This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: Jp4qO1oRrRplxxMvRTqIcd9YIWIZm/6RKaxQLo/lnJc= Subject key identifier: EF:9E:86:09:1E:FF:1A:B7:AF:AE:C0:E5:A3:00:53:8A:A9:4C:56:8A Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E59 Signing time: Mon 22 Dec 2025 17:26:51 +0000 Manifest this update: Mon 22 Dec 2025 17:26:50 +0000 Manifest next update: Mon 29 Dec 2025 17:26:50 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: dvz+QWKPGgX/3+RZcjoLFYB5adS82y2+e6VIFIchfy0=) 2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: kkD8m4xPSHDatd7pcaQ2uOtuQasmUwgdOM4/i7kaYvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3698 (0xe72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Dec 22 17:26:50 2025 GMT Not After : Dec 29 17:26:50 2025 GMT Subject: CN=69497f5b-e1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:76:c4:88:e9:05:92:eb:94:c5:47:4d:4a: ca:26:c2:37:ec:55:5d:f9:ea:52:72:4c:dc:04:46: b3:5e:8e:ae:45:23:b1:5a:eb:27:ef:2a:71:76:17: da:9a:8c:4a:db:ab:a1:da:4e:d4:a6:ec:c7:27:d1: 45:e3:1e:04:77:1c:e0:89:02:cc:6d:d7:7a:8f:ce: e8:d2:69:c8:d0:ba:db:14:6c:cf:ec:06:dc:4e:15: 32:fd:e6:2e:13:37:1e:7b:e5:eb:a2:1a:39:fe:3f: 4b:17:af:64:e4:cc:d0:d8:5b:7c:ab:22:6e:2c:5e: 33:9d:a8:6a:57:e3:c0:22:a0:58:33:40:40:22:1f: 70:ab:a9:b8:89:97:e5:e7:dd:97:b6:4b:aa:65:75: 85:51:26:f0:ab:83:39:dc:56:5d:66:42:b0:63:b6: e2:33:14:56:e1:ba:fa:49:25:fb:e0:89:e3:65:39: d0:f6:64:f1:63:e0:10:9c:79:72:81:40:cd:2b:74: 6f:a7:44:e3:a1:65:d1:92:9f:ec:9d:b6:ba:13:91: b8:cd:27:ac:65:35:db:ec:1c:cc:8a:f3:10:8e:19: 12:6c:17:c5:16:6c:ef:cf:64:13:04:41:bd:6e:98: 05:00:57:3a:56:4a:a2:e3:eb:23:43:f8:94:74:0c: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9E:86:09:1E:FF:1A:B7:AF:AE:C0:E5:A3:00:53:8A:A9:4C:56:8A X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:bb:7d:7d:52:aa:cd:59:86:8b:06:61:05:dc:df:c7:51:aa: 5b:30:87:17:2f:f9:d0:91:c1:1a:8c:b4:8b:3b:e1:a1:aa:40: 11:88:41:5c:ae:34:33:15:6c:ad:de:41:e4:35:55:03:47:e3: 1a:82:fd:0b:d5:9c:b9:99:df:0d:70:34:9f:e5:74:5f:4d:b5: 8b:6b:11:2d:8b:5d:13:1f:05:f9:11:1b:4c:10:b5:5c:17:78: d8:99:78:78:78:45:0e:86:7a:7b:11:7f:3e:46:66:b0:7f:bf: a7:d1:b5:18:71:49:c2:aa:9c:75:5a:4b:9d:f9:5f:27:7b:a3: e5:92:51:27:44:3f:2d:60:63:a3:67:8f:03:e4:aa:e8:5a:4f: 57:d4:84:80:f5:51:80:f1:e7:74:21:4d:43:4c:3c:b8:88:d1: 1f:27:de:4b:90:ee:b1:8e:1a:0f:22:c8:24:61:d6:bf:91:55: 2c:94:af:40:c3:a3:fd:e2:86:5b:58:bd:13:cb:0a:d9:86:03: 78:6e:a4:9f:16:cf:38:b3:8f:53:cf:1f:c9:b3:9c:d5:45:94: d5:1e:0d:aa:25:9a:65:7d:e3:7b:cb:c0:f0:b8:8c:ca:43:a6: 10:67:44:e6:87:06:81:4c:9b:8f:b8:4f:5c:be:fa:c5:ed:16: 8e:52:9f:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUxMjIyMTcyNjUwWhcNMjUxMjI5MTcyNjUwWjAYMRYwFAYD VQQDDA02OTQ5N2Y1Yi1lMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsx2xIjpBZLrlMVHTUrKJsI37FVd+epSckzcBEazXo6uRSOxWusn7ypxdhfa moxK26uh2k7UpuzHJ9FF4x4EdxzgiQLMbdd6j87o0mnI0LrbFGzP7AbcThUy/eYu Ezcee+Xroho5/j9LF69k5MzQ2Ft8qyJuLF4znahqV+PAIqBYM0BAIh9wq6m4iZfl 592XtkuqZXWFUSbwq4M53FZdZkKwY7biMxRW4br6SSX74InjZTnQ9mTxY+AQnHly gUDNK3Rvp0TjoWXRkp/snba6E5G4zSesZTXb7BzMivMQjhkSbBfFFmzvz2QTBEG9 bpgFAFc6Vkqi4+sjQ/iUdAw2nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+ehgke /xq3r67A5aMAU4qpTFaKMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwu319UqrNWYaLBmEF3N/HUapbMIcXL/nQkcEajLSLO+GhqkARiEFc rjQzFWyt3kHkNVUDR+Magv0L1Zy5md8NcDSf5XRfTbWLaxEti10THwX5ERtMELVc F3jYmXh4eEUOhnp7EX8+Rmawf7+n0bUYcUnCqpx1Wkud+V8ne6PlklEnRD8tYGOj Z48D5KroWk9X1ISA9VGA8ed0IU1DTDy4iNEfJ95LkO6xjhoPIsgkYda/kVUslK9A w6P94oZbWL0TywrZhgN4bqSfFs84s49Tzx/Js5zVRZTVHg2qJZplfeN7y8DwuIzK Q6YQZ0TmhwaBTJuPuE9cvvrF7RaOUp9i -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:31 2025 by rpki-client