This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: uj7MRBSmEGfAUqBOFS7zcLKjy6106tALp3sxMrGIV28= Subject key identifier: 2D:19:61:52:43:9F:B0:29:83:18:C6:A8:E1:6E:3B:31:80:B5:11:27 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 01D2 Signing time: Sun 07 Dec 2025 01:17:19 +0000 Manifest this update: Sun 07 Dec 2025 01:17:19 +0000 Manifest next update: Sun 14 Dec 2025 01:17:19 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: D8evPYk1jCgNOoCGIdllECRZVBNTMXzBm+yj30wdZFs=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Dec 7 01:17:19 2025 GMT Not After : Dec 14 01:17:19 2025 GMT Subject: CN=6934d59f-c443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:eb:23:37:a4:9a:c8:72:32:3b:d2:e1:2a: a0:cc:c1:21:26:e4:88:38:ad:06:f8:16:7d:69:eb: 9a:42:5f:e8:b2:1f:02:92:e3:63:75:ff:4a:a5:49: fa:92:90:fa:7a:ef:dc:f4:25:b1:a3:45:d4:a7:8f: a7:d2:1c:74:07:eb:6d:74:44:02:09:1b:73:72:77: 93:b6:12:46:54:d7:d2:44:1d:7d:5e:87:36:bb:1d: 65:74:7c:9a:78:dd:7e:dc:c6:5f:49:97:08:a5:bf: 18:2d:ee:b5:ef:71:5e:9b:2d:2e:ce:8e:d0:29:4b: 1d:32:8d:34:3f:3c:08:1e:41:c5:11:86:9f:60:71: 17:fc:93:59:86:90:27:ba:86:75:f0:18:85:98:a9: 77:01:c7:89:1a:5c:3e:ac:58:e6:b7:04:b7:c5:18: 89:86:ed:22:9a:c2:9f:d2:93:2d:9c:54:64:a5:9e: 15:54:7b:cc:49:d7:b0:66:c0:3c:9c:a9:ff:7e:e0: 84:bb:a0:e5:84:5f:e6:e3:8d:4c:db:78:aa:21:15: f6:30:37:c5:e0:ab:88:70:97:b0:e3:48:6e:70:65: 28:0d:c8:7b:a0:bd:f6:dd:e3:95:ca:e1:8f:d4:d5: d4:9a:6d:6f:a7:e8:19:75:4b:e9:23:16:85:2e:35: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:19:61:52:43:9F:B0:29:83:18:C6:A8:E1:6E:3B:31:80:B5:11:27 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b9:a6:aa:d5:fe:14:cc:c5:4c:ae:82:44:f4:78:d8:87:27: 46:e0:64:b7:17:4d:6f:71:ba:ce:aa:dd:83:ca:a3:88:43:aa: e6:b2:26:20:74:12:a0:f9:fc:06:35:f2:62:9d:90:dd:57:c9: fb:85:bf:27:c9:27:fc:96:35:5d:f1:cd:bc:4c:2c:24:d8:bb: 22:0f:ae:9d:63:fd:2c:af:37:ef:9f:0f:2d:e5:e4:8f:ae:25: ff:04:6a:bb:07:24:41:85:f3:b7:d3:60:37:1f:1f:e4:25:3b: a9:c7:b3:91:90:22:d5:34:12:48:c0:e3:c1:d6:b2:e2:d8:d2: bb:36:f2:ba:70:81:b9:ae:3b:c0:d3:79:95:30:7d:73:44:cc: 4e:24:55:e3:7d:65:3e:ec:11:01:6f:74:20:b4:67:09:19:f6: 3f:dc:e3:2c:7b:36:63:5e:75:b5:59:93:34:2d:81:46:4c:5d: dd:6d:c6:20:23:b2:4f:9c:08:f8:4d:78:4b:b0:4e:ba:ab:e6: f9:fc:45:6f:48:4f:28:d3:e0:10:51:40:d9:b3:5e:88:b2:81: 9a:8c:64:44:4e:ee:26:bc:d8:95:4d:bb:28:e5:e3:2a:f5:6d: f5:9c:90:55:e8:e8:68:1f:a2:d8:fd:68:bf:8f:f5:1e:d4:21: 1f:82:c6:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUxMjA3MDExNzE5WhcNMjUxMjE0MDExNzE5WjAYMRYwFAYD VQQDEw02OTM0ZDU5Zi1jNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGPrIzekmshyMjvS4SqgzMEhJuSIOK0G+BZ9aeuaQl/osh8CkuNjdf9KpUn6 kpD6eu/c9CWxo0XUp4+n0hx0B+ttdEQCCRtzcneTthJGVNfSRB19Xoc2ux1ldHya eN1+3MZfSZcIpb8YLe6173Femy0uzo7QKUsdMo00PzwIHkHFEYafYHEX/JNZhpAn uoZ18BiFmKl3AceJGlw+rFjmtwS3xRiJhu0imsKf0pMtnFRkpZ4VVHvMSdewZsA8 nKn/fuCEu6DlhF/m441M23iqIRX2MDfF4KuIcJew40hucGUoDch7oL323eOVyuGP 1NXUmm1vp+gZdUvpIxaFLjVI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0ZYVJD n7ApgxjGqOFuOzGAtREnMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCuaaq1f4UzMVMroJE9HjYhydG4GS3F01vcbrOqt2DyqOIQ6rmsiYg dBKg+fwGNfJinZDdV8n7hb8nySf8ljVd8c28TCwk2LsiD66dY/0srzfvnw8t5eSP riX/BGq7ByRBhfO302A3Hx/kJTupx7ORkCLVNBJIwOPB1rLi2NK7NvK6cIG5rjvA 03mVMH1zRMxOJFXjfWU+7BEBb3QgtGcJGfY/3OMsezZjXnW1WZM0LYFGTF3dbcYg I7JPnAj4TXhLsE66q+b5/EVvSE8o0+AQUUDZs16IsoGajGRETu4mvNiVTbso5eMq 9W31nJBV6OhoH6LY/Wi/j/Ue1CEfgsZb -----END CERTIFICATE-----Generated at Mon Dec 8 06:47:44 2025 by rpki-client