This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: JWiXhYDHDXRJwYET4pUsY7TXb6hh0H5j6Oh70Tl6RYw= Subject key identifier: E3:79:51:EC:0A:5B:2A:95:28:26:FD:4B:DC:31:15:83:64:19:05:6F Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 8C Signing time: Tue 23 Dec 2025 05:30:21 +0000 Manifest this update: Tue 23 Dec 2025 05:30:21 +0000 Manifest next update: Tue 30 Dec 2025 05:30:21 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: KPdCP7hNTKG6ubIZeHo3Quj+DIRbzlAZMsnXYAU66Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: Dec 23 05:30:21 2025 GMT Not After : Dec 30 05:30:21 2025 GMT Subject: CN=694a28ed-3d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:d3:1b:5f:07:10:a3:c2:42:71:41:de:a3: 9a:16:60:4a:0d:44:ce:e8:99:de:bf:10:e1:d2:d8: 73:86:b8:d4:12:e3:ea:77:31:b5:c4:a8:c9:a5:50: 11:00:79:54:a4:b5:d8:8e:2a:d8:d0:9d:a1:dd:dc: 16:65:36:0b:6f:30:c1:db:42:e6:9c:2a:f0:af:8c: 1d:ec:d1:ef:ca:4f:da:6d:77:56:d1:bf:4c:39:a3: 78:fa:ce:5f:a6:e0:46:8d:04:9b:99:42:e5:dc:7d: e6:51:6e:45:84:4c:4a:bb:e1:0d:d0:f3:66:1e:07: e4:7c:70:82:e7:61:40:34:7f:81:7c:df:f1:2e:79: 79:29:ee:93:dd:91:df:58:7c:cc:18:e6:c9:85:ae: cd:fb:89:b0:7c:0a:a9:b8:3a:17:ad:dc:cf:c6:76: 59:4f:88:77:38:03:04:d1:3d:72:01:9d:a6:ef:a5: 54:04:54:09:e5:dd:f4:23:97:ba:37:31:1d:2f:3c: ff:c4:af:ed:7b:b2:00:16:36:f7:b8:ff:30:1f:a4: bd:ab:d7:f3:e3:d3:e4:b0:90:66:a7:7f:8a:14:aa: 17:c9:c0:a5:84:a2:80:8a:01:78:ef:90:fd:23:1b: 89:68:3c:b8:43:57:b1:87:90:75:d2:c5:77:42:ef: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:79:51:EC:0A:5B:2A:95:28:26:FD:4B:DC:31:15:83:64:19:05:6F X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f3:68:3e:46:e3:c5:3c:c2:bc:aa:87:01:46:0b:77:8c:1c: d3:dc:ab:ad:e6:d9:c3:20:07:9a:2a:42:be:b2:0c:14:c0:03: 69:32:c8:4b:ad:93:69:b4:ea:79:30:ea:e4:c3:99:8d:16:5f: 2f:f3:5c:85:87:86:d7:34:f4:40:86:00:ca:ee:54:ba:d4:f0: 09:ce:30:cd:f5:75:64:2c:d1:f7:14:01:01:c7:b9:c1:ae:fe: 22:7c:ba:d8:26:a3:df:55:ff:61:a9:0a:11:94:6f:68:82:d4: 06:70:1b:31:83:be:a6:34:eb:19:75:70:ca:10:cd:1d:0d:02: 0b:6f:7a:13:80:00:e7:72:40:02:45:e3:dd:41:19:de:be:0b: 0d:de:a2:39:94:97:c5:6e:6a:d0:0f:40:26:d7:2d:7e:7e:1b: 65:48:fc:9b:11:84:25:3f:77:c8:56:40:54:59:b0:b3:4d:97: 9a:e8:56:ea:a0:ed:f5:0d:0f:86:69:f6:f4:bb:88:5b:a7:ae: 1c:62:8c:51:fe:71:cc:5b:0c:67:15:3f:36:14:25:7b:22:b8: 34:11:4d:4f:0d:f1:99:3f:33:42:4b:be:81:ce:a1:5f:70:2a: 6f:bf:10:db:b0:b3:20:33:e3:29:14:58:17:8f:e0:a8:aa:16: 87:c8:1a:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBREExMTAvBgNVBAUTKDRDMjZGOTdDOTU3QkJGQkQ4Q0FBQUZEQUZBNzk1QTcz MUUxMTJBRDIwHhcNMjUxMjIzMDUzMDIxWhcNMjUxMjMwMDUzMDIxWjAYMRYwFAYD VQQDDA02OTRhMjhlZC0zZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FbTG18HEKPCQnFB3qOaFmBKDUTO6JnevxDh0thzhrjUEuPqdzG1xKjJpVAR AHlUpLXYjirY0J2h3dwWZTYLbzDB20LmnCrwr4wd7NHvyk/abXdW0b9MOaN4+s5f puBGjQSbmULl3H3mUW5FhExKu+EN0PNmHgfkfHCC52FANH+BfN/xLnl5Ke6T3ZHf WHzMGObJha7N+4mwfAqpuDoXrdzPxnZZT4h3OAME0T1yAZ2m76VUBFQJ5d30I5e6 NzEdLzz/xK/te7IAFjb3uP8wH6S9q9fz49PksJBmp3+KFKoXycClhKKAigF475D9 IxuJaDy4Q1exh5B10sV3Qu/APQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON5UewK WyqVKCb9S9wxFYNkGQVvMB8GA1UdIwQYMBaAFEwm+XyVe7+9jKqv2vp5WnMeESrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFEQS9GQjU1M0QzMjA5 NTMxMUYwODU0N0EyMTNDNEY5QUUwMi9UQ2I1ZkpWN3Y3Mk1xcV9hLW5sYWN4NFJL dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFEQS9GQjU1M0QzMjA5NTMxMUYwODU0N0EyMTNDNEY5QUUwMi9UQ2I1ZkpWN3Y3 Mk1xcV9hLW5sYWN4NFJLdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD82g+RuPFPMK8qocBRgt3jBzT3Kut5tnDIAeaKkK+sgwUwANpMshL rZNptOp5MOrkw5mNFl8v81yFh4bXNPRAhgDK7lS61PAJzjDN9XVkLNH3FAEBx7nB rv4ifLrYJqPfVf9hqQoRlG9ogtQGcBsxg76mNOsZdXDKEM0dDQILb3oTgADnckAC RePdQRnevgsN3qI5lJfFbmrQD0Am1y1+fhtlSPybEYQlP3fIVkBUWbCzTZea6Fbq oO31DQ+Gafb0u4hbp64cYoxR/nHMWwxnFT82FCV7Irg0EU1PDfGZPzNCS76BzqFf cCpvvxDbsLMgM+MpFFgXj+CoqhaHyBpz -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:22 2025 by rpki-client