This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json) Hash identifier: Bw3FVf/EE9MW8Qk3WHsvxAyeNvFLxH3PJeaBF7lz6+w= Subject key identifier: 9B:EA:B6:9F:1A:86:DA:A4:69:E0:8F:1B:99:66:C0:91:4B:03:A8:F5 Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft Manifest number: 0120 Signing time: Mon 15 Dec 2025 04:05:18 +0000 Manifest this update: Mon 15 Dec 2025 04:05:17 +0000 Manifest next update: Mon 22 Dec 2025 04:05:17 +0000 Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: 1WXBl+X98eSdDqT/PxDHLYAmD00r3ZtnT4g/sv/DHVU=) 2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 04:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Validity Not Before: Dec 15 04:05:17 2025 GMT Not After : Dec 22 04:05:17 2025 GMT Subject: CN=693f88fe-8980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:a3:ce:9a:d8:3c:b0:c5:b8:c6:e8:d2:61: 6e:ef:b2:f6:1f:48:ad:bb:d6:77:f7:39:0a:ae:19: 3e:f3:9f:d6:74:49:ba:33:a4:f7:ef:14:b7:9f:ad: e5:71:fb:6c:ef:0b:74:2f:87:28:c0:4c:3c:a3:c4: ea:18:8a:25:a0:9a:69:6b:9e:42:aa:8b:04:76:0f: 00:2b:6d:0a:9b:bb:4f:c3:59:bc:79:fc:2f:ec:73: d5:10:15:ab:fa:69:5d:1e:32:1a:6a:89:c1:96:76: 08:09:ea:89:a7:c7:b9:4c:6a:a8:fe:a8:86:ef:21: 2e:4c:c2:bd:bf:b4:23:09:58:22:93:33:2e:92:9a: be:5f:d5:6a:4f:1a:72:e5:21:1d:ed:8c:c7:d5:f7: 42:38:50:92:9a:6e:0d:8c:b8:35:55:8f:a3:80:5f: 1c:33:de:28:c7:39:ee:3d:75:15:16:17:05:00:8b: 58:8c:d2:be:57:91:1d:1f:b3:3a:e7:9c:de:ea:c9: e8:f0:16:f4:96:6d:bd:f8:24:20:52:80:36:0e:69: 5b:2e:0b:16:42:3a:07:ea:2d:e9:8d:89:3d:1b:97: df:d4:38:ed:5d:71:61:af:aa:7f:4d:ac:52:58:0f: c7:03:89:82:0f:cd:89:70:c1:40:24:b3:c5:4e:20: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EA:B6:9F:1A:86:DA:A4:69:E0:8F:1B:99:66:C0:91:4B:03:A8:F5 X509v3 Authority Key Identifier: keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:64:e3:56:97:a4:11:83:a7:83:3f:2b:b8:4c:9d:cb:b8:7b: d5:d0:2e:52:0f:d3:40:04:8e:c1:49:01:f7:1a:d6:0e:c3:e8: cf:62:79:72:30:00:86:37:07:5e:ed:c6:7e:9d:40:30:23:8a: 38:51:46:0d:b7:a3:16:82:09:d3:8e:68:f7:07:40:54:0e:24: 3d:a2:d5:ff:88:3b:9c:e6:1b:eb:e9:31:55:e4:98:ca:5f:f3: 2f:f4:4f:cf:9c:e0:07:1e:1c:5e:33:a6:5e:35:ab:f7:00:3f: c1:bb:ac:8c:c9:a3:78:ad:a2:a3:72:7e:6c:10:e3:14:b6:59: 21:a8:aa:18:4a:9b:7b:6c:88:e6:c4:bc:8d:8e:64:a0:c0:31: d5:b3:72:f8:49:86:b2:13:d0:67:1d:3a:ec:06:06:38:4a:f3: 0b:5e:61:ee:50:a2:9a:ee:b5:b9:b7:51:49:de:91:e9:54:53: c6:be:2b:a9:34:b2:27:61:d8:49:f2:47:3f:e0:f3:6c:09:c6: 8f:24:bd:fc:25:4e:de:e9:ff:62:9b:5e:23:33:b6:f5:ea:f9: 18:16:2f:04:0e:75:72:63:4f:9b:58:20:97:33:6a:0b:32:b4: 95:59:cc:c3:4a:cc:2c:bf:39:64:01:a0:94:1a:da:4e:e0:af: b2:06:cd:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF NEJENzM4MkUwHhcNMjUxMjE1MDQwNTE3WhcNMjUxMjIyMDQwNTE3WjAYMRYwFAYD VQQDDA02OTNmODhmZS04OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tKjzprYPLDFuMbo0mFu77L2H0itu9Z39zkKrhk+85/WdEm6M6T37xS3n63l cfts7wt0L4cowEw8o8TqGIoloJppa55CqosEdg8AK20Km7tPw1m8efwv7HPVEBWr +mldHjIaaonBlnYICeqJp8e5TGqo/qiG7yEuTMK9v7QjCVgikzMukpq+X9VqTxpy 5SEd7YzH1fdCOFCSmm4NjLg1VY+jgF8cM94oxznuPXUVFhcFAItYjNK+V5EdH7M6 55ze6sno8Bb0lm29+CQgUoA2DmlbLgsWQjoH6i3pjYk9G5ff1DjtXXFhr6p/TaxS WA/HA4mCD82JcMFAJLPFTiCpgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvqtp8a htqkaeCPG5lmwJFLA6j1MB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS83QkJEMTFBQzFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRt MkVLc2pPQ3VwNFRrdlhPQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUZONWl6QRg6eDPyu4TJ3LuHvV0C5SD9NABI7BSQH3GtYOw+jPYnly MACGNwde7cZ+nUAwI4o4UUYNt6MWggnTjmj3B0BUDiQ9otX/iDuc5hvr6TFV5JjK X/Mv9E/PnOAHHhxeM6ZeNav3AD/Bu6yMyaN4raKjcn5sEOMUtlkhqKoYSpt7bIjm xLyNjmSgwDHVs3L4SYayE9BnHTrsBgY4SvMLXmHuUKKa7rW5t1FJ3pHpVFPGviup NLInYdhJ8kc/4PNsCcaPJL38JU7e6f9im14jM7b16vkYFi8EDnVyY0+bWCCXM2oL MrSVWczDSswsvzlkAaCUGtpO4K+yBs1+ -----END CERTIFICATE-----Generated at Wed Dec 17 01:24:38 2025 by rpki-client