This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: X2yIQVOnCDOMLfHk8nDgyGPdMIZHWR643xYpZKtWeNs= Subject key identifier: 27:CB:E9:91:C7:F8:51:8E:D4:B8:02:C5:63:08:F3:78:49:BC:18:C3 Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 04B4 Signing time: Mon 22 Dec 2025 23:00:10 +0000 Manifest this update: Mon 22 Dec 2025 23:00:10 +0000 Manifest next update: Mon 29 Dec 2025 23:00:10 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: kUlA3ULG4CqE7iSw4xgEupf5cLq4W4tt0tU7R51mkE4=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Dec 22 23:00:10 2025 GMT Not After : Dec 29 23:00:10 2025 GMT Subject: CN=6949cd7a-5f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:23:11:5e:9f:b2:aa:b4:fd:08:70:9c:13: 40:e5:c8:2c:76:96:1e:0f:40:f2:37:79:58:f6:bc: a6:18:cc:64:f3:19:6d:e5:44:ec:20:aa:72:d1:a4: b1:23:4f:d7:48:f5:ac:f7:d4:45:b7:2e:a5:97:0b: 69:cd:ea:8a:c5:84:ec:e6:59:e7:e9:d4:44:39:48: 83:48:05:14:03:a9:ff:59:12:25:e4:07:22:87:98: 5a:6a:5b:dc:49:7f:6c:32:e8:77:25:1a:83:8d:a2: 94:d1:51:5b:ad:4f:74:1d:b7:03:ee:cc:d6:62:55: 69:25:d2:b2:0f:a7:f7:7c:73:a7:9d:65:f6:0a:c0: 63:24:d4:fc:64:08:36:e0:74:06:87:17:47:8f:99: 82:62:41:e6:c0:31:fa:a5:16:8a:35:4f:e4:e8:1f: c7:40:8c:10:73:d8:bc:a4:a7:b3:e8:53:b1:3e:da: 8e:ff:c2:28:e5:93:63:8d:38:ce:ae:73:9c:e4:4f: 2f:14:e8:dd:ae:2a:a3:d0:d3:3c:27:05:ea:5f:6e: d4:6e:93:05:fe:1b:2d:92:6b:f4:b9:1c:6f:67:11: 04:c0:94:ed:51:20:47:af:96:61:d4:81:9b:5a:15: f2:e6:93:a2:1c:80:de:2f:48:e1:2c:58:23:9f:82: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CB:E9:91:C7:F8:51:8E:D4:B8:02:C5:63:08:F3:78:49:BC:18:C3 X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a0:5e:84:94:8f:ea:ba:f5:d3:e5:1d:bd:1e:0a:04:ae:5a: fe:ee:1c:3a:07:34:6d:b2:45:d2:67:e1:2f:e4:29:ed:f1:80: ef:0a:a5:2f:73:65:6a:21:7e:48:d2:f7:fc:0d:45:3d:5c:cf: 0b:42:37:0a:d3:d2:0b:13:2b:0d:5a:35:bd:91:2a:a9:12:c8: 33:10:c6:b6:c9:80:1a:2b:70:f7:d1:99:ee:14:fe:e4:fa:70: 67:60:3f:42:8f:7e:8e:8b:b2:ee:d1:f7:49:2c:9e:84:41:71: 21:25:0a:64:06:fe:85:2b:4b:9d:9d:72:b8:39:41:42:8a:63: 6b:32:98:86:52:f8:a2:b8:bb:7d:a7:1f:d9:20:e4:69:d7:6b: 0b:1e:f3:d1:a1:f1:4b:02:1e:db:47:e2:d8:e8:b5:c3:b2:77: 6a:ef:d8:d9:d9:f5:f6:4c:a0:b0:c6:ce:c1:bb:75:1d:48:3c: 40:7e:48:a8:f1:34:1a:95:2a:43:15:92:92:39:83:c4:42:3e: 40:4b:b1:77:87:36:f8:ff:d4:de:65:5b:93:2f:17:9e:fe:c3: e3:0e:32:fb:5d:83:c1:35:d1:bd:81:cc:0d:89:65:ce:4f:31: 70:42:db:40:1d:ec:76:01:85:3c:4f:b8:3e:ca:86:64:86:19: 2d:ff:c2:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjUxMjIyMjMwMDEwWhcNMjUxMjI5MjMwMDEwWjAYMRYwFAYD VQQDDA02OTQ5Y2Q3YS01Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjojEV6fsqq0/QhwnBNA5cgsdpYeD0DyN3lY9rymGMxk8xlt5UTsIKpy0aSx I0/XSPWs99RFty6llwtpzeqKxYTs5lnn6dREOUiDSAUUA6n/WRIl5Acih5haalvc SX9sMuh3JRqDjaKU0VFbrU90HbcD7szWYlVpJdKyD6f3fHOnnWX2CsBjJNT8ZAg2 4HQGhxdHj5mCYkHmwDH6pRaKNU/k6B/HQIwQc9i8pKez6FOxPtqO/8Io5ZNjjTjO rnOc5E8vFOjdriqj0NM8JwXqX27UbpMF/hstkmv0uRxvZxEEwJTtUSBHr5Zh1IGb WhXy5pOiHIDeL0jhLFgjn4KpIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfL6ZHH +FGO1LgCxWMI83hJvBjDMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgoF6ElI/quvXT5R29HgoErlr+7hw6BzRtskXSZ+Ev5Cnt8YDvCqUv c2VqIX5I0vf8DUU9XM8LQjcK09ILEysNWjW9kSqpEsgzEMa2yYAaK3D30ZnuFP7k +nBnYD9Cj36Oi7Lu0fdJLJ6EQXEhJQpkBv6FK0udnXK4OUFCimNrMpiGUviiuLt9 px/ZIORp12sLHvPRofFLAh7bR+LY6LXDsndq79jZ2fX2TKCwxs7Bu3UdSDxAfkio 8TQalSpDFZKSOYPEQj5AS7F3hzb4/9TeZVuTLxee/sPjDjL7XYPBNdG9gcwNiWXO TzFwQttAHex2AYU8T7g+yoZkhhkt/8Li -----END CERTIFICATE-----Generated at Tue Dec 23 20:40:19 2025 by rpki-client