This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: bvxxbTfn4/w1f7QyBUQdoahZLokDRIvPpjOJhA8/WmA= Subject key identifier: CD:D7:3B:B6:4B:B9:A8:F2:FD:89:21:52:15:D2:84:AF:EE:D0:FD:05 Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 08E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 08DD Signing time: Mon 22 Dec 2025 19:46:41 +0000 Manifest this update: Mon 22 Dec 2025 19:46:41 +0000 Manifest next update: Mon 29 Dec 2025 19:46:41 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: roFxgaPhPDS5x0S5NCL3VOH3Q20dhZgFg/9iFgHHvpE=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: opv4DBbLy0U1nxAJSQ/FW4lgkGanCqSRXcsssLo5kGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2278 (0x8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: Dec 22 19:46:41 2025 GMT Not After : Dec 29 19:46:41 2025 GMT Subject: CN=6949a021-25d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:56:1c:96:76:a3:74:ef:8e:e0:fa:c8:d5: ba:76:0b:e5:60:1e:a4:fc:6e:43:eb:d2:c1:32:84: 08:e9:81:92:b3:ed:55:75:58:25:04:b5:c7:fe:ac: 3f:4c:74:f3:ee:3c:74:bd:dd:1b:f9:9d:cb:a3:69: 0d:71:f8:82:17:d4:96:b0:e5:54:64:02:50:d7:32: 50:e0:7f:ca:32:eb:ce:da:2d:3b:13:8a:de:23:9c: 2a:19:56:0a:68:97:f6:ea:3e:88:47:9e:ae:1c:1c: 10:90:08:70:e7:ea:5b:aa:bc:db:1a:3f:1a:fc:00: fd:bb:2a:57:7c:95:10:48:08:7f:5c:36:b7:95:39: 25:70:e3:93:7b:58:b2:20:cc:cd:fe:49:86:e2:7e: 13:49:a5:9a:00:79:45:b4:92:3f:ae:52:4e:4f:86: 7d:78:3b:31:ae:cb:35:1a:b2:39:07:e0:63:bf:b0: 82:2e:4f:f6:97:3b:16:68:e6:7d:6f:b4:81:38:b1: 34:d3:8c:41:dd:cb:c0:dc:60:ef:b5:81:29:26:4f: ed:6f:38:72:7d:7e:cf:2b:1a:38:f2:96:c7:89:ba: be:04:32:0c:35:c0:20:2e:d9:e0:75:d8:cc:cd:19: 65:9c:7c:10:03:6d:c5:07:11:7a:04:3d:6f:8c:60: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D7:3B:B6:4B:B9:A8:F2:FD:89:21:52:15:D2:84:AF:EE:D0:FD:05 X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:37:10:0d:fc:40:42:a7:e0:80:c2:a0:64:8f:62:8f:51:8c: 72:dd:df:30:2a:54:2c:81:eb:f9:6e:6b:ab:fa:52:31:75:28: 93:06:6e:c7:00:e8:90:c3:2d:2c:82:32:b6:5c:94:a3:87:f5: e9:d3:1b:8e:6f:6d:77:c9:1a:63:57:e4:e4:4b:d3:e8:1a:2b: d8:ee:93:2b:42:09:9a:25:ce:af:59:09:6e:32:20:09:31:8b: 01:4c:57:25:c8:6c:d8:02:e3:0c:07:ef:36:62:e7:33:31:3c: f5:56:91:29:77:1e:4f:4f:38:5d:48:bc:92:dc:15:e5:ba:25: 00:67:6a:1a:d1:88:d0:11:c1:0e:96:a9:4f:94:17:7a:8c:41: 6f:9c:bb:83:7d:89:04:b9:24:ac:47:f0:51:61:95:d1:ab:34: c4:01:33:ff:fe:f9:e4:68:5e:8d:6a:50:f8:f9:59:c1:c6:c0: 6a:90:e8:4e:03:0e:f7:7a:a1:16:4b:d5:bf:89:28:f3:14:28: ce:44:6c:8a:96:2c:a9:3b:c9:cf:bf:b6:d8:fb:3e:49:13:95: 34:b4:ca:7f:20:59:a5:42:d0:4c:c1:4e:98:4b:91:cd:a4:ac: 19:a0:5a:b2:7a:40:81:c2:aa:6f:c3:bb:bc:cb:ae:8b:5a:4a: 55:c3:11:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjUxMjIyMTk0NjQxWhcNMjUxMjI5MTk0NjQxWjAYMRYwFAYD VQQDDA02OTQ5YTAyMS0yNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaVWHJZ2o3TvjuD6yNW6dgvlYB6k/G5D69LBMoQI6YGSs+1VdVglBLXH/qw/ THTz7jx0vd0b+Z3Lo2kNcfiCF9SWsOVUZAJQ1zJQ4H/KMuvO2i07E4reI5wqGVYK aJf26j6IR56uHBwQkAhw5+pbqrzbGj8a/AD9uypXfJUQSAh/XDa3lTklcOOTe1iy IMzN/kmG4n4TSaWaAHlFtJI/rlJOT4Z9eDsxrss1GrI5B+Bjv7CCLk/2lzsWaOZ9 b7SBOLE004xB3cvA3GDvtYEpJk/tbzhyfX7PKxo48pbHibq+BDIMNcAgLtngddjM zRllnHwQA23FBxF6BD1vjGD8xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3XO7ZL uajy/YkhUhXShK/u0P0FMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnNxAN/EBCp+CAwqBkj2KPUYxy3d8wKlQsgev5bmur+lIxdSiTBm7H AOiQwy0sgjK2XJSjh/Xp0xuOb213yRpjV+TkS9PoGivY7pMrQgmaJc6vWQluMiAJ MYsBTFclyGzYAuMMB+82YuczMTz1VpEpdx5PTzhdSLyS3BXluiUAZ2oa0YjQEcEO lqlPlBd6jEFvnLuDfYkEuSSsR/BRYZXRqzTEATP//vnkaF6NalD4+VnBxsBqkOhO Aw73eqEWS9W/iSjzFCjORGyKliypO8nPv7bY+z5JE5U0tMp/IFmlQtBMwU6YS5HN pKwZoFqyekCBwqpvw7u8y66LWkpVwxHs -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:36 2025 by rpki-client