This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft File: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json) Hash identifier: DG5izG9/mzbiJVL5EeswcpN7P3Fkg0AaA2cC2mDPd9k= Subject key identifier: 4E:11:DE:E0:BD:59:A0:F8:B8:9E:E9:3C:10:C9:B6:76:5E:C4:06:36 Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft Manifest number: 0228 Signing time: Tue 23 Dec 2025 01:27:59 +0000 Manifest this update: Tue 23 Dec 2025 01:27:59 +0000 Manifest next update: Tue 30 Dec 2025 01:27:59 +0000 Files and hashes: 1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: KicYIQq4XmsxXTXb+d+bnlrfT8VAEXO0a8VeEYKNoVQ=) 2: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: Wn369l93+2+aQnvi9l/DEYR+w0mxvVik1UUwZPt8oyg=) 3: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: V3tolroHRaGOLdSfU09EMMCLQ91f3/wTHDGeGETd7+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Validity Not Before: Dec 23 01:27:59 2025 GMT Not After : Dec 30 01:27:59 2025 GMT Subject: CN=6949f01f-3b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:69:2f:76:41:29:85:25:12:05:28:69:63: 3b:43:fe:ad:52:8e:f7:4c:aa:06:7a:3f:48:aa:4f: 55:50:89:e4:a9:f8:c6:da:3e:7d:13:6f:eb:ac:ea: 00:f3:55:ec:3f:77:91:a4:1c:bc:8b:88:a1:76:6b: a5:56:63:b5:dc:6e:53:7b:3c:df:f8:9d:cb:aa:d6: cb:cf:e9:6c:a1:c9:de:4f:c3:89:76:c0:f7:6d:95: 11:7f:54:f7:85:ab:06:33:f7:c9:04:51:1a:d8:c5: b8:2e:80:8e:5f:70:f4:56:1f:9e:d9:79:ae:92:a0: 1a:f6:29:7f:7d:38:28:e4:b8:e4:db:35:54:d9:e2: 16:f5:64:0e:ae:79:10:ca:6c:c5:f8:2f:c8:ac:93: 8e:62:7f:97:a7:fd:9a:67:b8:bc:54:81:35:e4:5c: 98:45:e2:53:6a:65:9c:d8:72:91:18:11:39:be:89: 59:f9:08:2c:20:e3:5a:d0:8c:69:3f:d4:a0:d0:a4: 81:83:2c:9d:8b:95:bd:b5:54:bf:56:06:40:9b:0f: 4e:3f:42:f9:74:83:30:aa:6e:64:25:2c:f4:b2:1f: f2:c4:82:8b:ee:36:30:ae:1b:fc:d5:f0:2c:fc:30: 62:2f:1f:f0:d7:bb:92:e3:57:8a:85:2f:73:ee:94: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:11:DE:E0:BD:59:A0:F8:B8:9E:E9:3C:10:C9:B6:76:5E:C4:06:36 X509v3 Authority Key Identifier: keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:21:17:a8:12:f6:6e:da:79:42:29:20:5d:58:68:e9:da:55: 19:9c:3b:18:6f:10:4d:6c:20:b3:22:f8:39:79:de:1c:ed:45: e6:e9:09:8e:89:ad:2a:1f:9a:29:a3:01:c0:79:7b:55:90:2a: 27:a4:85:06:60:32:8b:8f:d1:36:80:00:93:68:f4:3f:ab:60: ab:47:fd:99:72:eb:f4:54:d9:ce:13:12:62:69:b7:d3:b1:74: c4:e0:f6:37:75:02:02:0f:e3:9a:c2:d5:1f:18:93:e3:63:8e: 72:3c:f8:6c:8b:ce:38:94:b9:15:17:62:73:63:ea:d8:78:bc: bd:7e:4c:1f:11:25:bb:ad:df:09:cf:eb:de:45:aa:54:6e:44: c6:1e:5c:39:ab:ad:6b:7a:66:f2:4b:8c:19:40:46:44:61:03: a4:67:2a:b1:64:b1:13:1a:4e:f5:66:1c:d2:88:c0:f6:33:b3: 79:43:42:1d:b1:26:c6:d2:00:30:6c:0d:42:14:e0:b1:ed:67: 94:c8:c3:14:e3:97:98:b5:c9:8f:b7:fa:0c:4c:68:ff:ce:ea: bf:95:a9:84:2e:59:4b:bd:8d:e3:80:ef:1d:c5:ea:37:36:d7: ab:4c:07:2c:9b:03:37:30:0b:b8:2b:a3:86:36:2d:24:fb:a1: 97:a1:d0:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2NEUxMTAvBgNVBAUTKDRDMDVCQTg5MzVFOERGM0NDMjMyNTBCNTY3RjIwNTZC ODUwNzE1QjkwHhcNMjUxMjIzMDEyNzU5WhcNMjUxMjMwMDEyNzU5WjAYMRYwFAYD VQQDDA02OTQ5ZjAxZi0zYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JdpL3ZBKYUlEgUoaWM7Q/6tUo73TKoGej9Iqk9VUInkqfjG2j59E2/rrOoA 81XsP3eRpBy8i4ihdmulVmO13G5Tezzf+J3LqtbLz+lsocneT8OJdsD3bZURf1T3 hasGM/fJBFEa2MW4LoCOX3D0Vh+e2XmukqAa9il/fTgo5Ljk2zVU2eIW9WQOrnkQ ymzF+C/IrJOOYn+Xp/2aZ7i8VIE15FyYReJTamWc2HKRGBE5volZ+QgsIONa0Ixp P9Sg0KSBgyydi5W9tVS/VgZAmw9OP0L5dIMwqm5kJSz0sh/yxIKL7jYwrhv81fAs /DBiLx/w17uS41eKhS9z7pQhuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4R3uC9 WaD4uJ7pPBDJtnZexAY2MB8GA1UdIwQYMBaAFEwFuok16N88wjJQtWfyBWuFBxW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY0RS9ERjkwMEUzNkNF RTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6ekNNbEMxWl9JRmE0VUhG YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVzZpVFhvM3p6Q01sQzFaX0lGYTRVSEZiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY0RS9ERjkwMEUzNkNFRTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6 ekNNbEMxWl9JRmE0VUhGYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUIReoEvZu2nlCKSBdWGjp2lUZnDsYbxBNbCCzIvg5ed4c7UXm6QmO ia0qH5opowHAeXtVkConpIUGYDKLj9E2gACTaPQ/q2CrR/2Zcuv0VNnOExJiabfT sXTE4PY3dQICD+OawtUfGJPjY45yPPhsi844lLkVF2JzY+rYeLy9fkwfESW7rd8J z+veRapUbkTGHlw5q61rembyS4wZQEZEYQOkZyqxZLETGk71ZhzSiMD2M7N5Q0Id sSbG0gAwbA1CFOCx7WeUyMMU45eYtcmPt/oMTGj/zuq/lamELllLvY3jgO8dxeo3 NterTAcsmwM3MAu4K6OGNi0k+6GXodCL -----END CERTIFICATE-----Generated at Tue Dec 23 17:44:05 2025 by rpki-client