This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: mXIdx6AzlxPaRQ/jJE/tOcMVxTWNn9/7nV3FcH2B18o= Subject key identifier: FE:DC:76:73:4F:35:55:1D:33:4A:01:63:55:3D:D3:4F:1D:E0:80:C7 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 17F5 Signing time: Thu 20 Nov 2025 16:34:10 +0000 Manifest this update: Thu 20 Nov 2025 16:34:09 +0000 Manifest next update: Thu 27 Nov 2025 16:34:09 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: vk7m2zkLqRuGbQQ7dTbGH/2IMTyJgUwGd5se/obgb2M=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=) 4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=) 6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=) 7: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: nxh+Hkcrac8LqC1HhPwsPG/aZ2MHHIYI4A/3WElmkFc=) 8: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 16:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6663 (0x1a07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Nov 20 16:34:09 2025 GMT Not After : Nov 27 16:34:09 2025 GMT Subject: CN=691f4301-5aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:13:3b:dc:43:70:50:fe:2e:32:e1:79:22: 16:75:fe:a3:9b:80:c6:0a:6a:9f:97:9b:c9:a7:bc: c4:2c:09:8a:a9:5f:dd:e6:81:f0:5c:ca:20:41:76: 0a:40:67:12:07:14:30:68:2c:a4:dd:25:b1:43:cd: 05:ab:06:4f:b5:e9:b1:d5:72:ec:d1:39:93:e7:bb: d3:e7:45:fb:e3:9d:7c:bb:75:b2:80:8a:3d:9b:4d: fd:90:0b:24:bd:ef:06:d0:7d:de:5e:f2:91:a5:a4: d4:be:01:92:72:3b:df:86:44:89:73:5e:94:3d:8a: b2:ff:a1:0f:57:dd:a4:7c:f1:20:a1:6c:43:1b:40: 72:1f:7b:73:7f:66:36:4b:b9:54:9f:30:95:80:bd: e2:08:77:1c:17:30:44:02:06:55:5e:7f:59:c9:bd: ea:42:3e:bb:7e:6e:7c:63:a4:3c:e2:2a:d4:92:67: d8:18:de:28:d1:87:f3:a7:4a:51:10:e5:18:cd:c9: 5e:e3:be:42:96:ac:ae:5a:73:b5:72:38:01:5d:b3: 1b:23:cd:94:e8:14:60:28:83:3f:e6:be:f6:92:6e: e3:9f:6c:bd:71:e8:ce:28:0c:42:f2:c6:52:19:39: 15:68:a1:cf:95:7c:f9:45:bb:c0:15:7a:a0:74:c7: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DC:76:73:4F:35:55:1D:33:4A:01:63:55:3D:D3:4F:1D:E0:80:C7 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a4:48:4a:bd:71:06:0b:79:c4:24:46:d7:eb:23:22:d6:b2: 87:37:c9:e7:f0:da:b0:6d:13:66:c3:41:76:bf:50:de:17:17: da:a8:15:f0:78:db:40:dc:d2:bf:b1:55:7a:79:d2:7d:18:70: 35:6a:d0:7e:9d:7f:c4:8f:d9:d3:d8:35:b5:1b:45:34:17:da: 7d:12:46:33:6b:8e:10:d6:5a:84:4f:2a:ad:15:54:19:d0:d7: 36:13:0e:d5:c9:46:36:17:7f:d2:cd:4b:a1:d1:de:7d:a7:44: 04:22:bc:8f:30:93:0b:4f:e5:72:89:eb:53:e2:38:ea:18:ce: 43:e6:1a:1d:37:8c:e8:9a:03:9b:cb:cc:99:0a:2c:46:f6:71: 2d:02:21:25:d1:e7:e8:7b:e8:e0:70:b3:18:70:87:20:20:e4: 9a:36:a3:b1:c6:6b:dd:8d:8f:6c:77:83:b6:37:b4:88:d9:05: dd:1d:45:ae:06:5f:4b:92:49:33:09:69:fe:da:d0:ee:ad:c2: 5f:86:07:4f:dc:34:fa:13:0e:44:a9:6b:cb:74:bd:4f:7e:03: fe:20:f8:3c:c9:02:c7:2c:e1:34:e4:ac:3b:36:b4:c8:2b:67: cc:51:f0:bd:59:14:49:48:2e:57:62:db:00:3e:97:5f:d9:51: a3:e2:c2:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUxMTIwMTYzNDA5WhcNMjUxMTI3MTYzNDA5WjAYMRYwFAYD VQQDEw02OTFmNDMwMS01YWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvUTO9xDcFD+LjLheSIWdf6jm4DGCmqfl5vJp7zELAmKqV/d5oHwXMogQXYK QGcSBxQwaCyk3SWxQ80FqwZPtemx1XLs0TmT57vT50X74518u3WygIo9m039kAsk ve8G0H3eXvKRpaTUvgGScjvfhkSJc16UPYqy/6EPV92kfPEgoWxDG0ByH3tzf2Y2 S7lUnzCVgL3iCHccFzBEAgZVXn9Zyb3qQj67fm58Y6Q84irUkmfYGN4o0Yfzp0pR EOUYzcle475ClqyuWnO1cjgBXbMbI82U6BRgKIM/5r72km7jn2y9cejOKAxC8sZS GTkVaKHPlXz5RbvAFXqgdMf7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7cdnNP NVUdM0oBY1U9008d4IDHMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMpEhKvXEGC3nEJEbX6yMi1rKHN8nn8NqwbRNmw0F2v1DeFxfaqBXw eNtA3NK/sVV6edJ9GHA1atB+nX/Ej9nT2DW1G0U0F9p9EkYza44Q1lqETyqtFVQZ 0Nc2Ew7VyUY2F3/SzUuh0d59p0QEIryPMJMLT+VyietT4jjqGM5D5hodN4zomgOb y8yZCixG9nEtAiEl0efoe+jgcLMYcIcgIOSaNqOxxmvdjY9sd4O2N7SI2QXdHUWu Bl9LkkkzCWn+2tDurcJfhgdP3DT6Ew5EqWvLdL1PfgP+IPg8yQLHLOE05Kw7NrTI K2fMUfC9WRRJSC5XYtsAPpdf2VGj4sJR -----END CERTIFICATE-----Generated at Sat Nov 22 12:14:25 2025 by rpki-client