This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: +4JgbxhotGUGR06VqzwmbBwQ2ccBhuJyQn0sgoEuJEA= Subject key identifier: 19:3B:3A:0E:A9:2E:2A:E3:53:2B:14:A6:81:35:32:FA:F0:91:0C:D7 Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 033A Signing time: Fri 19 Dec 2025 00:15:01 +0000 Manifest this update: Fri 19 Dec 2025 00:15:00 +0000 Manifest next update: Fri 26 Dec 2025 00:15:00 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: vSqK7RrPhJqL5GJKt/l/Lx+qheiAUt6eJVuSRb7x3I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Dec 19 00:15:00 2025 GMT Not After : Dec 26 00:15:00 2025 GMT Subject: CN=69449905-2d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:7f:7c:bf:71:db:58:41:35:76:ca:71:65: 40:99:d8:e9:65:7a:38:66:5e:95:f7:aa:8c:2b:2b: 45:97:0d:d6:a0:7c:11:be:9d:88:37:38:5a:6e:f1: 12:c7:50:e5:48:80:6c:21:75:ef:c3:36:6f:59:cc: 98:c1:d3:32:43:36:0d:c0:b0:70:14:dc:ae:37:e4: 49:c3:e1:95:b8:44:24:3d:d6:1f:3c:0f:ee:e8:09: 6f:fe:09:7b:15:46:e8:e0:88:d4:55:bd:5e:e7:72: ca:85:42:cc:7f:3d:ad:f8:6f:5d:7f:a0:37:aa:1c: 03:3e:90:dd:6e:0e:9c:3c:75:ba:21:a9:cc:ba:58: 87:d4:2d:8a:8e:a6:20:ed:ae:b3:17:4e:7c:c9:b3: ec:8b:ce:3c:ec:ed:e4:81:aa:78:77:3f:b8:32:7c: 9f:5f:4a:d9:da:61:bc:6a:40:55:9e:47:c0:52:cb: 61:76:6e:ed:c1:af:eb:78:29:1b:e1:51:af:6c:d5: 3c:2e:cc:8d:fb:5b:91:21:01:26:b8:8e:4a:82:ec: 2b:53:c9:22:ba:95:df:88:b1:f1:f6:27:9d:d7:92: d9:ce:3b:f5:15:ac:61:b5:f8:78:68:61:88:32:90: 14:df:f1:61:c8:5b:71:3e:5d:ea:95:f2:e3:27:11: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3B:3A:0E:A9:2E:2A:E3:53:2B:14:A6:81:35:32:FA:F0:91:0C:D7 X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e4:e7:43:2b:2e:fb:d4:25:ea:44:13:cd:89:0e:01:eb:50: 83:0a:55:16:20:62:82:b8:9b:65:0e:7d:35:d4:58:ad:a6:1c: 3e:22:34:9f:49:59:f3:a3:81:79:bf:49:01:61:90:bd:cc:00: cf:1e:99:f8:ae:fa:87:9d:af:cd:1a:e4:72:47:d2:c3:47:1e: d0:ce:41:9c:3a:91:98:24:60:82:ce:3d:c1:f2:7e:5f:f7:bc: 56:51:f9:b7:6d:96:62:fe:b9:1f:9c:c5:92:98:90:92:65:e5: 65:d1:ec:65:63:ef:6e:ab:8f:2f:ed:2d:39:c5:91:15:e6:f7: c1:3e:4f:d3:cf:b8:d5:d1:65:e3:63:5e:4f:72:fe:b9:9a:e4: 8d:a6:5f:10:64:43:61:a9:f5:1c:b4:47:d5:b4:60:7d:77:41: 96:07:14:16:73:67:5b:46:14:55:55:ca:96:32:1b:51:a9:43: fb:5d:b4:80:94:b5:3c:59:df:5c:d5:fa:1f:99:60:c9:ba:ec: 5d:d5:d3:55:55:ae:3c:96:a4:b6:c1:b8:89:de:ac:66:43:bd: 9d:db:02:6c:3e:34:50:0a:e6:7b:d2:f8:92:f5:70:ee:cc:c9: 90:60:63:65:11:9f:93:51:b1:79:4c:19:e9:7c:87:77:de:96: 69:b6:ea:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUxMjE5MDAxNTAwWhcNMjUxMjI2MDAxNTAwWjAYMRYwFAYD VQQDDA02OTQ0OTkwNS0yZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq45/fL9x21hBNXbKcWVAmdjpZXo4Zl6V96qMKytFlw3WoHwRvp2INzhabvES x1DlSIBsIXXvwzZvWcyYwdMyQzYNwLBwFNyuN+RJw+GVuEQkPdYfPA/u6Alv/gl7 FUbo4IjUVb1e53LKhULMfz2t+G9df6A3qhwDPpDdbg6cPHW6IanMuliH1C2KjqYg 7a6zF058ybPsi8487O3kgap4dz+4MnyfX0rZ2mG8akBVnkfAUsthdm7twa/reCkb 4VGvbNU8LsyN+1uRIQEmuI5KguwrU8kiupXfiLHx9ied15LZzjv1Faxhtfh4aGGI MpAU3/FhyFtxPl3qlfLjJxGUzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk7Og6p LirjUysUpoE1MvrwkQzXMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg5OdDKy771CXqRBPNiQ4B61CDClUWIGKCuJtlDn011Fitphw+IjSf SVnzo4F5v0kBYZC9zADPHpn4rvqHna/NGuRyR9LDRx7QzkGcOpGYJGCCzj3B8n5f 97xWUfm3bZZi/rkfnMWSmJCSZeVl0exlY+9uq48v7S05xZEV5vfBPk/Tz7jV0WXj Y15Pcv65muSNpl8QZENhqfUctEfVtGB9d0GWBxQWc2dbRhRVVcqWMhtRqUP7XbSA lLU8Wd9c1fofmWDJuuxd1dNVVa48lqS2wbiJ3qxmQ72d2wJsPjRQCuZ70viS9XDu zMmQYGNlEZ+TUbF5TBnpfId33pZptupq -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:13 2025 by rpki-client