This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json) Hash identifier: Gyt/pV50TyrV4x2SQ+FAPZQOzFqcHq9/S4NGbwgAK7A= Subject key identifier: 1F:3D:88:DB:9F:15:58:AD:21:E7:16:63:2E:87:1F:39:D9:37:D2:AE Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft Manifest number: 0BC9 Signing time: Mon 22 Dec 2025 18:26:35 +0000 Manifest this update: Mon 22 Dec 2025 18:26:35 +0000 Manifest next update: Mon 29 Dec 2025 18:26:35 +0000 Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: 3gc0Iozh/tDSvpI7XM7tMRsTt8Zi46tz7Bpitr6Ar2o=) 2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: ACheYQYEXBleb6DdPHzkUhEDmzrchulLT+Neb0c5vYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Validity Not Before: Dec 22 18:26:35 2025 GMT Not After : Dec 29 18:26:35 2025 GMT Subject: CN=69498d5b-b431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:37:5e:0f:2d:f9:cc:32:43:31:37:d3:3e: 95:f2:3a:84:63:7e:ab:ad:7e:26:69:96:e2:c7:ac: 1e:d8:bb:be:f2:84:fb:2c:0c:55:a5:49:a7:32:ae: b1:c7:94:9b:94:86:13:e8:d0:fd:34:ca:5d:94:9e: 6c:bf:0d:7c:93:ce:e7:8f:0d:01:22:23:a5:4f:7c: 37:46:26:09:3e:74:43:5f:80:6f:76:28:a8:0c:02: 46:da:a6:ec:45:02:33:96:22:81:83:26:63:a4:64: 6f:f2:d5:31:bb:02:55:d2:69:ba:a1:40:9b:c2:1c: f0:2d:95:e5:e0:53:c8:df:ff:ba:a6:9d:e5:7e:7b: bb:e5:57:92:69:c7:b5:a1:fa:3d:d6:18:42:aa:91: 8d:3e:8b:14:2e:26:56:c1:36:e2:cd:d9:bb:53:93: 81:15:0a:ca:a9:8a:cb:b6:7f:07:43:37:69:74:b4: ff:f3:6d:77:f7:62:c3:d0:ff:e1:31:87:7a:9e:f3: 7f:c6:af:df:a8:b2:c0:d8:1d:ff:47:c5:e4:83:0a: 36:24:cb:77:63:d0:ab:8e:07:3e:a8:76:69:1c:5d: 6c:5c:53:4e:4a:ac:d5:7b:bb:1e:b0:65:de:b6:10: b2:ff:6b:4e:e8:74:dd:eb:70:7b:f3:86:f0:c9:d6: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3D:88:DB:9F:15:58:AD:21:E7:16:63:2E:87:1F:39:D9:37:D2:AE X509v3 Authority Key Identifier: keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:86:2d:8b:f5:33:8f:5a:ff:04:46:b9:7a:8e:ce:b4:6c:04: ab:9c:be:83:89:e7:11:73:e9:50:a1:73:24:02:87:1e:02:36: e8:1b:34:d8:b0:8f:f3:85:72:e9:d2:2d:84:58:e2:4e:2e:f4: 97:94:84:d0:38:a0:7d:c1:94:e5:94:a3:46:ff:28:bd:43:94: ad:6a:e4:09:be:36:9e:cd:cb:5d:75:36:a6:c9:00:88:68:70: 3a:0b:39:15:34:64:10:33:1f:f7:91:a8:86:51:7e:ac:b3:76: 0b:85:a7:18:ef:9f:18:37:0b:8d:70:52:fd:8c:63:bc:0c:24: 5f:58:ff:15:3f:3e:c3:4d:40:b1:88:34:ba:b3:09:61:1f:a0: 96:38:e7:91:70:f4:dd:a6:13:5f:6f:4e:b3:20:bc:39:0d:0b: 36:f4:2f:26:65:0c:57:b5:f7:ef:25:fe:09:13:ea:fc:80:d4: ee:ac:5f:da:bf:1f:ab:bc:5e:47:f7:ea:b6:55:42:da:b9:cc: 48:cc:68:17:ad:a7:ee:fb:66:10:8b:fc:ab:61:08:bf:2e:ff: 33:ee:ec:01:60:6a:34:66:df:17:ad:d6:ad:46:56:c5:12:13: f9:1a:96:d3:29:a2:96:9f:7d:64:23:3f:63:91:7b:fc:ce:b6: f2:dc:46:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE MDYyNjQzRkMwHhcNMjUxMjIyMTgyNjM1WhcNMjUxMjI5MTgyNjM1WjAYMRYwFAYD VQQDDA02OTQ5OGQ1Yi1iNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv03Xg8t+cwyQzE30z6V8jqEY36rrX4maZbix6we2Lu+8oT7LAxVpUmnMq6x x5SblIYT6ND9NMpdlJ5svw18k87njw0BIiOlT3w3RiYJPnRDX4BvdiioDAJG2qbs RQIzliKBgyZjpGRv8tUxuwJV0mm6oUCbwhzwLZXl4FPI3/+6pp3lfnu75VeSace1 ofo91hhCqpGNPosULiZWwTbizdm7U5OBFQrKqYrLtn8HQzdpdLT/821392LD0P/h MYd6nvN/xq/fqLLA2B3/R8Xkgwo2JMt3Y9Crjgc+qHZpHF1sXFNOSqzVe7sesGXe thCy/2tO6HTd63B784bwydYWlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB89iNuf FVitIecWYy6HHznZN9KuMB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfhi2L9TOPWv8ERrl6js60bASrnL6DiecRc+lQoXMkAoceAjboGzTY sI/zhXLp0i2EWOJOLvSXlITQOKB9wZTllKNG/yi9Q5StauQJvjaezctddTamyQCI aHA6CzkVNGQQMx/3kaiGUX6ss3YLhacY758YNwuNcFL9jGO8DCRfWP8VPz7DTUCx iDS6swlhH6CWOOeRcPTdphNfb06zILw5DQs29C8mZQxXtffvJf4JE+r8gNTurF/a vx+rvF5H9+q2VULaucxIzGgXrafu+2YQi/yrYQi/Lv8z7uwBYGo0Zt8XrdatRlbF EhP5GpbTKaKWn31kIz9jkXv8zrby3EYy -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:25 2025 by rpki-client