This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: 31uHcQOk1ohNhUmm/BndJVQHalEG93PjkXhFU7lAz1g= Subject key identifier: 17:1B:98:22:68:F7:A5:14:CD:AF:08:48:32:EB:13:EA:81:DA:4A:55 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 0468 Signing time: Sat 06 Dec 2025 22:55:32 +0000 Manifest this update: Sat 06 Dec 2025 22:55:31 +0000 Manifest next update: Sat 13 Dec 2025 22:55:31 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: zTspKbRcEee9v9fOCHpgXI4rzqJe7EU/nY+8pFuDrwY=) 2: 1821352EA82D11F0A44D2F49C4F9AE02.roa (hash: eUCAdWAAJYU2vithU9v2dxzSk9NHzeoy+gq9VsH9MFA=) 3: 4AD77714823D11F0A5490821C4F9AE02.roa (hash: VRtVYC+afvhigywAUFy8UkGyU1t5gq1k2av2NI5KhIY=) 4: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: Ic4R+w1Q3P51Ahg1QyjlaOiynLUhpiYZLqnU6ACR3P8=) 5: 3FBB06DAA33E11F087A31D6FC4F9AE02.roa (hash: 3hX8h88yIE4bG4c6BEhKQMbhzT9emXY29GoQUCoDJvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Dec 6 22:55:31 2025 GMT Not After : Dec 13 22:55:31 2025 GMT Subject: CN=6934b464-180f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ed:95:dc:af:da:82:c9:4f:23:70:c1:cd:d0: 98:b9:69:b0:46:67:b8:86:d1:88:3b:4d:31:0a:dc: 56:e2:89:56:91:48:a9:80:f9:65:d4:68:90:f4:d7: 20:51:46:8f:73:81:8b:2a:e8:fb:ec:a5:5e:5e:16: e9:5b:4d:5c:5b:a1:d8:da:f6:42:10:42:b7:f5:c7: d7:d1:3c:60:e9:36:ee:d8:1c:00:c1:34:cf:3c:f4: 87:a5:bb:86:01:62:65:c4:19:16:0c:32:83:19:02: 64:28:21:0b:e2:d5:61:0c:73:65:6d:70:ef:2f:3c: 10:de:83:81:cd:fe:d1:60:04:60:c1:3a:88:e0:99: 71:2b:9b:95:53:0b:1b:7a:ed:94:45:f6:d1:56:54: d4:8a:7c:52:3c:82:4a:b2:23:02:84:11:af:0c:4f: fe:12:55:91:3a:89:37:fb:db:22:d3:53:b5:de:b7: 52:a6:53:17:99:dd:b1:98:2a:ab:c5:8b:9d:79:76: 86:85:c2:04:7d:9a:02:39:ae:9c:98:cb:58:96:67: f9:90:b8:fd:32:25:71:9c:3e:f4:10:f8:56:c9:81: 8c:16:96:de:41:3b:a3:3e:20:66:45:a8:75:26:60: e8:1a:b4:a7:27:af:c1:a9:53:d8:92:f8:04:a5:75: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1B:98:22:68:F7:A5:14:CD:AF:08:48:32:EB:13:EA:81:DA:4A:55 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:7f:fe:ef:6a:05:bd:d9:1a:4e:f1:6d:26:88:18:bf:54: 38:41:0b:d5:aa:3b:1d:d0:a6:7c:bc:53:a9:a6:08:89:44:24: 8e:5c:21:2f:ea:74:02:1c:6c:c0:56:a6:84:29:85:81:1d:c7: fe:ea:9e:fe:ec:74:4c:f9:1c:5a:a9:05:fe:b8:be:30:0b:48: 73:34:78:4b:31:1d:47:2b:65:29:c6:9c:5d:e3:0c:4c:8f:d1: 26:96:9a:56:24:99:c3:bd:be:e0:24:cc:4e:d9:b6:c4:dc:00: f1:86:ae:b8:b6:a7:71:fc:b6:7b:3f:d8:0e:1f:47:ab:6a:7e: b0:bb:57:21:7d:03:53:cb:5d:a7:ed:47:3c:0b:eb:1f:59:ac: 54:8d:e3:60:75:12:19:96:94:ed:a1:c7:15:db:1e:0d:6e:4b: 4b:30:5c:a1:42:30:d7:80:2b:7f:d1:f4:c7:01:5a:96:75:26: 6c:9f:c3:9e:05:52:dd:d6:75:fd:15:e1:03:e7:98:58:3a:e1: aa:5c:36:41:20:e2:fd:c3:12:a5:f1:21:e2:1a:c4:37:e9:a7: 60:ef:7c:44:7a:b0:f3:8e:d9:97:ee:9e:ef:9f:6a:8d:bd:8b: c3:f1:ee:16:3e:4b:a5:5a:b8:c3:f5:be:b6:aa:74:ca:8e:f8: 30:21:16:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUxMjA2MjI1NTMxWhcNMjUxMjEzMjI1NTMxWjAYMRYwFAYD VQQDEw02OTM0YjQ2NC0xODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u2V3K/agslPI3DBzdCYuWmwRme4htGIO00xCtxW4olWkUipgPll1GiQ9Ncg UUaPc4GLKuj77KVeXhbpW01cW6HY2vZCEEK39cfX0Txg6Tbu2BwAwTTPPPSHpbuG AWJlxBkWDDKDGQJkKCEL4tVhDHNlbXDvLzwQ3oOBzf7RYARgwTqI4JlxK5uVUwsb eu2URfbRVlTUinxSPIJKsiMChBGvDE/+ElWROok3+9si01O13rdSplMXmd2xmCqr xYudeXaGhcIEfZoCOa6cmMtYlmf5kLj9MiVxnD70EPhWyYGMFpbeQTujPiBmRah1 JmDoGrSnJ6/BqVPYkvgEpXXhzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcbmCJo 96UUza8ISDLrE+qB2kpVMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDeX/+72oFvdkaTvFtJogYv1Q4QQvVqjsd0KZ8vFOppgiJRCSOXCEv 6nQCHGzAVqaEKYWBHcf+6p7+7HRM+RxaqQX+uL4wC0hzNHhLMR1HK2Upxpxd4wxM j9EmlppWJJnDvb7gJMxO2bbE3ADxhq64tqdx/LZ7P9gOH0eran6wu1chfQNTy12n 7Uc8C+sfWaxUjeNgdRIZlpTtoccV2x4NbktLMFyhQjDXgCt/0fTHAVqWdSZsn8Oe BVLd1nX9FeED55hYOuGqXDZBIOL9wxKl8SHiGsQ36adg73xEerDzjtmX7p7vn2qN vYvD8e4WPkulWrjD9b62qnTKjvgwIRbN -----END CERTIFICATE-----Generated at Sun Dec 7 03:48:38 2025 by rpki-client