This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: DrfwQ1XC5EWFCsZhjznv/yn4sI6ka3yQDOa8ypyxCwk= Subject key identifier: B3:D8:F1:E2:DD:88:06:9F:58:4D:C0:67:5D:AA:0F:E6:34:20:D8:D4 Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 04AC Signing time: Sat 06 Dec 2025 22:39:44 +0000 Manifest this update: Sat 06 Dec 2025 22:39:43 +0000 Manifest next update: Sat 13 Dec 2025 22:39:43 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: NnX9OsVvegSGh7ihntkoWN2RUO0Fz04Mm2y0UWIXBWU=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Dec 6 22:39:43 2025 GMT Not After : Dec 13 22:39:43 2025 GMT Subject: CN=6934b0b0-59a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:0e:a7:fc:37:bf:5c:92:41:24:ad:c7:c6: 79:e2:8c:9b:be:55:a7:c9:a8:25:92:34:3a:34:0a: f9:dc:89:86:64:2f:49:e3:c7:7b:c3:22:16:44:ee: 13:b9:6e:60:69:42:f2:14:95:51:c5:95:e2:ea:ec: 4f:75:c3:b5:8b:1c:72:f9:31:5a:a9:37:dd:49:32: b5:d9:8d:9f:97:18:9c:c7:c3:84:cb:c8:ca:8d:72: f4:76:c6:d9:eb:de:19:4d:d9:f2:d5:72:1c:b7:e1: 21:bb:03:2c:aa:0e:81:0d:4a:eb:84:3f:f9:e6:ff: b6:b0:f8:7d:a7:ae:20:32:04:6d:48:d7:d0:63:9f: df:72:6a:bf:95:fa:a2:88:64:42:d4:6f:db:21:50: a0:eb:35:9c:04:92:19:ee:e9:05:5e:3d:8e:74:bf: f7:8b:69:8a:14:3d:15:5e:68:13:1f:b4:f6:70:38: c3:9e:1a:0a:cf:8d:22:a5:da:15:39:a3:93:c7:9a: 89:4f:76:50:82:3d:9c:03:97:58:25:9b:a4:46:93: ba:28:13:e8:15:bb:17:b5:72:ce:28:b3:f6:ee:dd: 47:d8:38:32:82:d4:2b:56:c2:ef:81:98:c6:91:fa: b9:15:fd:85:7f:29:9d:b9:43:5f:df:44:94:f9:62: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D8:F1:E2:DD:88:06:9F:58:4D:C0:67:5D:AA:0F:E6:34:20:D8:D4 X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ed:cf:a3:58:75:1e:d8:64:4b:1e:a5:be:93:f1:c3:53:1e: 8e:4f:e6:52:72:61:92:28:db:73:5f:80:14:74:9a:10:3d:ed: 75:72:8d:96:a2:65:5f:5e:dc:c4:33:ee:e4:3d:3c:7f:69:69: 67:22:83:c4:2e:ba:84:d7:65:6a:27:14:0d:f9:5e:40:cf:03: 0f:7e:07:73:c4:5f:c6:82:8c:43:b4:a1:3e:04:e0:58:01:de: 01:97:57:a4:12:5a:31:49:75:fa:03:3f:cb:a1:0a:f3:66:5d: a0:10:77:30:4f:b2:93:4e:f6:12:27:5d:7f:f6:f0:ee:3c:ef: a5:40:25:81:91:a3:77:94:4f:7f:5f:7d:2f:9d:8a:76:68:38: 3a:4f:33:86:91:b6:fb:de:01:73:0e:4e:b6:f1:dc:40:93:e6: 1b:58:bc:20:2c:ef:8f:3e:6a:03:a4:d7:4f:0a:bf:dd:09:45: d2:8f:e3:c8:ef:69:f8:7b:71:ee:c1:77:ec:80:f8:d1:5e:fc: ad:ff:de:8e:b7:b6:e5:46:38:f6:80:a2:57:7d:21:06:e7:3f: c0:bf:83:3d:00:5b:74:71:7a:95:14:19:8c:c4:22:fb:75:ea: a6:30:69:c4:83:5f:e0:8e:c6:34:89:20:cb:1b:35:bd:1a:54: 9e:db:e4:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjUxMjA2MjIzOTQzWhcNMjUxMjEzMjIzOTQzWjAYMRYwFAYD VQQDEw02OTM0YjBiMC01OWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUEOp/w3v1ySQSStx8Z54oybvlWnyaglkjQ6NAr53ImGZC9J48d7wyIWRO4T uW5gaULyFJVRxZXi6uxPdcO1ixxy+TFaqTfdSTK12Y2flxicx8OEy8jKjXL0dsbZ 694ZTdny1XIct+EhuwMsqg6BDUrrhD/55v+2sPh9p64gMgRtSNfQY5/fcmq/lfqi iGRC1G/bIVCg6zWcBJIZ7ukFXj2OdL/3i2mKFD0VXmgTH7T2cDjDnhoKz40ipdoV OaOTx5qJT3ZQgj2cA5dYJZukRpO6KBPoFbsXtXLOKLP27t1H2DgygtQrVsLvgZjG kfq5Ff2FfymduUNf30SU+WKAAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPY8eLd iAafWE3AZ12qD+Y0INjUMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr7c+jWHUe2GRLHqW+k/HDUx6OT+ZScmGSKNtzX4AUdJoQPe11co2W omVfXtzEM+7kPTx/aWlnIoPELrqE12VqJxQN+V5AzwMPfgdzxF/GgoxDtKE+BOBY Ad4Bl1ekEloxSXX6Az/LoQrzZl2gEHcwT7KTTvYSJ11/9vDuPO+lQCWBkaN3lE9/ X30vnYp2aDg6TzOGkbb73gFzDk628dxAk+YbWLwgLO+PPmoDpNdPCr/dCUXSj+PI 72n4e3HuwXfsgPjRXvyt/96Ot7blRjj2gKJXfSEG5z/Av4M9AFt0cXqVFBmMxCL7 deqmMGnEg1/gjsY0iSDLGzW9GlSe2+TD -----END CERTIFICATE-----Generated at Sun Dec 7 19:57:15 2025 by rpki-client