This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: gYqXTRUsNlpx4p0/jkuLqYNuDfrwhcpXSol4LbUcTxA= Subject key identifier: D3:B0:D7:77:22:2E:62:5B:5C:63:C8:94:3E:35:34:1C:A5:44:5B:CA Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 89 Signing time: Mon 15 Dec 2025 06:02:19 +0000 Manifest this update: Mon 15 Dec 2025 06:02:18 +0000 Manifest next update: Mon 22 Dec 2025 06:02:18 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: yvTeYkjjHLV262Jhtgr9nmh2YiT2YeCw1DKy7Okjcxo=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: LFQa37q/cBpLbTU9VfVNZw79cN64ozdrBS9Unjdq4XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: Dec 15 06:02:18 2025 GMT Not After : Dec 22 06:02:18 2025 GMT Subject: CN=693fa46b-c500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:2a:66:2b:db:28:8c:b1:b3:a8:07:2a:8c: 96:18:62:7d:1a:ec:cb:30:a9:86:c4:e3:b5:52:69: 1a:91:41:7c:b8:04:35:53:7c:0b:99:df:4c:31:6b: a0:56:be:d8:e5:f9:72:83:01:e4:f8:7d:c4:9b:30: 33:52:b7:2c:05:23:67:8b:82:6b:a3:94:da:2d:9c: 08:1d:29:7c:52:74:f7:9a:43:79:8d:3b:86:84:73: aa:f3:36:88:06:87:36:24:c5:e8:0e:15:72:c7:5a: 7f:5f:ab:7e:36:2d:82:d8:b2:ab:6b:df:37:a8:ae: 29:23:8a:4e:77:a5:9d:9e:bf:db:d2:71:34:bd:13: 5b:6d:7a:bd:03:8b:a4:92:26:72:1b:6d:e8:9f:04: e7:35:cc:25:43:72:4e:86:33:47:eb:8b:52:7d:f6: 7f:7a:d1:18:9c:90:e2:eb:b3:8e:65:25:94:74:33: f3:6d:49:a2:a8:6a:06:25:5d:59:a2:46:7d:d3:49: a4:38:65:02:2f:56:29:96:9c:f9:26:f5:74:01:cd: d4:8a:fe:cb:cd:41:82:14:4f:4d:33:c3:7f:d5:9e: 79:09:5c:18:c7:ef:9b:25:40:b7:29:e9:75:a2:c9: bc:9f:72:7c:7c:2b:a7:7b:c7:5d:01:40:52:60:9a: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B0:D7:77:22:2E:62:5B:5C:63:C8:94:3E:35:34:1C:A5:44:5B:CA X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:35:2d:77:f5:1d:c9:50:0a:50:6c:57:c4:c6:11:07:33:30: a7:66:e7:18:ea:09:04:60:17:4b:6c:ea:bd:45:87:de:9d:23: 1d:98:4d:78:a7:31:de:a0:85:2a:90:71:17:0c:a6:19:74:06: e2:d5:1e:b7:93:1a:64:3a:51:f1:78:4f:e7:19:ed:99:f9:11: 5e:bb:68:3d:14:37:73:9c:66:2c:1a:13:19:43:96:4b:51:fa: 2c:83:a9:33:9a:ba:1c:18:49:be:06:b3:2a:b9:2a:66:f3:d0: 04:5c:fa:17:8b:73:cd:f7:a3:ae:8e:26:5c:7e:ef:b7:af:e0: 95:55:85:c2:42:c2:0c:f0:d5:43:03:e4:95:1f:43:f9:60:4f: 8b:eb:10:41:fe:86:5c:48:e3:7a:45:dc:1d:7a:8e:d4:1d:a4: 29:0f:e1:34:59:0a:ce:da:05:7a:64:f8:a7:7f:f0:77:2c:c0: 64:14:2e:f7:df:06:34:1d:1d:89:f0:c5:63:b4:77:50:bc:68: 0f:fd:d4:46:38:da:32:1a:8c:85:28:30:de:2b:56:a6:84:0c: 42:49:bd:a9:be:f1:3d:1f:24:16:af:b8:16:7a:3f:8d:fb:48: 96:5f:56:07:a9:bf:a0:f5:13:32:e6:bc:7f:0f:92:fd:33:d3: ec:96:07:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0MxMTAvBgNVBAUTKEI3NDY0MjRFMzRFODk5RTE0Q0QzMzlEMDczQkI1RjQ5 MThGRDA3ODcwHhcNMjUxMjE1MDYwMjE4WhcNMjUxMjIyMDYwMjE4WjAYMRYwFAYD VQQDDA02OTNmYTQ2Yi1jNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuYqZivbKIyxs6gHKoyWGGJ9GuzLMKmGxOO1UmkakUF8uAQ1U3wLmd9MMWug Vr7Y5flygwHk+H3EmzAzUrcsBSNni4Jro5TaLZwIHSl8UnT3mkN5jTuGhHOq8zaI Boc2JMXoDhVyx1p/X6t+Ni2C2LKra983qK4pI4pOd6Wdnr/b0nE0vRNbbXq9A4uk kiZyG23onwTnNcwlQ3JOhjNH64tSffZ/etEYnJDi67OOZSWUdDPzbUmiqGoGJV1Z okZ900mkOGUCL1Yplpz5JvV0Ac3Uiv7LzUGCFE9NM8N/1Z55CVwYx++bJUC3Kel1 osm8n3J8fCune8ddAUBSYJrvfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOw13ci LmJbXGPIlD41NBylRFvKMB8GA1UdIwQYMBaAFLdGQk406JnhTNM50HO7X0kY/QeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy85MzZCNDMzMjBC RDkxMUYwOEM2MDdGODdDNEY5QUUwMi90MFpDVGpUb21lRk0wem5RYzd0ZlNSajlC NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDQy85MzZCNDMzMjBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi90MFpDVGpUb21l Rk0wem5RYzd0ZlNSajlCNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMNS139R3JUApQbFfExhEHMzCnZucY6gkEYBdLbOq9RYfenSMdmE14 pzHeoIUqkHEXDKYZdAbi1R63kxpkOlHxeE/nGe2Z+RFeu2g9FDdznGYsGhMZQ5ZL Ufosg6kzmrocGEm+BrMquSpm89AEXPoXi3PN96OujiZcfu+3r+CVVYXCQsIM8NVD A+SVH0P5YE+L6xBB/oZcSON6Rdwdeo7UHaQpD+E0WQrO2gV6ZPinf/B3LMBkFC73 3wY0HR2J8MVjtHdQvGgP/dRGONoyGoyFKDDeK1amhAxCSb2pvvE9HyQWr7gWej+N +0iWX1YHqb+g9RMy5rx/D5L9M9Pslgde -----END CERTIFICATE-----Generated at Tue Dec 16 05:01:03 2025 by rpki-client