This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft File: tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json) Hash identifier: T1V6w1tP1nrhpYwJ7Q2+0diJ2iFYyRBAGEPFesIdNL0= Subject key identifier: 3D:DE:BF:C2:37:5C:4A:A8:60:6C:E6:DF:5D:EE:29:51:21:B7:24:C9 Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft Manifest number: 0196 Signing time: Tue 23 Dec 2025 02:27:20 +0000 Manifest this update: Tue 23 Dec 2025 02:27:20 +0000 Manifest next update: Tue 30 Dec 2025 02:27:20 +0000 Files and hashes: 1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: A7DR49ohITXtleDpbB6YQmp2uvOnBy7cJr6hQynt3jU=) 2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: cZSiy4bCwDyhfeb/EZhFsCoqJYnevtXYXbg2+tmKMXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Validity Not Before: Dec 23 02:27:20 2025 GMT Not After : Dec 30 02:27:20 2025 GMT Subject: CN=6949fe08-61cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:f4:b3:e2:f2:4b:b8:23:9b:e4:13:57:29: 09:8f:09:c4:bf:6b:aa:4b:6e:95:06:04:d5:83:fa: d9:b4:90:4c:7e:80:bb:7b:41:78:83:31:6d:5c:76: 9f:5f:30:0f:00:8e:f8:5d:5a:9e:c5:cf:fa:cb:98: b8:7c:56:89:2b:3a:83:0f:8f:45:a5:4d:57:64:88: 3b:eb:ac:99:05:7a:e5:c2:bc:64:c4:dd:8a:f1:f3: 48:64:c0:89:8d:b7:f5:79:d5:83:07:e7:ac:bc:55: ed:d7:f1:69:f2:bb:33:53:89:1b:10:99:cc:e0:84: e8:c9:7a:d3:d3:20:ba:dc:88:71:cc:66:a1:e1:75: ec:ef:d1:90:a4:1a:0f:b2:fd:d5:a9:bb:8c:79:0e: 40:7d:f7:00:0a:3a:3d:4e:01:d9:29:be:f4:6e:a4: d4:64:46:3b:a8:b5:b7:72:e6:93:a5:f4:85:ac:b6: 9a:69:7b:62:d1:9a:6c:4f:a4:3c:47:40:41:6b:9f: 4e:87:25:02:45:0b:07:80:87:5f:76:bf:0a:44:47: ef:a9:ce:8b:3d:70:1f:dd:42:98:e3:74:59:b9:62: 86:65:8e:7f:ad:a0:4d:e3:54:47:e2:98:30:36:38: 7b:29:fa:09:d4:5f:d3:e2:c1:55:2d:b7:98:24:d8: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DE:BF:C2:37:5C:4A:A8:60:6C:E6:DF:5D:EE:29:51:21:B7:24:C9 X509v3 Authority Key Identifier: keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c6:d4:0c:70:65:b2:bf:8e:09:d5:7b:7e:ef:7b:1a:c0:30: 35:91:73:54:0d:fd:1f:19:af:b8:81:76:42:77:23:82:42:74: 29:85:72:0a:88:b6:6e:e6:ad:23:f7:dd:cb:ac:ff:3b:cd:fc: 97:53:28:e1:d6:16:29:98:3b:ed:12:2a:c6:52:31:78:2a:36: 28:c7:6f:81:b2:5d:c3:1c:ab:11:e9:59:ea:a1:af:2a:09:ad: d4:a5:ec:53:ce:ed:1f:dc:7a:cb:1c:4f:47:8f:c4:b9:83:b5: 68:4b:a8:a4:da:81:60:3c:5e:96:7b:c4:c6:04:53:2f:d8:5b: 82:32:d3:88:4c:01:61:71:3c:72:13:b3:64:8f:09:35:88:8b: 4d:85:59:67:d3:39:43:53:59:07:39:0e:b7:d6:4a:a2:4e:15: a4:0a:2f:a6:fe:65:9f:10:a3:2e:e4:a7:83:58:99:93:5b:35: e8:b0:f2:2d:7d:0b:bd:4b:ac:e5:15:8b:e7:77:03:6f:08:1e: 0e:cc:2a:36:27:b2:8a:6f:8f:0a:8b:8b:4b:e5:b1:c2:92:35: d0:a2:e2:e6:88:41:cf:14:fd:60:6a:43:be:03:63:25:a2:bb: f8:da:d6:88:f2:ad:d7:0e:73:9d:8a:90:16:97:36:17:c3:88: 03:e6:b7:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMDYxMTAvBgNVBAUTKEI2MDQxMkNFOTgwOUMxMEM2N0RERUFCQkEwRTMzNUUz QURBNEZFMTAwHhcNMjUxMjIzMDIyNzIwWhcNMjUxMjMwMDIyNzIwWjAYMRYwFAYD VQQDDA02OTQ5ZmUwOC02MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttL0s+LyS7gjm+QTVykJjwnEv2uqS26VBgTVg/rZtJBMfoC7e0F4gzFtXHaf XzAPAI74XVqexc/6y5i4fFaJKzqDD49FpU1XZIg766yZBXrlwrxkxN2K8fNIZMCJ jbf1edWDB+esvFXt1/Fp8rszU4kbEJnM4IToyXrT0yC63IhxzGah4XXs79GQpBoP sv3VqbuMeQ5AffcACjo9TgHZKb70bqTUZEY7qLW3cuaTpfSFrLaaaXti0ZpsT6Q8 R0BBa59OhyUCRQsHgIdfdr8KREfvqc6LPXAf3UKY43RZuWKGZY5/raBN41RH4pgw Njh7KfoJ1F/T4sFVLbeYJNjfmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3ev8I3 XEqoYGzm313uKVEhtyTJMB8GA1UdIwQYMBaAFLYEEs6YCcEMZ93qu6DjNeOtpP4Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMwNi8xNzE3OTIwRTcx NkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndReG4zZXE3b09NMTQ2Mmtf aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUVN6cGdKd1F4bjNlcTdvT00xNDYya19oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMwNi8xNzE3OTIwRTcxNkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndR eG4zZXE3b09NMTQ2MmtfaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzxtQMcGWyv44J1Xt+73sawDA1kXNUDf0fGa+4gXZCdyOCQnQphXIK iLZu5q0j993LrP87zfyXUyjh1hYpmDvtEirGUjF4KjYox2+Bsl3DHKsR6Vnqoa8q Ca3UpexTzu0f3HrLHE9Hj8S5g7VoS6ik2oFgPF6We8TGBFMv2FuCMtOITAFhcTxy E7Nkjwk1iItNhVln0zlDU1kHOQ631kqiThWkCi+m/mWfEKMu5KeDWJmTWzXosPIt fQu9S6zlFYvndwNvCB4OzCo2J7KKb48Ki4tL5bHCkjXQouLmiEHPFP1gakO+A2Ml orv42taI8q3XDnOdipAWlzYXw4gD5rft -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:56 2025 by rpki-client