This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: mL+ODjdIjv8dWmA4VAnPNe1hTGOp4EBbJ5VG+7NM8fM= Subject key identifier: 70:B7:6A:89:01:B4:E3:38:07:A5:14:AB:D0:BD:59:95:2F:95:3F:85 Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 8F Signing time: Tue 23 Dec 2025 09:42:47 +0000 Manifest this update: Tue 23 Dec 2025 09:42:46 +0000 Manifest next update: Tue 30 Dec 2025 09:42:46 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: NozyHHBL2Sxr85+z13OU3XJ2wH2HFnb2DnejzxfKNRA=) 2: BA8DE47CDFE311F08DEF0674556F56BC.roa (hash: ujmHoWFZtakAjsBn/+BTOGuoxFxPnxJfxCSGC1VYdwY=) 3: 5905CBAEDFE111F083058845556F56BC.roa (hash: tjngiaTbmc86SPSoZ9fGRfmjwpDl19BR0h4yr8a1SrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 09:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Dec 23 09:42:46 2025 GMT Not After : Dec 30 09:42:46 2025 GMT Subject: CN=694a6417-f1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:9a:3a:ac:56:62:46:30:87:b6:70:8a:60: e1:54:4a:19:a2:bc:e6:09:d7:a3:6a:09:09:5d:f7: 74:a7:d9:04:c0:29:ec:ea:87:43:5e:e7:2b:db:f1: 4e:de:48:e0:b0:ec:8e:b9:4b:3a:cd:39:13:c5:51: e2:2f:87:7d:25:d1:51:40:b8:09:d3:7d:8c:7e:41: ef:07:1c:e8:06:3e:99:62:79:d0:28:ef:f2:ec:d4: 7e:95:6c:74:ad:0d:3e:2a:fb:22:a8:64:98:90:5b: 66:bd:22:71:56:b0:98:2a:2f:1d:3e:82:81:1b:9e: 41:21:9f:94:49:34:80:8c:e4:c1:5c:9a:78:e6:4b: 6d:cc:0f:56:88:78:65:2f:40:b3:7a:7c:f2:5f:5c: 02:d0:05:96:ad:27:14:01:3d:5c:98:c7:86:21:74: 76:44:07:57:66:07:1f:e1:f2:6f:01:38:6c:42:68: 78:a6:8f:47:97:5a:24:b2:ab:62:45:37:d3:36:ee: 1f:b7:76:b7:9f:ed:1b:5c:15:cb:da:8b:fb:87:10: d2:c9:4a:53:56:93:0a:01:16:d0:a7:69:ac:14:fd: b2:22:bd:1e:73:4a:55:f3:1e:f9:26:b9:93:83:5d: 04:f2:09:2f:2a:10:9f:e1:ae:75:24:1f:08:8c:e7: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B7:6A:89:01:B4:E3:38:07:A5:14:AB:D0:BD:59:95:2F:95:3F:85 X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:2f:bc:7e:09:2d:69:84:aa:74:34:0e:d5:4f:f8:f0:4d:26: 66:ed:39:84:8e:e9:e2:ed:70:2f:bf:fe:dd:e1:20:bd:da:64: 72:97:f0:8c:a5:a3:ac:c7:ae:6f:25:8e:32:c7:b2:37:b8:27: 37:f7:3b:da:81:51:fe:b0:be:c7:b2:f8:ed:c4:bb:4a:b5:fb: 6a:11:df:76:ed:92:49:00:c5:ba:e9:0a:db:0f:45:fa:89:9d: 66:b5:40:c6:60:a5:b9:06:c3:f2:b1:8c:c3:d4:84:b0:10:8b: 9d:83:84:82:cf:91:2b:74:b3:91:7e:3f:72:5c:91:c3:34:77: 7b:9a:64:28:3e:08:8c:ce:0d:a3:f3:0d:a6:4c:27:fd:0a:43: 99:a9:a5:b8:78:23:30:b2:98:21:d1:cd:56:1a:ba:a4:bb:98: 87:27:97:87:4b:37:69:c6:a0:85:d8:46:d9:c2:a0:8a:90:03: 4a:dd:19:d5:43:4f:9e:ad:b1:71:3e:51:87:46:bc:d7:05:4f: df:f4:ce:07:52:8f:9d:7b:29:0b:16:17:5b:ec:ac:90:57:4f: 69:78:2f:e2:eb:65:ea:f5:53:3c:5b:b7:5b:5d:c4:d6:96:e3: b3:00:a7:f8:c3:54:27:d1:e4:9d:a6:d2:ad:49:67:97:c2:58: 44:e6:e9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2 QUVDOTlBQzYwHhcNMjUxMjIzMDk0MjQ2WhcNMjUxMjMwMDk0MjQ2WjAYMRYwFAYD VQQDDA02OTRhNjQxNy1mMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1+aOqxWYkYwh7ZwimDhVEoZorzmCdejagkJXfd0p9kEwCns6odDXucr2/FO 3kjgsOyOuUs6zTkTxVHiL4d9JdFRQLgJ032MfkHvBxzoBj6ZYnnQKO/y7NR+lWx0 rQ0+KvsiqGSYkFtmvSJxVrCYKi8dPoKBG55BIZ+USTSAjOTBXJp45kttzA9WiHhl L0CzenzyX1wC0AWWrScUAT1cmMeGIXR2RAdXZgcf4fJvAThsQmh4po9Hl1oksqti RTfTNu4ft3a3n+0bXBXL2ov7hxDSyUpTVpMKARbQp2msFP2yIr0ec0pV8x75JrmT g10E8gkvKhCf4a51JB8IjOdgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHC3aokB tOM4B6UUq9C9WZUvlT+FMB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA3MC9BRTM2NDY5NjEzODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVs WUFqZnhnWUl0U0ZxN0ptc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtL7x+CS1phKp0NA7VT/jwTSZm7TmEjuni7XAvv/7d4SC92mRyl/CM paOsx65vJY4yx7I3uCc39zvagVH+sL7HsvjtxLtKtftqEd927ZJJAMW66QrbD0X6 iZ1mtUDGYKW5BsPysYzD1ISwEIudg4SCz5ErdLORfj9yXJHDNHd7mmQoPgiMzg2j 8w2mTCf9CkOZqaW4eCMwspgh0c1WGrqku5iHJ5eHSzdpxqCF2EbZwqCKkANK3RnV Q0+erbFxPlGHRrzXBU/f9M4HUo+deykLFhdb7KyQV09peC/i62Xq9VM8W7dbXcTW luOzAKf4w1Qn0eSdptKtSWeXwlhE5ulj -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:01 2025 by rpki-client