This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: /ZMCwfGibx1qUhq/sbBdNQZcYKwHIZa2UsyUESNULMk= Subject key identifier: 0F:4A:4F:7B:08:1D:E2:CE:F7:A4:2F:9C:27:A4:9E:AF:97:03:95:C9 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 05D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 05D3 Signing time: Mon 22 Dec 2025 22:12:15 +0000 Manifest this update: Mon 22 Dec 2025 22:12:15 +0000 Manifest next update: Mon 29 Dec 2025 22:12:15 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: v1C4Iu5MwQ6lS5Mxu+MryuGUJm0IgiM2w8ju5lYBteM=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Dec 22 22:12:15 2025 GMT Not After : Dec 29 22:12:15 2025 GMT Subject: CN=6949c23f-7eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:0e:c9:a6:c7:65:91:78:db:5c:2e:8e:22: 7b:16:48:79:19:f1:5b:9c:98:35:a7:69:bb:f2:c8: 6d:02:09:25:c2:df:22:c2:b6:34:2d:64:a9:45:9d: be:3e:95:e7:53:b7:06:35:e7:1d:a5:e8:c8:20:68: 3d:7e:d0:15:5c:7e:52:68:8b:79:b6:78:c5:d6:34: e1:de:9f:a4:eb:28:6a:b1:ed:c2:06:9c:78:a4:f8: bc:75:3b:a2:e6:d4:76:ad:5f:50:ac:6f:58:16:0d: c9:23:dc:56:7d:90:ae:30:dc:c6:31:2d:10:10:3f: 41:03:06:b6:a2:8d:2e:b4:08:d4:71:1b:ac:80:14: 04:f1:00:a8:bf:ad:4b:af:61:7c:e7:75:94:b5:af: 35:13:d8:03:c5:21:a3:52:dd:3c:9c:d5:23:af:fc: d9:54:67:2d:2f:c1:aa:e0:0b:9c:fa:9f:12:cc:25: 9a:48:6f:b8:91:ca:4b:3b:68:85:b7:49:9e:6c:c0: c4:24:56:5f:c6:1b:96:c5:19:a4:d1:3e:07:82:76: 74:24:9f:d7:8e:46:73:d9:64:ff:be:5b:e5:ac:2a: 7c:9b:9d:65:5d:1b:a7:e1:e2:45:b4:de:b2:6c:b1: d0:d3:18:51:e1:0f:e5:24:80:23:1f:3e:88:3b:ed: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4A:4F:7B:08:1D:E2:CE:F7:A4:2F:9C:27:A4:9E:AF:97:03:95:C9 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:94:22:08:9a:9d:86:82:09:dc:9e:44:8a:59:09:17:cd:9b: 28:f3:ca:18:3d:10:f7:d1:e4:73:52:9b:75:bc:e0:91:59:a2: d2:4d:a2:a4:81:80:97:06:b3:74:8d:f3:de:34:a5:be:9e:31: 76:f7:47:8e:dc:fe:ed:04:9b:6f:e5:8a:15:b8:5c:75:eb:b0: 02:9c:b4:6d:1f:c4:1c:11:50:0d:94:96:e4:e0:72:15:17:e4: 9b:7f:b8:73:45:72:6f:79:7b:06:97:10:5e:32:21:5e:c8:96: 29:36:d4:d1:62:06:e5:ae:62:2d:a0:22:82:7f:39:36:ca:59: 3c:af:24:23:71:be:d4:b1:ff:4b:c9:b9:f4:f5:72:03:43:90: 7d:62:bb:e1:90:0c:6a:b5:2b:a4:43:cd:2a:af:88:5f:96:76: 01:fa:a6:b4:4e:57:2b:8a:bd:00:33:8b:fd:7a:91:33:a0:19: fd:df:3a:7e:4d:f7:a4:28:66:47:d7:8c:71:bf:92:12:28:7b: 56:f7:e5:99:e3:49:f8:ef:a9:78:4a:eb:07:bd:d9:77:b7:a4: af:f5:65:23:59:b6:e5:8c:b2:0e:79:6e:8a:ee:b4:18:89:3a: 4e:68:00:06:5a:64:2c:ee:94:be:2a:bb:d3:cc:48:7c:50:e0: 60:e2:61:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUxMjIyMjIxMjE1WhcNMjUxMjI5MjIxMjE1WjAYMRYwFAYD VQQDDA02OTQ5YzIzZi03ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK0OyabHZZF421wujiJ7Fkh5GfFbnJg1p2m78shtAgklwt8iwrY0LWSpRZ2+ PpXnU7cGNecdpejIIGg9ftAVXH5SaIt5tnjF1jTh3p+k6yhqse3CBpx4pPi8dTui 5tR2rV9QrG9YFg3JI9xWfZCuMNzGMS0QED9BAwa2oo0utAjUcRusgBQE8QCov61L r2F853WUta81E9gDxSGjUt08nNUjr/zZVGctL8Gq4Auc+p8SzCWaSG+4kcpLO2iF t0mebMDEJFZfxhuWxRmk0T4HgnZ0JJ/XjkZz2WT/vlvlrCp8m51lXRun4eJFtN6y bLHQ0xhR4Q/lJIAjHz6IO+3zbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9KT3sI HeLO96QvnCeknq+XA5XJMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzlCIImp2GggncnkSKWQkXzZso88oYPRD30eRzUpt1vOCRWaLSTaKk gYCXBrN0jfPeNKW+njF290eO3P7tBJtv5YoVuFx167ACnLRtH8QcEVANlJbk4HIV F+Sbf7hzRXJveXsGlxBeMiFeyJYpNtTRYgblrmItoCKCfzk2ylk8ryQjcb7Usf9L ybn09XIDQ5B9YrvhkAxqtSukQ80qr4hflnYB+qa0Tlcrir0AM4v9epEzoBn93zp+ TfekKGZH14xxv5ISKHtW9+WZ40n476l4SusHvdl3t6Sv9WUjWbbljLIOeW6K7rQY iTpOaAAGWmQs7pS+KrvTzEh8UOBg4mEc -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:43 2025 by rpki-client