This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: 6Ym4ELU+INpl1b08oF1x3MqfsK2Md+KKYg/q5tNLKIQ= Subject key identifier: 4B:12:2E:95:9A:EA:25:C2:C9:E4:CA:93:AE:B5:43:60:A6:FD:94:2E Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C47 Signing time: Mon 22 Dec 2025 18:16:28 +0000 Manifest this update: Mon 22 Dec 2025 18:16:28 +0000 Manifest next update: Mon 29 Dec 2025 18:16:28 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: /pD6ACvB+oOMFadgPGxd5YOmKauyndGJEN2FTQw7l2w=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nfqNeR+bbEfavJF+ova8yLO5QWoKeC1GYyFqfwg0csE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Dec 22 18:16:28 2025 GMT Not After : Dec 29 18:16:28 2025 GMT Subject: CN=69498afc-eaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:92:6a:0c:16:b0:bb:41:61:1f:1e:83:ec:04: ea:e3:6f:8d:ae:64:68:b3:13:9d:47:c3:ba:a4:55: da:b6:4a:bd:fa:96:b9:9d:d1:d2:af:e7:aa:79:62: 7c:75:c3:16:24:a0:df:8d:57:87:5a:de:75:91:f9: 96:40:03:11:97:88:1d:c3:4b:ae:ad:27:fb:d3:2d: ed:35:3e:76:6e:8d:ec:c0:bc:3d:0b:51:42:86:5c: c1:4b:35:7e:6a:98:66:0b:40:bc:31:aa:89:c8:40: 40:fc:c4:01:6b:54:c5:1c:f7:85:2f:54:97:2b:09: a9:f8:3f:4d:6a:b2:4b:1b:82:bf:e5:d0:39:8b:f7: 7b:6a:fa:65:a6:92:fa:ad:19:18:c0:c8:7f:d8:99: 96:17:5f:25:3a:23:dc:d0:f9:f4:c7:51:bc:b9:b3: f0:89:15:0d:77:c1:84:1d:67:b1:91:ef:46:5f:12: 68:fa:a8:52:68:3c:e3:19:6f:db:7a:33:9a:83:49: 00:e5:24:7c:f6:b3:d9:31:e5:a3:cf:b2:77:43:fe: 01:fd:59:f2:aa:d1:8a:fd:ea:39:f4:d5:b8:89:5f: 56:4f:b4:ac:d6:ef:78:46:96:53:80:a8:2d:0b:97: 3d:c8:5c:49:06:a8:36:47:4f:62:bc:7a:95:cc:a1: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:2E:95:9A:EA:25:C2:C9:E4:CA:93:AE:B5:43:60:A6:FD:94:2E X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4b:0f:f1:03:bc:1a:cb:54:29:69:5b:11:0a:c6:86:b9:76: 89:25:9d:d9:25:d0:34:2b:7e:96:82:fe:a4:91:55:a6:79:a9: 80:1a:c9:40:92:ae:6c:3f:94:f7:65:cb:5f:51:2a:08:a3:4b: 2c:db:f0:74:9f:07:c4:88:25:37:e4:88:26:6f:8f:a0:95:a5: c1:04:84:0a:86:1d:21:d6:9f:87:32:49:2e:ef:3d:ee:bf:df: 61:81:2c:18:a9:23:48:4b:78:20:25:e8:bf:cc:50:0e:ef:d8: 9d:a7:12:44:3d:db:23:14:3c:b7:ae:8f:af:d1:bc:8d:40:e0: f2:55:bf:2e:82:92:1b:6c:f9:3a:e7:59:d3:c2:b6:22:63:27: f6:9e:48:94:15:61:d1:f9:cb:2e:67:0c:11:08:7b:d6:e4:4d: 84:fe:a6:05:25:07:21:bc:38:ef:eb:d6:1a:5b:59:74:29:5c: 7c:5b:2b:93:b4:3f:68:ae:e8:6c:6b:78:01:2a:12:ee:db:a2: 6e:c7:74:c6:22:d7:00:72:7e:83:8b:af:99:cf:28:d5:15:b6: a7:eb:ec:d9:43:96:92:a8:77:31:d3:fa:d3:3c:ff:78:77:c5: 9f:fc:e5:3f:e8:e1:29:5c:c6:72:39:5c:b3:ba:12:5d:95:1b: 17:93:4a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUxMjIyMTgxNjI4WhcNMjUxMjI5MTgxNjI4WjAYMRYwFAYD VQQDDA02OTQ5OGFmYy1lYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JJqDBawu0FhHx6D7ATq42+NrmRosxOdR8O6pFXatkq9+pa5ndHSr+eqeWJ8 dcMWJKDfjVeHWt51kfmWQAMRl4gdw0uurSf70y3tNT52bo3swLw9C1FChlzBSzV+ aphmC0C8MaqJyEBA/MQBa1TFHPeFL1SXKwmp+D9NarJLG4K/5dA5i/d7avplppL6 rRkYwMh/2JmWF18lOiPc0Pn0x1G8ubPwiRUNd8GEHWexke9GXxJo+qhSaDzjGW/b ejOag0kA5SR89rPZMeWjz7J3Q/4B/VnyqtGK/eo59NW4iV9WT7Ss1u94RpZTgKgt C5c9yFxJBqg2R09ivHqVzKH7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsSLpWa 6iXCyeTKk661Q2Cm/ZQuMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Sw/xA7way1QpaVsRCsaGuXaJJZ3ZJdA0K36Wgv6kkVWmeamAGslA kq5sP5T3ZctfUSoIo0ss2/B0nwfEiCU35Igmb4+glaXBBIQKhh0h1p+HMkku7z3u v99hgSwYqSNIS3ggJei/zFAO79idpxJEPdsjFDy3ro+v0byNQODyVb8ugpIbbPk6 51nTwrYiYyf2nkiUFWHR+csuZwwRCHvW5E2E/qYFJQchvDjv69YaW1l0KVx8WyuT tD9oruhsa3gBKhLu26Jux3TGItcAcn6Di6+ZzyjVFban6+zZQ5aSqHcx0/rTPP94 d8Wf/OU/6OEpXMZyOVyzuhJdlRsXk0rB -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:28 2025 by rpki-client