This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json) Hash identifier: 0zhfIEzKmmXv8AQHxGnudSvBHEv1XwDCDetCAj2vmZ4= Subject key identifier: 5F:AB:90:25:60:31:A7:AE:58:BB:76:A0:F1:83:4C:77:92:AF:06:30 Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft Manifest number: 78 Signing time: Tue 23 Dec 2025 05:40:48 +0000 Manifest this update: Tue 23 Dec 2025 05:40:48 +0000 Manifest next update: Tue 30 Dec 2025 05:40:48 +0000 Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: CP7+cix1J/VoyHfdmmqc32TbVzhlPgBWHqJ5p14MapQ=) 2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Dec 23 05:40:48 2025 GMT Not After : Dec 30 05:40:48 2025 GMT Subject: CN=694a2b60-3ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:76:7a:d7:92:7f:2a:d0:7d:85:1a:b6:f1: d6:9d:f5:3f:ea:7f:9f:86:fd:43:c9:2e:97:53:f3: 12:b5:45:63:1c:bb:f1:2f:be:eb:c5:6f:b3:1e:38: fe:be:7a:3a:dd:ea:f4:83:50:86:a8:89:01:ac:8f: 46:ba:3a:64:ee:e6:0d:ee:c9:4f:50:52:88:8c:3c: fd:64:92:64:af:6d:06:e5:ef:fe:ba:3d:2a:8b:1c: da:ba:89:43:a7:94:81:75:e6:81:19:dd:68:87:e2: 92:4d:7d:39:e4:a8:9e:66:4a:7c:18:bd:ad:10:4e: c6:b4:d3:28:1a:c7:36:17:d2:66:42:9e:f2:3c:e2: 9a:b1:83:27:89:9a:46:f8:35:a5:13:8d:40:d0:02: f7:5b:53:f9:22:83:0c:bc:7e:6a:1c:99:c3:56:35: 0b:7d:b8:0e:1f:bc:e0:df:46:84:d8:d7:23:f5:a7: ff:a2:38:bc:50:49:be:5f:79:ab:db:56:bc:f0:de: a3:df:2b:e5:3d:69:c9:de:93:ea:5d:c0:29:7f:79: 95:87:87:92:e3:ce:94:b4:bc:d9:30:4a:26:a7:a9: 2a:4a:cb:6d:98:da:4d:1d:f6:c8:c1:cd:46:86:3c: bd:5c:66:c9:e1:20:cc:ac:35:74:c2:bd:f3:9d:be: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AB:90:25:60:31:A7:AE:58:BB:76:A0:F1:83:4C:77:92:AF:06:30 X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:07:f4:63:d9:80:2a:1d:10:a1:15:d3:06:fa:b0:b0:f9:3e: 08:9b:0c:13:84:be:65:15:68:36:17:9f:22:a0:e0:27:c3:89: 87:75:ae:28:a0:b2:c0:4c:63:f4:01:04:ce:fc:53:49:03:c5: 7e:b4:2d:a7:f7:ee:c0:c9:8f:ed:2b:e8:0a:4a:fa:c1:66:9c: 56:f2:b8:e5:45:cf:95:55:e0:cb:40:c1:8b:2c:3b:0a:54:33: 42:2f:a5:b7:91:52:1f:5e:9c:27:89:e0:b6:f5:8d:51:b9:6a: 9e:8d:26:e2:51:2d:f7:bd:69:6d:7a:9e:1e:47:28:5c:a7:36: ed:05:dc:fd:ba:26:08:fb:db:de:76:87:11:d0:f3:5a:2f:91: 8a:c0:0e:31:3a:f1:e5:ef:5b:30:49:ab:e3:2e:e7:6b:0d:b1: b5:4a:98:2d:b7:d3:3c:ee:d1:44:af:ce:06:66:a6:36:b2:90: 99:d4:dd:3d:cd:2b:ed:f2:3c:96:70:d4:4c:d6:b7:bb:77:d5: a5:73:16:8b:39:e2:74:5b:61:a6:a0:40:0d:bb:d2:8a:cd:a6: 26:3f:9c:53:a3:26:c9:21:36:3e:4d:1d:ca:6f:b2:bb:e5:a4: e7:b0:3a:24:f7:b8:5c:6e:0f:ba:fa:1c:f2:14:f8:7c:b3:9d: 8b:a3:e7:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoNEVFQjFEQzdEMjgyMTREMzE2QUEzMzc4QjFFMjk1RTkx MDFCNENBQTAeFw0yNTEyMjMwNTQwNDhaFw0yNTEyMzAwNTQwNDhaMBgxFjAUBgNV BAMMDTY5NGEyYjYwLTNhYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMXnZ615J/KtB9hRq28dad9T/qf5+G/UPJLpdT8xK1RWMcu/EvvuvFb7MeOP6+ ejrd6vSDUIaoiQGsj0a6OmTu5g3uyU9QUoiMPP1kkmSvbQbl7/66PSqLHNq6iUOn lIF15oEZ3WiH4pJNfTnkqJ5mSnwYva0QTsa00ygaxzYX0mZCnvI84pqxgyeJmkb4 NaUTjUDQAvdbU/kigwy8fmocmcNWNQt9uA4fvODfRoTY1yP1p/+iOLxQSb5feavb Vrzw3qPfK+U9acnek+pdwCl/eZWHh5LjzpS0vNkwSianqSpKy22Y2k0d9sjBzUaG PL1cZsnhIMysNXTCvfOdvpXdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX6uQJWAx p65Yu3ag8YNMd5KvBjAwHwYDVR0jBBgwFoAUTusdx9KCFNMWqjN4seKV6RAbTKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0MzOTlGQkMyMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHVzZHg5S0NGTk1XcWpONHNlS1Y2UkFiVEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0MzOTlGQkMyMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL1R1c2R4OUtDRk5N V3FqTjRzZUtWNlJBYlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8H9GPZgCodEKEV0wb6sLD5PgibDBOEvmUVaDYXnyKg4CfDiYd1riig ssBMY/QBBM78U0kDxX60Laf37sDJj+0r6ApK+sFmnFbyuOVFz5VV4MtAwYssOwpU M0IvpbeRUh9enCeJ4Lb1jVG5ap6NJuJRLfe9aW16nh5HKFynNu0F3P26Jgj72952 hxHQ81ovkYrADjE68eXvWzBJq+Mu52sNsbVKmC230zzu0USvzgZmpjaykJnU3T3N K+3yPJZw1EzWt7t31aVzFos54nRbYaagQA270orNpiY/nFOjJskhNj5NHcpvsrvl pOewOiT3uFxuD7r6HPIU+HyznYuj55Y= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:52 2025 by rpki-client