This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json) Hash identifier: q9eoWfpZ57uJFvS69sLept6ZSNtSKb0Hbc4ZmSF2jXY= Subject key identifier: 3D:02:C7:2E:A5:82:F4:9E:35:48:D1:D3:82:63:7A:DB:7F:DB:36:01 Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft Manifest number: 27 Signing time: Sun 07 Dec 2025 05:40:52 +0000 Manifest this update: Sun 07 Dec 2025 05:40:52 +0000 Manifest next update: Sun 14 Dec 2025 05:40:52 +0000 Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: yz0U8F6tLF1gdPWefMB3lkv/hVsz/v4eJ0/WSmTkzSU=) 2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: 3U7vBnQl/Kdt2pXpdCyuzs/qAnaveVs4aYr8QCEMg6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Validity Not Before: Dec 7 05:40:52 2025 GMT Not After : Dec 14 05:40:52 2025 GMT Subject: CN=69351364-4d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:07:7e:0f:f9:16:7c:08:ff:fc:df:97:84: b9:dc:88:8f:01:f7:bd:7d:98:29:29:7f:17:19:11: 34:9c:88:e0:59:a8:cf:2a:c7:fe:6e:53:68:d3:5b: 96:46:b2:fa:e2:e4:01:1f:90:45:de:05:b0:85:ab: d8:cc:0f:61:16:5c:86:20:d4:f3:49:7e:be:f6:9b: 53:56:5f:16:4d:73:36:da:52:70:52:0c:28:4e:0a: 24:31:4f:62:f1:54:f3:c2:16:3a:50:a6:30:25:4f: 18:cc:0b:43:bc:d6:bf:ea:74:fc:c9:b5:6b:b4:32: c8:ce:6d:f0:e6:fa:f5:6b:af:7d:90:bf:f6:71:2a: 35:a5:9d:8a:34:37:bc:bb:e5:0c:68:07:eb:88:f1: 94:96:0d:67:aa:66:c3:70:d0:50:73:db:1d:51:a1: cb:fe:5f:1c:d4:54:aa:42:7f:03:29:23:46:e8:00: 5e:9b:72:38:7c:7c:d5:eb:cd:bc:1a:90:cd:2a:65: 25:10:74:bf:d2:d0:8a:d8:4a:87:99:3c:da:99:81: 95:10:c4:ee:00:e3:65:5c:c1:4b:c2:d0:62:81:77: 82:e2:e2:2c:06:67:71:8a:33:7e:7b:a0:68:b1:65: 1e:18:f7:2d:7a:d0:6d:d5:ad:f7:0e:f9:af:04:85: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:02:C7:2E:A5:82:F4:9E:35:48:D1:D3:82:63:7A:DB:7F:DB:36:01 X509v3 Authority Key Identifier: keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:0a:99:21:51:42:11:5b:0c:41:3d:3b:6d:b9:68:05:eb: 7a:0f:10:2a:94:07:3f:5b:72:47:e2:cd:1f:99:ce:15:53:94: bc:cb:00:0e:64:ae:38:f7:fa:d5:6c:d6:b1:f5:bb:ec:fb:26: f4:b8:6f:08:49:75:be:9d:b7:a7:f9:62:ac:f5:e7:4a:6a:dc: 92:48:f5:d2:a1:8f:36:7e:aa:ae:22:9f:46:1e:c2:23:d9:a5: 95:aa:32:4a:f4:2d:de:36:36:19:18:50:18:42:8d:1e:2c:a7: 53:d8:54:ef:9b:c4:10:00:14:e7:67:73:91:b5:34:cb:03:27: c5:cd:0c:0f:52:bc:98:d4:7c:89:86:97:01:9e:9d:15:eb:2f: c3:a7:a5:a9:87:29:bb:c1:a4:2e:69:1b:3a:c8:d1:7e:98:35: a3:d4:db:4c:03:34:18:9d:22:89:af:06:3a:72:cc:c1:03:19: bb:6c:4e:2d:11:21:93:c6:01:20:6c:53:ff:62:72:da:b3:4a: 82:67:a5:bd:84:e2:9c:de:34:d7:10:93:6f:8b:20:5d:2c:93: 6e:10:c1:25:9d:cf:d9:fb:e5:16:ef:8c:5d:05:0b:f0:d1:27: 8a:33:83:cb:43:25:34:47:14:1b:4b:39:0f:8e:91:d7:49:51: 9e:46:df:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTkyODExMC8GA1UEBRMoQjVCMzVGOTI0RUI1QzMyRkJCNDE4NjdEM0ExNjZFNEE5 NkJCRUNBMjAeFw0yNTEyMDcwNTQwNTJaFw0yNTEyMTQwNTQwNTJaMBgxFjAUBgNV BAMTDTY5MzUxMzY0LTRkNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJXAd+D/kWfAj//N+XhLnciI8B9719mCkpfxcZETSciOBZqM8qx/5uU2jTW5ZG svri5AEfkEXeBbCFq9jMD2EWXIYg1PNJfr72m1NWXxZNczbaUnBSDChOCiQxT2Lx VPPCFjpQpjAlTxjMC0O81r/qdPzJtWu0MsjObfDm+vVrr32Qv/ZxKjWlnYo0N7y7 5QxoB+uI8ZSWDWeqZsNw0FBz2x1Rocv+XxzUVKpCfwMpI0boAF6bcjh8fNXrzbwa kM0qZSUQdL/S0IrYSoeZPNqZgZUQxO4A42VcwUvC0GKBd4Li4iwGZ3GKM357oGix ZR4Y9y160G3VrfcO+a8EhfhvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPQLHLqWC 9J41SNHTgmN623/bNgEwHwYDVR0jBBgwFoAUtbNfkk61wy+7QYZ9OhZuSpa77KIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5OTI4LzU3REZCRUJDOTg0 RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3ktN1FZWjlPaFp1U3BhNzdL SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGJOZmtrNjF3eS03UVlaOU9oWnVTcGE3N0tJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 OTI4LzU3REZCRUJDOTg0RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3kt N1FZWjlPaFp1U3BhNzdLSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlQCpkhUUIRWwxBPTttuWgF63oPECqUBz9bckfizR+ZzhVTlLzLAA5k rjj3+tVs1rH1u+z7JvS4bwhJdb6dt6f5Yqz150pq3JJI9dKhjzZ+qq4in0YewiPZ pZWqMkr0Ld42NhkYUBhCjR4sp1PYVO+bxBAAFOdnc5G1NMsDJ8XNDA9SvJjUfImG lwGenRXrL8OnpamHKbvBpC5pGzrI0X6YNaPU20wDNBidIomvBjpyzMEDGbtsTi0R IZPGASBsU/9ictqzSoJnpb2E4pzeNNcQk2+LIF0sk24QwSWdz9n75RbvjF0FC/DR J4ozg8tDJTRHFBtLOQ+OkddJUZ5G34E= -----END CERTIFICATE-----Generated at Mon Dec 8 06:11:00 2025 by rpki-client