This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json) Hash identifier: WnbYbr7umnviXAcibeQYZk4CrVqUFbtAU/8VmKuUrvw= Subject key identifier: 54:0D:EB:5B:A2:1A:F0:47:0A:6B:37:B3:62:31:34:CF:7D:19:96:D9 Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft Manifest number: 03 Signing time: Tue 02 Dec 2025 20:12:26 +0000 Manifest this update: Tue 02 Dec 2025 20:12:26 +0000 Manifest next update: Tue 09 Dec 2025 20:12:26 +0000 Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: 8nrJaIPE0mZlMZnPUg3DzLiue0lXoF/4vCfYztIP+58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Validity Not Before: Dec 2 20:12:26 2025 GMT Not After : Dec 9 20:12:26 2025 GMT Subject: CN=692f482a-86a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:88:40:fa:ba:3b:91:a1:a9:5d:3e:93:8e: c8:e4:3f:47:ce:76:c9:6b:2a:a4:a6:02:dd:d9:5b: cb:13:60:6c:eb:17:18:2d:0c:03:45:54:5f:ae:91: d4:dc:60:0b:af:34:e7:a2:08:6b:5b:42:3e:f4:c2: b6:4f:80:fe:6d:d2:ed:a1:ee:14:9b:b3:b2:cd:14: a4:5a:eb:6e:b0:44:f7:98:80:1d:45:4e:e7:b9:6a: 91:bb:51:e1:30:21:c1:7b:79:f7:07:b6:14:e8:5b: 60:40:51:a6:91:ea:47:9d:5b:cf:5e:cd:4e:d1:00: 6b:e6:04:e4:56:f8:fb:8c:dc:8f:bf:7d:e8:9e:1c: 03:96:93:c9:6a:14:3a:a5:d1:08:6e:d1:e1:33:92: 38:da:fd:b5:b2:88:b9:5f:9e:be:c3:6a:2f:7c:3b: 67:5a:b0:20:43:0c:8b:49:2c:d5:42:22:3b:89:80: f6:6a:b0:29:34:86:e1:82:42:43:60:8d:d9:95:ca: a5:b1:71:83:dc:45:16:f2:7b:02:42:84:6f:9a:e0: f7:56:4a:a9:e6:c6:f9:9e:84:f2:1a:ce:c9:c2:78: 64:7e:fb:65:d8:05:d6:37:62:a0:a3:d7:e9:b2:28: 50:4c:20:4f:4a:b0:78:b2:64:74:ce:60:b1:5b:25: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:EB:5B:A2:1A:F0:47:0A:6B:37:B3:62:31:34:CF:7D:19:96:D9 X509v3 Authority Key Identifier: keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d7:75:60:f1:86:93:b0:a6:2d:d5:a0:a6:c6:97:b2:36:c4: 74:a2:e7:59:9e:af:3d:f9:27:dd:93:9f:3b:a1:93:a3:b2:30: e2:27:22:9b:b5:86:77:00:26:d0:c7:d6:76:82:b8:34:17:38: 15:4b:0f:ff:29:e7:91:85:5b:09:f4:76:d5:cb:94:d7:22:df: 7c:ca:80:cc:29:71:22:f1:a1:b8:3e:e6:e8:8a:b8:d7:a2:9e: 2c:98:7e:ab:6d:49:0a:ff:d3:a3:13:48:f2:61:2f:56:a2:a5: ec:e8:1f:70:ce:41:0a:dd:3c:93:39:30:df:80:6d:3e:e7:9d: a6:a0:69:14:95:a2:48:1b:05:64:26:08:50:fd:5c:1f:31:71: 5d:6c:d2:39:12:23:22:a3:37:59:1f:ca:45:78:fc:78:cc:52: 87:f4:5f:40:ed:25:f1:d5:ae:1a:ae:4d:58:a5:68:9c:1e:85: 75:48:b5:06:38:c2:69:6f:12:bd:c6:95:3b:05:b6:aa:1f:ff: 73:29:34:a5:5d:03:b3:f7:95:a8:8b:d9:fe:07:87:4f:4e:28: 9a:11:73:a5:5a:de:ac:2f:9b:15:bc:f9:95:33:6a:be:e3:e5: 7d:20:01:c7:11:78:32:24:12:8e:af:66:74:a9:fd:0f:74:74: 7b:8a:e8:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTREMTExMC8GA1UEBRMoQjY5NEE4QzUyOEYwQjlBNEQ0NTNCQzQ0MjBFNTBCNTE5 RENGRDBBQjAeFw0yNTEyMDIyMDEyMjZaFw0yNTEyMDkyMDEyMjZaMBgxFjAUBgNV BAMTDTY5MmY0ODJhLTg2YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcF4hA+ro7kaGpXT6TjsjkP0fOdslrKqSmAt3ZW8sTYGzrFxgtDANFVF+ukdTc YAuvNOeiCGtbQj70wrZPgP5t0u2h7hSbs7LNFKRa626wRPeYgB1FTue5apG7UeEw IcF7efcHthToW2BAUaaR6kedW89ezU7RAGvmBORW+PuM3I+/feieHAOWk8lqFDql 0Qhu0eEzkjja/bWyiLlfnr7Dai98O2dasCBDDItJLNVCIjuJgPZqsCk0huGCQkNg jdmVyqWxcYPcRRbyewJChG+a4PdWSqnmxvmehPIazsnCeGR++2XYBdY3YqCj1+my KFBMIE9KsHiyZHTOYLFbJdabAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVA3rW6Ia 8EcKazezYjE0z30ZltkwHwYDVR0jBBgwFoAUtpSoxSjwuaTUU7xEIOULUZ3P0Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NEQxLzk1MEQ3NzAyQ0U2 RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFUVVU3eEVJT1VMVVozUDBL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHBTb3hTand1YVRVVTd4RUlPVUxVWjNQMEtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NEQxLzk1MEQ3NzAyQ0U2RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFU VVU3eEVJT1VMVVozUDBLcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjXdWDxhpOwpi3VoKbGl7I2xHSi51merz35J92Tnzuhk6OyMOInIpu1 hncAJtDH1naCuDQXOBVLD/8p55GFWwn0dtXLlNci33zKgMwpcSLxobg+5uiKuNei niyYfqttSQr/06MTSPJhL1aipezoH3DOQQrdPJM5MN+AbT7nnaagaRSVokgbBWQm CFD9XB8xcV1s0jkSIyKjN1kfykV4/HjMUof0X0DtJfHVrhquTVilaJwehXVItQY4 wmlvEr3GlTsFtqof/3MpNKVdA7P3laiL2f4Hh09OKJoRc6Va3qwvmxW8+ZUzar7j 5X0gAccReDIkEo6vZnSp/Q90dHuK6GY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:16 2025 by rpki-client