This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: X3+EAbNscutoUyiNwI0RkNc+h1uPXCSIgl4El4sTxsQ= Subject key identifier: 12:CE:B0:F3:C5:7A:B4:AC:71:77:5B:39:FF:E1:73:C3:29:1B:80:31 Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 01CB Signing time: Tue 23 Dec 2025 01:59:14 +0000 Manifest this update: Tue 23 Dec 2025 01:59:14 +0000 Manifest next update: Tue 30 Dec 2025 01:59:14 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: xvjxp8yikTXQ6q5hwQBsum9fpPAAfNFGiFJcPOG8yvo=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: XO+ul7lF7sjvsPZ/wUsLZ1kf4agxiZYpp0ew7HMRh6M=) 3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: rk+SPflwPgB4vTfzwjF5uUSSjGvEoj32LpORFaq9djc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: Dec 23 01:59:14 2025 GMT Not After : Dec 30 01:59:14 2025 GMT Subject: CN=6949f772-f1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:ad:7b:15:73:55:39:62:72:1b:d9:1f:a8: 94:29:d8:97:47:40:ee:0a:8a:0a:7a:de:c1:4e:53: 3f:28:a6:0c:54:25:7a:11:d9:9e:b7:71:1b:76:83: dc:3d:69:62:84:36:50:4f:8f:39:42:f9:37:0b:31: 88:06:a7:b3:fd:5b:ae:4e:71:aa:a6:5b:98:36:37: f6:d5:72:cc:56:86:13:d9:45:21:48:f4:a1:7e:6b: 93:74:e0:a7:4f:d6:79:01:8c:4e:42:a9:4e:54:19: 4b:12:2f:14:6c:8e:f5:bd:50:3f:77:9b:cd:04:16: f0:1f:b8:88:6d:8b:74:0e:46:26:72:a9:5f:e9:9a: d3:05:6c:0b:6e:e1:a1:d1:d6:b3:90:4e:2e:e9:76: 24:5a:ca:35:b3:ba:21:96:28:24:42:34:ba:a3:21: b5:a7:a6:58:7f:dc:fc:cc:b6:0e:74:df:93:83:52: 35:15:f1:fa:52:21:1a:a5:12:5d:d2:eb:3f:25:7a: 05:71:03:e5:51:b8:9c:69:32:01:ab:62:22:b2:68: a7:91:3d:76:ab:64:e8:e2:12:63:de:c0:b5:b3:73: 25:2e:1d:b5:f1:28:37:db:6d:64:a7:b9:4e:46:ca: 4a:3a:65:bf:e3:94:f9:11:59:e2:06:4c:4a:fc:d9: 8d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CE:B0:F3:C5:7A:B4:AC:71:77:5B:39:FF:E1:73:C3:29:1B:80:31 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:f1:1d:e3:5c:d2:42:94:cc:b1:4b:23:49:45:8b:55:f3: 2d:8c:72:07:d3:f2:88:3e:79:2d:a9:61:d7:d4:a0:75:e2:fa: db:2d:76:52:88:4e:32:37:0f:85:42:25:b5:49:06:3c:70:73: 71:8c:a9:11:01:3c:84:a7:5b:2e:01:71:a2:05:88:a3:40:10: 04:0d:6d:dc:44:08:74:22:ef:cd:43:5c:14:6c:90:e7:f1:ab: 53:07:72:2b:a1:04:84:68:63:bf:5c:cd:d8:41:74:33:c4:2d: 16:29:3a:99:d9:a6:3a:1f:fa:7b:32:cf:22:5c:35:1d:ca:76: 2a:7a:84:17:eb:62:3e:8a:4b:5d:e3:b0:c4:c9:0f:46:91:d8: 66:80:2b:ca:8e:a7:c7:2f:57:2b:68:70:7c:8c:b3:6b:de:b6: a0:75:00:8a:31:44:94:cf:23:1e:c3:78:4b:8b:cc:3b:94:f1: 88:e3:5d:95:d7:bb:f2:50:1f:0a:c5:d2:c2:52:04:ff:c1:4a: 86:0d:b9:29:7f:ef:02:7f:fb:6b:c8:6b:e0:81:7c:69:43:fe: c4:51:68:64:58:0d:72:de:18:66:e1:71:1a:cc:da:ae:4c:3a: c2:3b:62:5a:5f:8a:2f:21:39:45:ae:3a:46:5e:f7:75:3f:a0: 18:74:50:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUxMjIzMDE1OTE0WhcNMjUxMjMwMDE1OTE0WjAYMRYwFAYD VQQDDA02OTQ5Zjc3Mi1mMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaKtexVzVTlichvZH6iUKdiXR0DuCooKet7BTlM/KKYMVCV6Edmet3EbdoPc PWlihDZQT485Qvk3CzGIBqez/VuuTnGqpluYNjf21XLMVoYT2UUhSPShfmuTdOCn T9Z5AYxOQqlOVBlLEi8UbI71vVA/d5vNBBbwH7iIbYt0DkYmcqlf6ZrTBWwLbuGh 0dazkE4u6XYkWso1s7ohligkQjS6oyG1p6ZYf9z8zLYOdN+Tg1I1FfH6UiEapRJd 0us/JXoFcQPlUbicaTIBq2IisminkT12q2To4hJj3sC1s3MlLh218Sg3221kp7lO RspKOmW/45T5EVniBkxK/NmNiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLOsPPF erSscXdbOf/hc8MpG4AxMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM0fEd41zSQpTMsUsjSUWLVfMtjHIH0/KIPnktqWHX1KB14vrbLXZS iE4yNw+FQiW1SQY8cHNxjKkRATyEp1suAXGiBYijQBAEDW3cRAh0Iu/NQ1wUbJDn 8atTB3IroQSEaGO/XM3YQXQzxC0WKTqZ2aY6H/p7Ms8iXDUdynYqeoQX62I+iktd 47DEyQ9GkdhmgCvKjqfHL1craHB8jLNr3ragdQCKMUSUzyMew3hLi8w7lPGI412V 17vyUB8KxdLCUgT/wUqGDbkpf+8Cf/tryGvggXxpQ/7EUWhkWA1y3hhm4XEazNqu TDrCO2JaX4ovITlFrjpGXvd1P6AYdFBa -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:36 2025 by rpki-client