This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: 6z9kt/oVhRAiKoYm5/hmtppZgYXi1yKLMIn8I+X3nSg= Subject key identifier: DC:9A:FD:E4:45:69:8A:18:8F:44:9E:F0:FF:AD:C9:59:5D:2F:0B:F9 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 194A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 1910 Signing time: Mon 22 Dec 2025 16:13:55 +0000 Manifest this update: Mon 22 Dec 2025 16:13:54 +0000 Manifest next update: Mon 29 Dec 2025 16:13:54 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: a843Mzw6p7X9ol7VTdbs82M56SLKkHVi8IFhn/fW260=) 2: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: pe46e+HZ1NfGBG2vvFXSNdvGZLyB5RzpC40D1ExEG+I=) 3: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: sJTUAzwirYIZpl1wnA3/i/mf1sEf8bCtv90HcGqZGeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6474 (0x194a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Dec 22 16:13:54 2025 GMT Not After : Dec 29 16:13:54 2025 GMT Subject: CN=69496e43-489a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:09:a7:f1:d9:88:dd:57:41:35:9b:a4:c2: 6d:57:75:d3:18:07:05:17:7b:79:55:a7:b0:b2:9d: f2:5b:5c:81:0b:04:d8:c7:cd:6f:1a:8e:8f:dc:20: 61:22:dc:38:bb:78:0e:7a:d0:b3:23:53:ce:bd:35: bc:82:02:70:56:c7:1e:74:7b:bf:6d:80:c8:9c:0a: 77:7d:1c:74:6e:6b:9b:23:5b:06:a6:b8:5f:94:44: 45:83:24:9d:94:7f:b9:06:cf:28:f4:d3:59:41:ea: 4c:22:dd:3e:22:cd:02:4a:5e:78:3b:50:31:f1:92: c6:16:b0:60:cb:01:47:e3:6e:b5:e0:b8:fd:38:6d: 5a:f7:fe:6a:44:47:41:26:c2:b7:b6:ef:9b:20:dc: 7b:39:82:58:7d:cc:ec:93:0a:df:79:f7:5d:fa:ee: 90:8d:36:64:de:7e:e0:55:0b:ec:c6:f5:83:68:f9: 70:1c:68:64:8b:d1:db:9f:8d:53:ec:23:f4:42:60: 7c:cf:b4:c3:cb:62:3e:6e:9f:60:04:a2:02:4a:fb: 98:9d:b6:70:55:49:35:ab:0f:42:b0:d7:67:21:09: 9c:7a:92:4d:12:27:94:df:1e:c2:c1:f5:c8:e8:83: 73:47:8d:27:89:33:a1:8a:6a:15:54:1b:be:96:8f: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9A:FD:E4:45:69:8A:18:8F:44:9E:F0:FF:AD:C9:59:5D:2F:0B:F9 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ea:7d:a8:bf:e0:14:25:02:a1:3f:df:e6:52:b0:3b:6a:b9: 33:77:84:cf:93:e1:fa:a6:7e:8a:7f:74:ca:a6:2d:0b:33:54: 1c:12:ab:e0:5f:43:16:5c:2c:d3:31:6e:ad:38:28:78:8b:46: bb:b6:1d:ac:b2:f4:3e:d2:36:75:0b:f2:a6:ee:d8:fa:fc:05: c3:56:9a:09:54:91:2e:a2:f3:af:78:4a:90:2b:f1:78:39:29: a4:c3:31:53:97:8a:f7:da:d0:8c:62:5f:e8:2d:86:ea:a3:54: 45:e5:c8:62:d2:46:73:55:ea:07:9d:6d:da:7a:89:64:0b:56: 27:e5:2c:04:81:e0:3b:8b:45:92:0c:de:8e:d1:ec:99:15:90: a8:01:e2:f3:36:66:d5:6a:7e:91:ad:35:87:fe:06:01:d9:95: e7:b1:22:a3:69:ab:a0:c2:a7:43:d1:8a:21:e5:79:5f:da:41: 39:6e:e4:44:8b:bd:10:81:09:4d:29:5b:9a:2c:d2:a5:1e:e1: 5b:76:74:36:4a:f8:a6:2a:c1:3f:74:db:3a:e3:1b:33:30:ea: 03:f8:94:ed:5d:0d:58:a6:60:e1:c1:7d:8f:16:85:f0:8b:5c: ac:23:41:3a:87:ff:82:93:53:fe:e1:f6:0a:12:01:d9:cf:24: c8:ed:c3:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUxMjIyMTYxMzU0WhcNMjUxMjI5MTYxMzU0WjAYMRYwFAYD VQQDDA02OTQ5NmU0My00ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuQJp/HZiN1XQTWbpMJtV3XTGAcFF3t5Vaewsp3yW1yBCwTYx81vGo6P3CBh Itw4u3gOetCzI1POvTW8ggJwVscedHu/bYDInAp3fRx0bmubI1sGprhflERFgySd lH+5Bs8o9NNZQepMIt0+Is0CSl54O1Ax8ZLGFrBgywFH42614Lj9OG1a9/5qREdB JsK3tu+bINx7OYJYfczskwrfefdd+u6QjTZk3n7gVQvsxvWDaPlwHGhki9Hbn41T 7CP0QmB8z7TDy2I+bp9gBKICSvuYnbZwVUk1qw9CsNdnIQmcepJNEieU3x7CwfXI 6INzR40niTOhimoVVBu+lo8oWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNya/eRF aYoYj0Se8P+tyVldLwv5MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/6n2ov+AUJQKhP9/mUrA7arkzd4TPk+H6pn6Kf3TKpi0LM1QcEqvg X0MWXCzTMW6tOCh4i0a7th2ssvQ+0jZ1C/Km7tj6/AXDVpoJVJEuovOveEqQK/F4 OSmkwzFTl4r32tCMYl/oLYbqo1RF5chi0kZzVeoHnW3aeolkC1Yn5SwEgeA7i0WS DN6O0eyZFZCoAeLzNmbVan6RrTWH/gYB2ZXnsSKjaaugwqdD0Yoh5Xlf2kE5buRE i70QgQlNKVuaLNKlHuFbdnQ2SvimKsE/dNs64xszMOoD+JTtXQ1YpmDhwX2PFoXw i1ysI0E6h/+Ck1P+4fYKEgHZzyTI7cOn -----END CERTIFICATE-----Generated at Wed Dec 24 03:58:38 2025 by rpki-client