This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft File: TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json) Hash identifier: qwR3pnZUbePljxeeW4XmIB7h6J8c8IKq8dwUXw8tQHc= Subject key identifier: 44:14:2A:93:68:45:73:3D:22:00:A5:D3:34:D0:BD:11:13:D5:06:D0 Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft Manifest number: 01DB Signing time: Fri 19 Dec 2025 02:03:02 +0000 Manifest this update: Fri 19 Dec 2025 02:03:01 +0000 Manifest next update: Fri 26 Dec 2025 02:03:01 +0000 Files and hashes: 1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: PcM9reMpJWXxRTjXC73OCK/Wm7TPrdYyAM51B8Kqn00=) 2: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: mvlfednBP8hH+VJF+N7b5lj86+gAiaBFLJ6OGfwQefA=) 3: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: wndMS9TntxEIvOO1y5ThBewHzkdYkTNV8U/orVegQT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B Validity Not Before: Dec 19 02:03:01 2025 GMT Not After : Dec 26 02:03:01 2025 GMT Subject: CN=6944b255-3c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:de:87:97:a6:a1:33:e3:6b:d9:8e:e7:90: ba:30:ad:ac:f7:5f:2e:2f:d2:3f:4f:ce:ed:27:fd: 5d:28:4b:12:9a:ce:b5:ad:2f:c8:e5:81:1f:1e:b1: 2e:cc:a7:c2:75:11:60:c2:60:5b:5f:01:18:78:57: bc:05:c0:d5:cd:d3:cb:38:62:06:b4:94:9b:5f:a2: 72:2e:32:5a:0b:db:ab:0d:6e:e4:04:4a:99:7f:fa: 9d:96:67:91:71:ac:27:e0:4a:4a:51:22:2b:36:e0: bd:6c:c9:d4:ca:e0:5a:54:7a:d0:bf:51:d1:4a:9e: 65:80:9a:40:96:bc:bb:36:f8:33:7d:1d:ba:87:d3: 3f:37:d1:75:48:e3:91:80:aa:73:f6:b8:38:9e:2d: c6:d5:58:4b:03:c6:2c:0b:1b:74:92:6a:80:37:86: 72:c0:4b:62:d0:ae:0a:fc:bd:1a:29:fd:80:4b:71: 49:a9:5c:72:31:59:bb:cf:c0:dd:24:ba:10:f8:97: 96:03:c2:cf:9a:71:fc:09:07:fa:0d:d4:f4:75:f6: f6:a7:31:60:97:bd:f1:f8:cc:ee:b0:0b:78:e0:cc: d3:d8:82:f8:bf:c1:97:79:50:59:21:90:61:ad:3d: 9f:ba:5f:21:fd:0f:6e:ce:75:e7:8e:43:9f:ea:4b: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:2A:93:68:45:73:3D:22:00:A5:D3:34:D0:BD:11:13:D5:06:D0 X509v3 Authority Key Identifier: keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9a:b7:e6:3d:a2:bc:c9:fd:85:6f:a0:71:ce:bf:4e:af:56: 62:b9:66:95:06:1b:6a:ef:93:52:1c:a9:e9:a1:aa:61:c1:2c: 8a:7c:6d:54:16:1f:0e:88:c5:a2:b9:ff:f1:db:3f:06:33:eb: 03:07:22:89:ed:ed:f6:ad:e8:e9:70:f0:a8:35:09:d4:58:74: ee:65:74:d6:14:cc:31:f0:c3:81:5e:ec:12:be:e9:cc:bd:75: 7d:de:b1:f7:a4:21:13:75:f6:f9:d9:54:3d:84:e4:53:20:d5: dc:5a:85:4c:e8:a8:93:a8:12:cc:33:72:6b:37:ec:6f:5b:e3: 8a:35:56:d4:70:4e:5c:a0:5c:33:05:57:46:7f:36:99:ee:c9: 6c:33:96:9a:4a:25:60:62:86:47:94:04:f7:11:0a:f9:3d:c4: e5:fb:cd:4e:23:af:4f:b0:aa:76:32:60:d4:15:6c:19:64:f9: de:6b:2c:d6:e1:6b:e9:a4:47:0a:1f:d7:20:f3:29:a8:8a:47: cb:6d:0e:de:2e:d2:73:77:90:13:db:a3:b6:49:de:cb:ca:14: 21:26:c7:81:a5:b0:d6:b2:b7:cf:77:17:4e:62:1d:11:d6:02: f5:46:5c:e2:ce:de:80:74:b6:cd:bb:18:68:e2:b9:bf:0f:dc: 46:10:37:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIwMEYxMTAvBgNVBAUTKDREOTA5MDg3QkRERkExNTA1RTJCQkEwM0YyMDYxMTJF QUVGRkIxMUIwHhcNMjUxMjE5MDIwMzAxWhcNMjUxMjI2MDIwMzAxWjAYMRYwFAYD VQQDDA02OTQ0YjI1NS0zYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iHeh5emoTPja9mO55C6MK2s918uL9I/T87tJ/1dKEsSms61rS/I5YEfHrEu zKfCdRFgwmBbXwEYeFe8BcDVzdPLOGIGtJSbX6JyLjJaC9urDW7kBEqZf/qdlmeR cawn4EpKUSIrNuC9bMnUyuBaVHrQv1HRSp5lgJpAlry7NvgzfR26h9M/N9F1SOOR gKpz9rg4ni3G1VhLA8YsCxt0kmqAN4ZywEti0K4K/L0aKf2AS3FJqVxyMVm7z8Dd JLoQ+JeWA8LPmnH8CQf6DdT0dfb2pzFgl73x+MzusAt44MzT2IL4v8GXeVBZIZBh rT2ful8h/Q9uznXnjkOf6ktRrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQUKpNo RXM9IgCl0zTQvRET1QbQMB8GA1UdIwQYMBaAFE2QkIe936FQXiu6A/IGES6u/7Eb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjAwRi8yNTc4NzQwMjE2 NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9WQmVLN29EOGdZUkxxN19z UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQ1FoNzNmb1ZCZUs3b0Q4Z1lSTHE3X3NScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjAwRi8yNTc4NzQwMjE2NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9W QmVLN29EOGdZUkxxN19zUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAamrfmPaK8yf2Fb6Bxzr9Or1ZiuWaVBhtq75NSHKnpoaphwSyKfG1U Fh8OiMWiuf/x2z8GM+sDByKJ7e32rejpcPCoNQnUWHTuZXTWFMwx8MOBXuwSvunM vXV93rH3pCETdfb52VQ9hORTINXcWoVM6KiTqBLMM3JrN+xvW+OKNVbUcE5coFwz BVdGfzaZ7slsM5aaSiVgYoZHlAT3EQr5PcTl+81OI69PsKp2MmDUFWwZZPneayzW 4WvppEcKH9cg8ymoikfLbQ7eLtJzd5AT26O2Sd7LyhQhJseBpbDWsrfPdxdOYh0R 1gL1Rlzizt6AdLbNuxho4rm/D9xGEDcP -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:14 2025 by rpki-client