This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: 2SJO9pIzyb12TVZAI86N9xWgaeh/EQaLdSFzNucysRc= Subject key identifier: 93:B7:34:11:10:2E:76:B0:CA:52:35:20:F5:36:CA:93:FB:A7:A1:81 Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: 4A Signing time: Tue 23 Dec 2025 06:12:53 +0000 Manifest this update: Tue 23 Dec 2025 06:12:52 +0000 Manifest next update: Tue 30 Dec 2025 06:12:52 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: Sld2doXaU6O7QbnTN4AMpwOPWj2CCqjnE70xwpqlzGM=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: FVLynhifvDV8KPyOIjr7ThKejT3Wh2GtJVJ/0rkPagg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Dec 23 06:12:52 2025 GMT Not After : Dec 30 06:12:52 2025 GMT Subject: CN=694a32e5-ef2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:fb:d3:a3:69:98:5f:9f:4d:4e:7b:d9:3e: d5:7e:73:48:c7:08:58:0a:ba:32:27:cd:a6:8c:88: 70:76:f7:af:f3:82:d1:25:09:52:6b:a4:4a:6f:b5: d0:78:32:85:4c:3c:30:91:da:38:fb:71:80:3d:d0: b9:0b:c7:04:5a:86:be:5f:c2:da:0f:69:7b:91:2b: e3:89:0f:35:18:19:33:80:30:80:14:64:7e:5c:69: bd:9a:a5:5b:4b:cf:3e:d9:b8:38:74:99:01:ef:d3: c9:63:ec:e8:1a:41:db:4e:a6:d7:4a:b6:51:ff:8b: d3:4c:20:0d:d7:71:df:ee:22:e3:2e:62:b5:03:ef: 70:17:69:2b:7c:61:63:26:ce:d8:44:2d:4d:fa:be: 28:fc:0a:1b:80:4c:df:e9:89:69:a1:30:33:f7:4e: 1e:6f:89:be:12:1b:45:e8:34:d5:d2:00:16:bd:6f: 2d:b2:63:5e:9d:99:7b:fd:de:ed:53:ec:ff:24:8e: ef:2f:11:64:59:8f:cf:3a:41:e0:ed:24:d2:7c:3c: d6:11:fd:3d:d2:e7:ab:ed:90:e4:d4:03:6e:85:7f: 9e:5f:90:60:41:6e:c3:64:b4:4f:b7:81:65:c8:5f: 45:a9:e3:09:ca:96:0e:2e:7c:ed:2a:3c:e2:13:11: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B7:34:11:10:2E:76:B0:CA:52:35:20:F5:36:CA:93:FB:A7:A1:81 X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9e:d5:0c:fe:b4:c2:ce:20:9c:d6:00:6c:a5:f2:6b:6c:0c: e3:e7:df:ba:56:4c:51:6e:c9:d0:de:f0:43:0e:5e:a0:e7:51: 96:30:81:71:64:6b:d1:24:77:cb:2a:30:13:94:7e:f1:3e:66: 12:32:80:92:ae:0c:ba:af:ac:72:36:28:ea:cb:88:19:22:d8: 92:f3:ad:37:12:1c:0f:9b:91:49:01:f6:1a:c4:7a:b1:07:48: 61:4d:16:57:73:8a:fa:aa:aa:3a:a3:bd:04:20:cb:c0:f9:a5: 03:8f:d6:b9:42:3a:4f:bb:b7:7b:7d:97:f5:98:04:7a:36:e0: 07:ef:0d:3e:a1:b9:e3:d1:e1:75:33:08:0f:6c:79:06:dc:2e: 44:87:e3:94:03:0b:e1:76:5e:52:2e:95:3e:fa:5d:25:60:ec: f1:81:ae:32:48:c0:fe:ef:38:9f:20:66:5b:97:82:2f:e2:cd: 85:d2:72:92:6d:dc:3e:b6:6e:f0:13:b9:6f:c3:1f:e5:ec:cf: b1:aa:6a:70:dc:00:b5:ef:cb:0d:27:5c:ca:2b:83:60:81:fe: 31:20:df:23:d4:36:35:7f:0a:28:38:d9:e6:48:1f:c7:10:b1: ee:ac:5f:ac:88:01:68:f7:ef:cd:c4:ad:95:61:35:e6:71:6a: 2c:0b:cb:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkI2RDExMC8GA1UEBRMoNEQ0RjNBQUNDNzM5NUExM0Q2NDIwMDdGOTkxMERGODgw NDBFNEJBQjAeFw0yNTEyMjMwNjEyNTJaFw0yNTEyMzAwNjEyNTJaMBgxFjAUBgNV BAMMDTY5NGEzMmU1LWVmMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+5vvTo2mYX59NTnvZPtV+c0jHCFgKujInzaaMiHB296/zgtElCVJrpEpvtdB4 MoVMPDCR2jj7cYA90LkLxwRahr5fwtoPaXuRK+OJDzUYGTOAMIAUZH5cab2apVtL zz7ZuDh0mQHv08lj7OgaQdtOptdKtlH/i9NMIA3Xcd/uIuMuYrUD73AXaSt8YWMm zthELU36vij8ChuATN/piWmhMDP3Th5vib4SG0XoNNXSABa9by2yY16dmXv93u1T 7P8kju8vEWRZj886QeDtJNJ8PNYR/T3S56vtkOTUA26Ff55fkGBBbsNktE+3gWXI X0Wp4wnKlg4ufO0qPOITEdVvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk7c0ERAu drDKUjUg9TbKk/unoYEwHwYDVR0jBBgwFoAUTU86rMc5WhPWQgB/mRDfiAQOS6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyQjZELzg2REY2QzdFNzEw NTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFU4NnJNYzVXaFBXUWdCX21SRGZpQVFPUzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy QjZELzg2REY2QzdFNzEwNTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQ V1FnQl9tUkRmaUFRT1M2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6e1Qz+tMLOIJzWAGyl8mtsDOPn37pWTFFuydDe8EMOXqDnUZYwgXFk a9Ekd8sqMBOUfvE+ZhIygJKuDLqvrHI2KOrLiBki2JLzrTcSHA+bkUkB9hrEerEH SGFNFldzivqqqjqjvQQgy8D5pQOP1rlCOk+7t3t9l/WYBHo24AfvDT6huePR4XUz CA9seQbcLkSH45QDC+F2XlIulT76XSVg7PGBrjJIwP7vOJ8gZluXgi/izYXScpJt 3D62bvATuW/DH+Xsz7GqanDcALXvyw0nXMorg2CB/jEg3yPUNjV/Cig42eZIH8cQ se6sX6yIAWj3783ErZVhNeZxaiwLy9k= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:50 2025 by rpki-client