This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json) Hash identifier: IiMpwayls9n80J4sIj+3n6+CRaDVtBBoCKBp7KGgaQU= Subject key identifier: 1E:40:84:C9:0C:75:DB:97:AC:6A:6C:B9:52:98:4B:DE:7B:81:87:1B Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft Manifest number: 4B Signing time: Sun 07 Dec 2025 05:23:13 +0000 Manifest this update: Sun 07 Dec 2025 05:23:13 +0000 Manifest next update: Sun 14 Dec 2025 05:23:13 +0000 Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: sw6hMpela8qwPZNiFV2wS6xjjKd51Ppp4CcNwx27ndM=) 2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: n1d9JBQkYzZszHXWzHvHiVJmG5oLenIhoEtEgvVSpN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Validity Not Before: Dec 7 05:23:13 2025 GMT Not After : Dec 14 05:23:13 2025 GMT Subject: CN=69350f41-cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:8d:f9:9d:6a:aa:81:b7:f4:17:8d:ae:06: bc:97:0e:17:3e:10:7a:23:1a:13:3a:ee:b1:7a:0b: 82:da:8d:84:f3:8c:b4:86:cf:ba:3a:76:1d:30:8a: 5b:d2:0c:a9:b7:ca:30:18:81:32:27:80:d9:67:f4: d8:45:ec:a5:cb:3f:89:7a:0b:b0:74:f3:e4:be:f3: 3d:74:cd:14:54:3a:4b:c3:e4:05:7e:dc:00:bb:f1: b5:ce:9e:ec:f0:7f:9c:c1:4a:1c:f2:62:a1:89:b6: 5d:20:44:56:af:1f:cd:3f:b1:9d:c4:b2:10:e4:7c: 64:5e:11:bd:ed:5b:8c:c1:13:ae:32:f4:56:00:21: fa:1d:c6:38:11:de:af:45:90:94:b2:71:f9:77:10: c2:29:ae:ef:c4:16:c5:9f:f9:6f:95:11:1c:b9:02: ab:c2:b1:f6:c2:e7:10:85:d5:b1:19:d2:e2:ea:1a: 84:1d:e2:f4:bc:2f:aa:40:30:18:44:92:71:a4:e7: 66:7d:58:bc:8c:4e:15:1b:a5:a1:a4:ed:e3:38:fc: 84:48:b0:47:25:a9:2e:04:7f:38:74:fe:1d:2d:26: 78:d9:3a:2f:86:00:c7:c9:d3:cb:79:30:b5:64:f4: 7c:d7:d9:a7:a2:5d:56:94:e6:a7:77:36:d3:ed:75: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:40:84:C9:0C:75:DB:97:AC:6A:6C:B9:52:98:4B:DE:7B:81:87:1B X509v3 Authority Key Identifier: keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e6:69:a6:91:c3:04:b1:ea:4d:45:43:b2:e9:3c:41:ae:86: 44:1d:9f:4a:4c:84:81:71:e9:c1:54:3d:2f:fa:87:fa:26:fa: 2c:d0:be:17:ba:66:06:d6:69:7d:b2:4f:a8:c4:4f:f5:77:11: 19:5c:ff:29:b2:05:bf:4d:ca:39:ac:e9:96:54:12:3b:48:56: a7:02:de:30:14:9c:a6:d2:a9:bb:61:bb:9e:6f:a4:d0:2e:9a: 8a:c4:16:21:d1:b1:73:5b:e5:29:95:36:fb:26:91:8f:99:55: 84:6a:65:55:7f:59:79:ab:4f:c7:7a:96:41:34:81:b3:c3:1c: 57:6a:d5:82:a5:9d:4e:b0:1c:d5:c1:e7:57:9b:32:90:a1:01: eb:1a:d4:cf:68:91:8e:27:33:d5:00:37:2c:b4:46:28:28:7e: 15:b6:4c:7e:42:77:cc:14:1f:88:3b:28:6c:6e:68:32:0b:66: 30:bf:f5:00:84:6d:79:2b:b4:d8:26:24:78:6e:95:19:53:7f: e2:1a:15:d0:5b:9d:6e:33:b5:37:ab:70:a2:6c:09:9d:8d:29: 08:21:4a:d2:e6:2c:9d:dd:17:3d:15:2c:f1:cb:c9:81:f0:34: fe:6e:9f:c2:0e:e6:00:eb:8e:2c:d0:bf:c7:c4:96:25:01:41: 6b:62:ad:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoNEQ4RjU4MEM4RjU3NTk0NjdEQjhFQTBGMDhDMzExQTk2 RDNCM0ZCQjAeFw0yNTEyMDcwNTIzMTNaFw0yNTEyMTQwNTIzMTNaMBgxFjAUBgNV BAMTDTY5MzUwZjQxLWNiODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVrY35nWqqgbf0F42uBryXDhc+EHojGhM67rF6C4LajYTzjLSGz7o6dh0wilvS DKm3yjAYgTIngNln9NhF7KXLP4l6C7B08+S+8z10zRRUOkvD5AV+3AC78bXOnuzw f5zBShzyYqGJtl0gRFavH80/sZ3EshDkfGReEb3tW4zBE64y9FYAIfodxjgR3q9F kJSycfl3EMIpru/EFsWf+W+VERy5AqvCsfbC5xCF1bEZ0uLqGoQd4vS8L6pAMBhE knGk52Z9WLyMThUbpaGk7eM4/IRIsEclqS4Efzh0/h0tJnjZOi+GAMfJ08t5MLVk 9HzX2aeiXVaU5qd3NtPtddnFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHkCEyQx1 25esamy5UphL3nuBhxswHwYDVR0jBBgwFoAUTY9YDI9XWUZ9uOoPCMMRqW07P7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzVCQjA3NDNDNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1VaOXVPb1BDTU1ScVcwN1A3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFk5WURJOVhXVVo5dU9vUENNTVJxVzA3UDdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzVCQjA3NDNDNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1Va OXVPb1BDTU1ScVcwN1A3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGHmaaaRwwSx6k1FQ7LpPEGuhkQdn0pMhIFx6cFUPS/6h/om+izQvhe6 ZgbWaX2yT6jET/V3ERlc/ymyBb9Nyjms6ZZUEjtIVqcC3jAUnKbSqbthu55vpNAu morEFiHRsXNb5SmVNvsmkY+ZVYRqZVV/WXmrT8d6lkE0gbPDHFdq1YKlnU6wHNXB 51ebMpChAesa1M9okY4nM9UANyy0RigofhW2TH5Cd8wUH4g7KGxuaDILZjC/9QCE bXkrtNgmJHhulRlTf+IaFdBbnW4ztTercKJsCZ2NKQghStLmLJ3dFz0VLPHLyYHw NP5un8IO5gDrjizQv8fEliUBQWtirac= -----END CERTIFICATE-----Generated at Mon Dec 8 05:59:45 2025 by rpki-client