This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: w2WKirzZEajtHB2WUEitNPANxD2UvaS18A2Dv5Vf6bE= Subject key identifier: AC:BC:88:6A:C4:43:F8:E6:39:EA:17:26:50:02:2A:82:4E:DB:1F:2C Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: A0DB Signing time: Thu 18 Dec 2025 14:29:13 +0000 Manifest this update: Thu 18 Dec 2025 14:29:12 +0000 Manifest next update: Thu 25 Dec 2025 14:29:12 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: 981qTuizIFvhJDDEJkvW8BGCyK7XfOB6dY79WX+gIYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Dec 18 14:29:12 2025 GMT Not After : Dec 25 14:29:12 2025 GMT Subject: CN=69440fb9-ad49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:74:23:94:f5:ca:55:4b:ab:7c:40:fb:7e: bc:05:3b:d5:5c:77:28:2d:0b:2d:07:5f:08:6e:9d: ba:b2:cf:6f:60:f2:e6:e8:1c:fb:94:df:ca:ac:23: c8:0a:e0:5c:5e:09:a9:79:d9:02:ae:59:6f:bd:54: 9c:35:91:65:b2:53:77:03:58:07:60:38:ef:f5:95: 81:3f:dd:8e:5d:d0:93:5f:3e:d1:70:d1:d2:fb:53: 65:ce:9d:7b:8a:86:d3:2e:1f:e2:a8:05:b5:91:27: 54:9c:9c:14:da:71:5e:49:9c:a2:bb:b0:9e:b9:90: 40:1e:57:f0:e8:fc:ab:0f:9a:79:de:73:12:3f:29: 1d:d7:08:7c:fe:51:16:64:0b:b7:e2:f3:8e:fa:8e: 13:bb:9b:5f:0e:fe:83:de:44:8e:80:e6:70:0a:4b: 9c:ea:8a:71:84:b9:66:77:18:65:61:a6:eb:fe:f9: d7:a9:2b:a7:ff:04:8c:73:de:35:59:93:4b:46:9f: b5:d1:3a:a1:eb:0f:eb:65:19:1a:db:91:a3:6e:82: 3d:f6:79:e4:9d:4e:0f:0b:a8:94:16:7a:82:88:24: b6:fe:68:a2:63:5e:7f:9a:1a:b3:fa:d5:5f:17:3c: 9b:92:69:c9:97:a3:80:ab:cf:aa:8b:93:a1:74:b5: a7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BC:88:6A:C4:43:F8:E6:39:EA:17:26:50:02:2A:82:4E:DB:1F:2C X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:54:61:d2:cb:84:ef:e3:67:df:e6:39:7b:c6:78:09:40:90: a4:25:e2:eb:37:9c:4c:f8:14:05:f2:29:9b:f3:39:cb:db:de: 38:a0:0a:d4:c4:1e:2d:a6:92:24:60:1b:20:e1:97:9d:ea:a2: 38:5f:0a:d8:51:bd:00:69:c3:49:3e:46:47:5b:98:96:0f:94: 03:df:fb:f6:5d:4b:35:01:13:19:15:50:97:b2:0c:63:ef:5e: 28:0a:2a:d0:e2:2f:4d:93:6a:da:eb:49:94:07:ba:d3:f9:84: 28:36:ed:da:da:68:38:0e:d6:76:06:db:e8:03:9a:17:1c:e2: aa:07:78:c7:a2:f0:7f:f2:b0:7f:7a:98:75:7c:a0:ff:2e:5a: 5b:cc:dd:09:bf:6c:6c:da:3b:7e:b0:d5:49:2c:70:fb:d6:7d: f5:df:be:07:3d:cb:4c:9c:b5:d8:97:ba:75:1d:cd:61:90:38: 75:c1:00:6c:06:18:8a:db:9d:5a:ad:bc:6e:30:c2:fa:4b:6b: c3:90:c1:80:cf:35:23:4c:cd:d8:57:f6:02:ff:e0:37:12:b7: f5:c1:27:96:5d:00:6b:a7:19:87:09:d3:0f:eb:3b:e8:c3:43: c0:26:b3:7c:b6:cd:8d:8e:4c:3e:11:44:17:0f:ab:5c:19:13: 07:fd:00:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUxMjE4MTQyOTEyWhcNMjUxMjI1MTQyOTEyWjAYMRYwFAYD VQQDDA02OTQ0MGZiOS1hZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8B0I5T1ylVLq3xA+368BTvVXHcoLQstB18Ibp26ss9vYPLm6Bz7lN/KrCPI CuBcXgmpedkCrllvvVScNZFlslN3A1gHYDjv9ZWBP92OXdCTXz7RcNHS+1Nlzp17 iobTLh/iqAW1kSdUnJwU2nFeSZyiu7CeuZBAHlfw6PyrD5p53nMSPykd1wh8/lEW ZAu34vOO+o4Tu5tfDv6D3kSOgOZwCkuc6opxhLlmdxhlYabr/vnXqSun/wSMc941 WZNLRp+10Tqh6w/rZRka25GjboI99nnknU4PC6iUFnqCiCS2/miiY15/mhqz+tVf FzybkmnJl6OAq8+qi5OhdLWnNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy8iGrE Q/jmOeoXJlACKoJO2x8sMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7VGHSy4Tv42ff5jl7xngJQJCkJeLrN5xM+BQF8imb8znL2944oArU xB4tppIkYBsg4Zed6qI4XwrYUb0AacNJPkZHW5iWD5QD3/v2XUs1ARMZFVCXsgxj 714oCirQ4i9Nk2ra60mUB7rT+YQoNu3a2mg4DtZ2BtvoA5oXHOKqB3jHovB/8rB/ eph1fKD/LlpbzN0Jv2xs2jt+sNVJLHD71n31374HPctMnLXYl7p1Hc1hkDh1wQBs BhiK251arbxuMML6S2vDkMGAzzUjTM3YV/YC/+A3Erf1wSeWXQBrpxmHCdMP6zvo w0PAJrN8ts2Njkw+EUQXD6tcGRMH/QBS -----END CERTIFICATE-----Generated at Fri Dec 19 22:57:52 2025 by rpki-client