpaWFUuQS+BVLFny+2cFMB8GA1UdIwQYMBaAFLWuR9rQSkZZOjrQglIG4QvPlvjK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzAxNi9DRjVGMjlDQThG
MzkxMUVBQjNDMzE3NEFDNEY5QUUwMi90YTVIMnRCS1JsazZPdENDVWdiaEM4LVct
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RhNUgydEJLUmxrNk90Q0NVZ2JoQzgtVy1Nby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzAxNi9DRjVGMjlDQThGMzkxMUVBQjNDMzE3NEFDNEY5QUUwMi90YTVIMnRCS1Js
azZPdENDVWdiaEM4LVctTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxFu6QmKM2VspPHwAjIa0oa57crYZuhAd5EztK1ITcEYVE7wu1Mv3L
oRu3rsiEqUDAYHntY0qTloEdv2b69LHVPAcO5TRfMjwTnUGaTAiw2fRmRxOvJyFt
GjllnP3EmopAT9yYsE0S942sfJAyjwQE5tSm1eboNPolk4j+GvhNVrhMy7abNxRI
mgX6fB4zM1/qzGymo6Lz9CCSllRPyrk+KxLxG/5J56NxaNRL6O+ZzuYwDV6p4BpZ
rLNPM4F1vOYedpYoi9SJAvSMotILwU+4TNENoTgob8E3lFlg9dPgeMluhof5A9gS
TLnWrvMp8TBybQyrx7X99wnX/QROfCQZ
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:46:47 2025 by rpki-client