This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft File: tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft (raw, json) Hash identifier: Uc9WQ/0f2jxxlIphcC42jUukEQScbS2Z4xG8o6jjASw= Subject key identifier: 36:FE:D9:41:32:4A:86:F2:66:9F:52:8F:46:FB:F4:83:7E:35:C4:61 Authority key identifier: B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 Certificate issuer: /CN=A91758EC/serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft Manifest number: 49 Signing time: Sun 07 Dec 2025 05:24:38 +0000 Manifest this update: Sun 07 Dec 2025 05:24:37 +0000 Manifest next update: Sun 14 Dec 2025 05:24:37 +0000 Files and hashes: 1: tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl (hash: 5Zguf0gctT9YqFv47oeNYdhpG0L/jKFZ3z21S7JlDwA=) 2: F8160AD86E1C11F0A9381E85C4F9AE02.roa (hash: C6WLz8pg0rqM3qeZ+YC0BJ8jpvArrDDfO+jGLc5bHSQ=) 3: F88DC2766E1C11F0A9381E85C4F9AE02.roa (hash: i6WXTIBGM94y1QaV3vi+ZNcgxl/9nWzNVLRTa2F/avU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758EC, serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Validity Not Before: Dec 7 05:24:37 2025 GMT Not After : Dec 14 05:24:37 2025 GMT Subject: CN=69350f95-fa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:bb:96:0f:8a:1f:40:23:17:9a:5f:db:5d: 38:8d:79:11:5f:0d:b6:48:15:80:ab:54:f0:94:fd: 95:cc:c9:08:54:71:96:4a:ba:78:1a:55:55:54:74: ed:8a:d3:f3:0d:79:e5:35:74:88:96:c9:9b:70:96: 84:9f:77:2c:3c:85:43:32:39:a0:b0:19:ef:67:c8: 28:e3:25:25:fd:fb:3c:1d:76:20:c1:c8:a1:97:c6: 43:17:7e:ee:29:59:60:b7:70:fc:6e:a6:d8:e3:af: 17:77:02:0f:7a:85:7f:53:11:19:b3:93:29:0f:07: 64:fb:9c:e8:a4:42:d2:07:f3:ef:dd:10:3a:10:6d: e5:3d:c3:6e:23:66:f3:a7:55:4c:3b:c2:64:31:a8: f5:71:fc:d9:4f:a0:d9:6f:71:27:6d:ab:98:09:76: 4b:5b:29:60:98:53:9d:11:6f:d9:da:23:7d:18:de: 4c:e4:37:1b:5c:ed:a8:45:75:1b:5f:86:54:aa:53: 53:7f:80:85:5d:cc:bc:8f:85:6e:08:6c:e8:e1:95: 07:36:95:54:31:19:63:99:16:e3:cb:0c:db:3b:27: e0:d0:1e:c8:06:d4:5e:a6:0f:54:29:33:34:15:13: 02:09:ea:05:0b:aa:2a:4f:82:2a:0f:b4:d7:25:f7: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FE:D9:41:32:4A:86:F2:66:9F:52:8F:46:FB:F4:83:7E:35:C4:61 X509v3 Authority Key Identifier: keyid:B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:95:0f:d0:bc:dd:db:57:cb:94:c1:eb:ee:8a:75:3d:f5:d4: fd:08:87:da:1b:d5:b3:5c:20:3a:88:cb:cd:7a:2b:bb:d2:99: 67:4b:af:0c:a9:74:66:b9:fa:43:8c:54:f4:58:7f:e5:79:6e: 84:92:a1:86:c3:58:51:55:b1:2a:78:84:de:d2:ec:cb:0a:b9: 0b:c9:10:4e:b0:17:6a:a1:9e:51:1a:e2:05:8b:86:f4:e1:d9: 7a:87:95:c6:4d:28:ba:b5:69:a0:48:e7:04:4e:a2:c9:41:1b: 47:a1:89:ba:1e:53:fe:d8:38:8b:fe:f9:bd:19:15:b1:98:e5: 48:e1:28:86:82:a5:79:9e:f0:b9:88:29:f0:af:88:2a:55:c5: ac:7d:64:bf:1e:b0:81:13:85:65:ec:f6:43:e9:5a:a3:99:2a: 7c:61:b2:b0:c0:19:0a:d9:f3:a9:61:1d:c8:a4:a9:72:46:37: b3:f9:e4:9b:23:c5:f2:a0:3b:49:6e:2d:c5:31:a9:e2:77:94: 08:a6:90:9a:75:2f:d7:06:ed:c2:43:8f:93:ef:0f:49:4c:ab: a3:a5:95:89:c3:ef:6c:bc:d6:0d:e9:5f:59:37:3b:bc:34:fb: 68:67:bc:3c:24:12:e7:c2:83:6a:3d:b3:9f:25:81:45:42:7b: 88:8e:30:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NThFQzExMC8GA1UEBRMoQjZGQjA3RTAzOERFRjA2QzgyMEJDNkNEMjAzNTE0NTU0 RDY0M0Q2ODAeFw0yNTEyMDcwNTI0MzdaFw0yNTEyMTQwNTI0MzdaMBgxFjAUBgNV BAMTDTY5MzUwZjk1LWZhNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4bruWD4ofQCMXml/bXTiNeRFfDbZIFYCrVPCU/ZXMyQhUcZZKungaVVVUdO2K 0/MNeeU1dIiWyZtwloSfdyw8hUMyOaCwGe9nyCjjJSX9+zwddiDByKGXxkMXfu4p WWC3cPxuptjjrxd3Ag96hX9TERmzkykPB2T7nOikQtIH8+/dEDoQbeU9w24jZvOn VUw7wmQxqPVx/NlPoNlvcSdtq5gJdktbKWCYU50Rb9naI30Y3kzkNxtc7ahFdRtf hlSqU1N/gIVdzLyPhW4IbOjhlQc2lVQxGWOZFuPLDNs7J+DQHsgG1F6mD1QpMzQV EwIJ6gULqipPgioPtNcl9xDtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNv7ZQTJK hvJmn1KPRvv0g341xGEwHwYDVR0jBBgwFoAUtvsH4Dje8GyCC8bNIDUUVU1kPWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OEVDLzc0RDM1ODQwNjYz MDExRjBCOURDNEU2NEM0RjlBRTAyL3R2c0g0RGplOEd5Q0M4Yk5JRFVVVlUxa1BX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHZzSDREamU4R3lDQzhiTklEVVVWVTFrUFdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OEVDLzc0RDM1ODQwNjYzMDExRjBCOURDNEU2NEM0RjlBRTAyL3R2c0g0RGplOEd5 Q0M4Yk5JRFVVVlUxa1BXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqVD9C83dtXy5TB6+6KdT311P0Ih9ob1bNcIDqIy816K7vSmWdLrwyp dGa5+kOMVPRYf+V5boSSoYbDWFFVsSp4hN7S7MsKuQvJEE6wF2qhnlEa4gWLhvTh 2XqHlcZNKLq1aaBI5wROoslBG0ehiboeU/7YOIv++b0ZFbGY5UjhKIaCpXme8LmI KfCviCpVxax9ZL8esIEThWXs9kPpWqOZKnxhsrDAGQrZ86lhHcikqXJGN7P55Jsj xfKgO0luLcUxqeJ3lAimkJp1L9cG7cJDj5PvD0lMq6OllYnD72y81g3pX1k3O7w0 +2hnvDwkEufCg2o9s58lgUVCe4iOMHg= -----END CERTIFICATE-----Generated at Mon Dec 8 06:15:27 2025 by rpki-client