This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: EyY3JOjkPfhjmPM/387n9iG4qvvP0BHQpClLui8IOvg= Subject key identifier: 99:AE:90:35:4D:5F:DD:34:5D:7C:0D:24:6A:B0:1C:0F:72:99:84:11 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 17F4 Signing time: Tue 18 Nov 2025 16:32:55 +0000 Manifest this update: Tue 18 Nov 2025 16:32:55 +0000 Manifest next update: Tue 25 Nov 2025 16:32:55 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: /duADSpUcfI10H9V0yFqwBkqjMaL47ivwc8tJ5RtlKw=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=) 4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=) 6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=) 7: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: nxh+Hkcrac8LqC1HhPwsPG/aZ2MHHIYI4A/3WElmkFc=) 8: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Nov 2025 16:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6662 (0x1a06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Nov 18 16:32:55 2025 GMT Not After : Nov 25 16:32:55 2025 GMT Subject: CN=691c9fb7-b558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:05:30:1c:ba:80:e1:8b:29:75:b4:46:71: b7:12:62:77:55:3b:ac:cf:90:fc:9a:24:ee:41:e6: 8f:ac:03:06:65:77:aa:ba:ed:2c:51:67:5a:33:c5: f6:a4:fd:23:e7:3c:e1:1d:36:63:fc:88:08:4f:5e: 7f:55:17:51:93:fd:18:0c:46:58:a2:26:37:7b:2e: 1f:c3:cb:ee:f6:4b:4a:c7:12:2a:2d:8a:7e:83:e4: 90:82:6a:fc:6e:c2:4b:f5:ea:49:43:01:e9:a7:19: 33:be:87:a3:37:ab:40:5c:90:ba:77:1a:88:cc:3c: c7:b8:92:e4:6c:99:b1:36:69:e0:d3:6c:30:90:78: 9c:6e:2e:0e:b2:ad:75:46:44:91:8b:38:f4:60:cd: 34:c9:97:a1:47:c5:ed:91:a9:8f:c2:de:25:b9:f6: ba:0d:67:2c:70:7e:be:5b:7a:b2:76:93:e3:9a:35: 15:ec:fb:93:84:c2:f5:7e:43:c9:15:0c:fb:7d:52: c9:de:94:41:6b:e5:ec:10:6d:39:53:eb:6e:ea:c4: 22:c3:54:11:76:24:0d:3b:c0:d6:18:e8:ee:8d:11: 08:d3:9c:86:b0:22:ed:fc:46:6d:45:bb:af:2f:47: 4c:4f:63:b7:ad:0f:aa:50:96:50:20:6a:d7:4e:80: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AE:90:35:4D:5F:DD:34:5D:7C:0D:24:6A:B0:1C:0F:72:99:84:11 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c9:ae:e7:a2:6d:9f:1a:79:51:4a:1b:87:4b:44:41:cf:a5: ed:53:31:e0:ab:7b:c5:a4:77:fa:02:7a:0d:d5:3f:84:4d:0a: 42:6b:be:b5:08:26:36:92:93:bb:15:43:2a:5b:1f:03:0d:4b: 0f:8c:78:16:4a:46:04:73:b7:12:ce:fe:64:54:e4:cd:9e:9a: 59:5e:fb:16:3d:a9:6b:cc:97:13:ff:b6:ab:4c:5c:e2:b0:d7: 52:e4:df:60:c9:ef:78:e1:55:b1:b1:9f:75:34:eb:ba:2d:bf: ed:15:3b:cc:71:36:9f:60:11:d5:5b:bb:52:06:52:0a:bb:28: 34:54:ba:2d:30:e3:d7:44:17:51:48:61:17:58:14:7f:8a:fa: 2b:ee:39:f6:90:99:08:fb:30:4d:29:b3:3a:cc:6c:00:40:e4: ec:d5:3f:86:f7:fd:76:15:2f:71:27:3f:2d:7f:86:22:24:9d: c5:24:3e:31:f9:9b:d7:33:3f:8b:cc:a0:41:e4:56:d4:bc:ac: 33:d7:74:17:ef:c7:f8:3e:67:05:36:7e:d6:4d:de:d6:59:15: 54:c3:1c:50:0a:ec:17:59:96:10:02:3e:67:c3:78:73:8c:65: 58:f0:03:97:c0:46:90:f2:d5:79:f5:fe:50:19:d1:da:6a:82: b6:89:33:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUxMTE4MTYzMjU1WhcNMjUxMTI1MTYzMjU1WjAYMRYwFAYD VQQDEw02OTFjOWZiNy1iNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspAFMBy6gOGLKXW0RnG3EmJ3VTusz5D8miTuQeaPrAMGZXequu0sUWdaM8X2 pP0j5zzhHTZj/IgIT15/VRdRk/0YDEZYoiY3ey4fw8vu9ktKxxIqLYp+g+SQgmr8 bsJL9epJQwHppxkzvoejN6tAXJC6dxqIzDzHuJLkbJmxNmng02wwkHicbi4Osq11 RkSRizj0YM00yZehR8XtkamPwt4lufa6DWcscH6+W3qydpPjmjUV7PuThML1fkPJ FQz7fVLJ3pRBa+XsEG05U+tu6sQiw1QRdiQNO8DWGOjujREI05yGsCLt/EZtRbuv L0dMT2O3rQ+qUJZQIGrXToCMiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmukDVN X900XXwNJGqwHA9ymYQRMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVya7nom2fGnlRShuHS0RBz6XtUzHgq3vFpHf6AnoN1T+ETQpCa761 CCY2kpO7FUMqWx8DDUsPjHgWSkYEc7cSzv5kVOTNnppZXvsWPalrzJcT/7arTFzi sNdS5N9gye944VWxsZ91NOu6Lb/tFTvMcTafYBHVW7tSBlIKuyg0VLotMOPXRBdR SGEXWBR/ivor7jn2kJkI+zBNKbM6zGwAQOTs1T+G9/12FS9xJz8tf4YiJJ3FJD4x +ZvXMz+LzKBB5FbUvKwz13QX78f4PmcFNn7WTd7WWRVUwxxQCuwXWZYQAj5nw3hz jGVY8AOXwEaQ8tV59f5QGdHaaoK2iTO4 -----END CERTIFICATE-----Generated at Wed Nov 19 09:34:30 2025 by rpki-client