This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File: TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier: sqzaljS9uPVBRnfpw/MRtj9M7XXhsjoGUdaBHITHlic=
Subject key identifier: 43:A0:A4:05:09:FD:78:3B:8D:A0:BE:B9:69:1A:D0:DD:05:66:DB:2E
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer: /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial: 03BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number: 05CF
Signing time: Mon 22 Dec 2025 23:42:45 +0000
Manifest this update: Mon 22 Dec 2025 23:42:45 +0000
Manifest next update: Mon 29 Dec 2025 23:42:45 +0000
Files and hashes: 1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: AOk/8WCKGwXW8pFXvq1xQg0CA16joKlMm5BAj39ca4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Validity
Not Before: Dec 22 23:42:45 2025 GMT
Not After : Dec 29 23:42:45 2025 GMT
Subject: CN=6949d775-d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:ba:a6:3d:f9:38:92:36:df:94:9a:0d:eb:
99:f0:d1:84:bf:18:8c:e6:47:c2:05:fd:4d:8c:b2:
37:24:b8:dc:dc:45:70:a3:23:a9:d4:dd:b0:11:72:
88:15:c3:3c:b3:87:39:52:58:b1:7c:23:c6:00:9c:
73:62:22:c3:99:86:13:ca:ad:14:94:3c:89:2c:91:
a5:9b:ec:63:a9:ac:0a:a7:6e:91:71:e9:c4:2c:09:
c9:2b:2c:0a:76:02:bd:30:32:eb:2f:dc:be:8f:52:
e5:aa:94:07:bc:04:a0:cc:dc:d0:c8:a9:4e:04:b8:
8f:37:e7:c4:82:78:e6:27:c6:4f:35:69:01:91:34:
b3:13:81:d1:6c:28:ed:c1:47:0b:9e:16:86:37:69:
ee:4b:20:2b:16:c3:c6:28:4c:43:59:01:78:bb:73:
73:7a:1d:26:7a:fc:4b:6a:93:01:b9:e0:92:c0:59:
41:37:cc:a3:80:e5:58:c8:81:47:62:03:53:75:51:
e9:e0:83:9b:14:50:7a:52:13:b1:1f:b0:b1:ff:d1:
6c:e7:9c:60:28:53:e1:2f:d1:e3:44:ad:c3:a0:df:
30:5c:ea:8a:20:af:20:23:21:ca:69:6b:36:7b:ae:
4c:f5:81:3d:b7:32:7f:7e:b3:81:ee:be:d4:9b:75:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A0:A4:05:09:FD:78:3B:8D:A0:BE:B9:69:1A:D0:DD:05:66:DB:2E
X509v3 Authority Key Identifier:
keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:25:53:22:dc:e3:5a:b6:72:31:ad:76:ee:e8:a3:8f:e3:
c6:d7:1e:18:69:ee:96:09:40:6b:5d:49:84:29:cb:91:c1:65:
9a:97:93:e2:8c:72:65:b3:60:d8:4a:c7:48:3d:79:b4:93:86:
d3:86:3d:95:54:ee:8d:e7:92:3c:e6:fc:d8:34:0b:07:f6:67:
94:53:d9:4c:51:4e:3e:09:27:2e:eb:7b:e3:4a:ba:67:e1:31:
f7:5c:8b:dc:0e:b8:43:b2:e7:ef:84:36:ac:19:8b:72:34:8c:
8a:98:8d:e1:b5:f9:97:63:f9:53:97:89:ae:27:3f:8e:76:d0:
69:9d:b2:34:aa:6a:a6:00:48:c7:f5:ac:10:9a:30:18:ae:51:
07:37:a9:41:75:05:b2:66:2a:41:ab:e7:6e:0a:1e:a0:bf:41:
b5:e3:d1:01:77:d5:2d:de:b3:27:fc:e3:bc:51:63:77:b6:db:
f2:da:6d:fe:76:bf:f2:45:92:a5:38:7c:6e:bc:0e:81:85:62:
b2:05:92:2d:04:7e:4d:91:69:68:3c:ac:da:84:78:98:15:b9:
ee:27:1c:76:7a:6e:38:e1:c1:75:83:37:09:81:ee:41:de:7e:
f6:cf:37:18:c5:68:10:5e:c7:cc:ab:75:5f:3d:70:9d:79:48:
0b:d4:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:19 2025 by rpki-client