This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: 79fktr3XsObAadtfspbbS10jeyQ6wrLRsHiMIRL0S+Q= Subject key identifier: A8:CA:30:EC:F9:60:67:C8:87:2B:41:59:B3:B5:47:D9:EC:BB:2C:95 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 34F6 Signing time: Mon 22 Dec 2025 15:00:34 +0000 Manifest this update: Mon 22 Dec 2025 15:00:34 +0000 Manifest next update: Mon 29 Dec 2025 15:00:34 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: FyYZzjLjxSgvmSroE7xaSc2kgXFAMyHd9xV4VIPl3+Y=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: 11YtS3I8Ib5ImdyS8Fv2jPKvZjt6nVrzUsLpJZymTkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Dec 22 15:00:34 2025 GMT Not After : Dec 29 15:00:34 2025 GMT Subject: CN=69495d12-b46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:e3:b1:16:de:61:3a:ce:c7:86:a0:7f:9b: a9:bd:42:9c:e9:88:ae:95:e8:2d:6f:99:97:a3:f2: 65:eb:df:0f:15:ec:80:a0:05:69:da:ad:2f:da:3b: 2c:86:73:76:36:24:4d:4b:2f:a8:d1:36:ae:db:ac: f4:fc:ed:56:45:00:27:19:6c:36:e6:c6:14:dd:f0: 70:24:ba:1f:83:50:4d:77:6a:be:96:7e:b3:c7:35: ba:0d:b0:69:1c:e5:27:23:da:3d:eb:36:38:cd:ec: a5:f8:2a:f3:f2:ee:3e:bb:2c:4d:7d:bf:a7:3c:13: 90:1c:cb:ab:94:ac:48:e4:21:d8:86:5a:42:9b:26: 97:a3:01:ff:8a:95:bb:2d:64:6e:66:65:76:b7:9c: 1d:9c:54:db:db:99:74:95:d5:9b:c9:44:2b:8a:98: dc:b4:a2:fb:fc:bb:c8:6e:a1:ba:ee:58:ee:1d:5c: 5c:5f:0e:4a:9a:9e:47:35:4b:63:c5:c2:ab:3a:a0: be:2b:7a:23:09:ba:b5:d1:d1:22:b9:18:be:c6:b6: 89:c0:0b:0c:16:bc:93:c9:cd:03:dc:65:1e:e5:31: f7:f2:a1:a4:28:03:63:c2:be:66:5d:be:54:0e:bf: 22:5a:6e:dd:7f:b4:5d:5b:24:b3:85:44:27:bb:47: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CA:30:EC:F9:60:67:C8:87:2B:41:59:B3:B5:47:D9:EC:BB:2C:95 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d2:51:b0:d9:1f:f4:3a:9e:c8:74:bd:54:9f:1a:eb:10:f0: 52:b1:73:ca:f9:ef:b9:07:c5:d1:c8:8d:08:c4:2a:ea:5c:e2: 3e:1d:29:69:13:12:42:fe:2e:c5:06:d8:ac:e3:15:32:c9:f0: fe:ae:96:2d:f9:8f:57:b4:80:56:bf:89:d7:1b:14:c0:27:f2: 0e:22:ee:12:34:aa:49:5c:42:63:97:84:5a:e0:4a:20:eb:bc: 7a:cc:78:e1:fd:f0:56:e3:85:70:50:27:d3:e9:97:db:8c:cf: a7:2e:45:d8:66:b2:8e:07:6e:5f:58:31:ec:c8:70:02:17:45: d5:6c:12:0a:53:00:e6:3e:ac:3f:47:34:5a:15:47:32:98:64: 57:aa:57:cf:35:d9:b1:00:ec:fa:6e:48:9f:02:60:86:19:76: d8:c2:62:7d:5f:4d:da:7d:9e:b6:5f:55:89:b7:39:3e:7b:db: 3d:05:80:ef:0f:ed:e3:d9:34:f2:0f:ea:88:81:1e:a4:9f:ca: 52:0c:53:d0:de:86:c9:52:ab:b1:e8:16:e8:8f:dc:13:4c:25: 58:29:32:d5:00:6f:a6:cf:f0:26:5b:30:26:99:0c:21:27:0a: 67:86:af:99:5e:0c:4d:94:d0:b4:da:14:b5:6b:a9:d1:5a:93: 77:ce:58:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUxMjIyMTUwMDM0WhcNMjUxMjI5MTUwMDM0WjAYMRYwFAYD VQQDDA02OTQ5NWQxMi1iNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthnjsRbeYTrOx4agf5upvUKc6Yiulegtb5mXo/Jl698PFeyAoAVp2q0v2jss hnN2NiRNSy+o0Tau26z0/O1WRQAnGWw25sYU3fBwJLofg1BNd2q+ln6zxzW6DbBp HOUnI9o96zY4zeyl+Crz8u4+uyxNfb+nPBOQHMurlKxI5CHYhlpCmyaXowH/ipW7 LWRuZmV2t5wdnFTb25l0ldWbyUQripjctKL7/LvIbqG67ljuHVxcXw5Kmp5HNUtj xcKrOqC+K3ojCbq10dEiuRi+xraJwAsMFryTyc0D3GUe5TH38qGkKANjwr5mXb5U Dr8iWm7df7RdWySzhUQnu0e6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjKMOz5 YGfIhytBWbO1R9nsuyyVMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ0lGw2R/0Op7IdL1UnxrrEPBSsXPK+e+5B8XRyI0IxCrqXOI+HSlp ExJC/i7FBtis4xUyyfD+rpYt+Y9XtIBWv4nXGxTAJ/IOIu4SNKpJXEJjl4Ra4Eog 67x6zHjh/fBW44VwUCfT6ZfbjM+nLkXYZrKOB25fWDHsyHACF0XVbBIKUwDmPqw/ RzRaFUcymGRXqlfPNdmxAOz6bkifAmCGGXbYwmJ9X03afZ62X1WJtzk+e9s9BYDv D+3j2TTyD+qIgR6kn8pSDFPQ3obJUqux6Bboj9wTTCVYKTLVAG+mz/AmWzAmmQwh Jwpnhq+ZXgxNlNC02hS1a6nRWpN3zljK -----END CERTIFICATE-----Generated at Tue Dec 23 11:20:47 2025 by rpki-client