This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: Sx5kK7tspiayVpwrEs8IHuF58+27YpPuYJFZlKbAHrM= Subject key identifier: C4:2B:0E:3D:A7:B7:7A:4C:4A:4D:F1:12:81:3E:EB:B2:C4:EE:BD:66 Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 1976 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 1968 Signing time: Mon 22 Dec 2025 16:11:12 +0000 Manifest this update: Mon 22 Dec 2025 16:11:11 +0000 Manifest next update: Mon 29 Dec 2025 16:11:11 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: VAU2dKnkw8ZbLiKfXKC5rDVr7L7RUSLaC2QK3LPNLDU=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 70xXWkwNQOqL2UEtMJ5SkT0IFNV0TQ+TXG3w2RYSHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6518 (0x1976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Dec 22 16:11:11 2025 GMT Not After : Dec 29 16:11:11 2025 GMT Subject: CN=69496da0-2128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5b:a8:d1:d4:02:5d:82:7a:c1:33:20:20:8e: 1f:2e:b2:74:e8:5b:ae:2d:a8:6b:6f:4a:cd:63:f5: 0e:2e:8e:50:2a:d3:27:8d:bf:67:98:01:68:19:a4: 82:c3:bf:98:0e:c5:88:31:98:84:39:dc:0f:6d:0d: 4c:ce:06:48:fa:bb:83:fc:cf:d9:4d:d1:b2:49:22: a0:93:21:46:b5:5d:be:22:a7:38:3f:21:7e:17:25: 92:03:32:64:ec:93:9b:b4:80:10:58:f0:5d:65:46: 58:12:18:bd:4f:fd:11:da:d1:b4:78:50:08:9e:dd: 81:bf:ac:4c:b0:a4:33:55:e7:3f:49:6c:f1:f5:e5: 52:73:08:b6:e8:de:0e:96:9a:31:ba:49:86:81:00: ff:61:24:1b:b2:2c:14:ca:2b:5c:44:c6:21:4a:22: 2f:b4:9b:fb:d1:74:ad:37:12:2b:32:f8:24:5c:e4: 88:a8:e9:6b:21:26:74:f9:77:f6:8e:19:98:22:3a: 9d:87:07:c4:f6:8c:1d:aa:46:4f:a7:ff:a4:6e:a9: be:6e:0f:5e:fc:67:b1:7a:c3:5c:4b:da:e9:6e:9e: 24:fc:1b:eb:98:f7:cf:1e:9b:2d:85:83:cb:9b:e1: f1:f9:67:54:c2:62:2b:a1:2d:62:6e:05:44:3b:75: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:0E:3D:A7:B7:7A:4C:4A:4D:F1:12:81:3E:EB:B2:C4:EE:BD:66 X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:4d:6c:05:40:df:42:df:54:21:05:06:cd:f8:61:f5:63:c1: 1e:cc:cf:ee:20:5a:65:9f:bb:87:2f:03:71:d2:16:7e:48:15: af:7a:55:2d:1d:59:c3:e3:5b:a6:8e:1e:37:7c:9b:41:5c:f8: 62:74:f2:40:54:a6:c1:1c:8c:ef:02:2e:6a:44:1a:41:34:b0: 2b:7e:2d:7c:a2:8c:fa:5f:4f:0a:e3:1e:49:67:e9:79:b4:3c: df:3a:28:4e:2d:1a:84:6c:1b:a5:74:ab:1f:29:d6:bf:5d:30: 55:66:f4:36:30:6f:11:6f:ea:8c:8f:73:1b:ca:c9:02:65:66: 84:ea:58:18:ec:f0:5b:26:11:ef:65:a5:bd:bc:d9:38:20:6c: c5:75:b3:9c:d6:2d:5e:0e:a2:e6:42:ce:9a:66:e7:e7:25:0d: f4:8b:5d:fb:fb:58:65:e0:92:59:48:36:a9:34:1f:ec:ea:08: b0:bd:84:0f:91:d3:88:c0:81:c1:89:be:92:78:33:f2:4b:bf: 44:0c:3f:d5:24:7f:a0:ec:a9:9c:48:66:7b:9d:72:33:e7:d6: 00:87:c8:7e:8f:3b:db:12:ce:80:d5:36:42:45:50:d6:8c:f8: ab:8d:53:60:f5:a3:28:12:63:9b:2e:bc:56:0e:0b:b0:1c:57: fe:d7:5f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjUxMjIyMTYxMTExWhcNMjUxMjI5MTYxMTExWjAYMRYwFAYD VQQDDA02OTQ5NmRhMC0yMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vuo0dQCXYJ6wTMgII4fLrJ06FuuLahrb0rNY/UOLo5QKtMnjb9nmAFoGaSC w7+YDsWIMZiEOdwPbQ1MzgZI+ruD/M/ZTdGySSKgkyFGtV2+Iqc4PyF+FyWSAzJk 7JObtIAQWPBdZUZYEhi9T/0R2tG0eFAInt2Bv6xMsKQzVec/SWzx9eVScwi26N4O lpoxukmGgQD/YSQbsiwUyitcRMYhSiIvtJv70XStNxIrMvgkXOSIqOlrISZ0+Xf2 jhmYIjqdhwfE9owdqkZPp/+kbqm+bg9e/GexesNcS9rpbp4k/BvrmPfPHpsthYPL m+Hx+WdUwmIroS1ibgVEO3XciQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQrDj2n t3pMSk3xEoE+67LE7r1mMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMTWwFQN9C31QhBQbN+GH1Y8EezM/uIFpln7uHLwNx0hZ+SBWvelUt HVnD41umjh43fJtBXPhidPJAVKbBHIzvAi5qRBpBNLArfi18ooz6X08K4x5JZ+l5 tDzfOihOLRqEbBuldKsfKda/XTBVZvQ2MG8Rb+qMj3MbyskCZWaE6lgY7PBbJhHv ZaW9vNk4IGzFdbOc1i1eDqLmQs6aZufnJQ30i137+1hl4JJZSDapNB/s6giwvYQP kdOIwIHBib6SeDPyS79EDD/VJH+g7KmcSGZ7nXIz59YAh8h+jzvbEs6A1TZCRVDW jPirjVNg9aMoEmObLrxWDguwHFf+11+i -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:24 2025 by rpki-client