This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: D4oLT4keU9nIZmwaN/0+34ZnttiHvIoovILVJQTBU6s= Subject key identifier: 7A:14:E9:ED:46:AA:18:8E:1D:F6:A4:1C:38:37:E3:5C:8E:2D:21:DA Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 03FA Signing time: Mon 22 Dec 2025 23:32:02 +0000 Manifest this update: Mon 22 Dec 2025 23:32:01 +0000 Manifest next update: Mon 29 Dec 2025 23:32:01 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: at5PV3ODsuWFwszRgyaCXcbcHbL5cu7BxFnJ0blymok=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: mu3ZBgdmxh+uDe3om6n36QNfzvi/jqEuZheAo19X4vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Dec 22 23:32:01 2025 GMT Not After : Dec 29 23:32:01 2025 GMT Subject: CN=6949d4f1-6530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:18:ea:85:95:de:e1:f5:ea:26:a6:83:9f: 21:fc:f9:e6:37:f5:54:62:3f:8f:4a:f3:ef:11:81: 58:70:86:37:9d:ee:23:1b:b9:11:71:58:f0:bb:7b: 1b:79:06:f3:cf:78:bc:c6:5d:91:ce:74:12:6f:28: 9f:87:5c:c8:f5:0c:b8:34:01:6d:11:25:48:8f:f8: 29:f1:5d:9d:47:c3:94:89:50:52:f4:6c:6f:7e:d7: 9b:87:bc:ac:e5:5a:5b:c4:dd:e3:15:8e:33:d7:65: 80:1c:15:13:06:25:59:f0:5e:10:b9:25:16:77:a3: 7a:e7:a7:da:13:46:a4:d1:51:30:20:ba:c9:52:b0: 66:d2:40:8d:d9:2f:eb:58:fc:7e:56:11:a2:75:ec: 00:d1:24:97:a7:a0:ce:40:08:8d:1a:3c:e8:6c:04: 6d:ca:83:95:48:21:06:a4:15:2d:dc:d6:16:8f:1b: ea:d7:54:4c:2d:33:8e:56:c7:6f:db:cf:95:0d:ce: f6:24:1d:2f:7f:d4:da:f7:73:a7:d9:97:9c:d2:de: 8b:b4:c2:d9:e3:8e:1d:5f:63:c4:f4:b0:90:d2:65: 45:92:da:08:cc:e3:73:67:84:ca:d3:1d:80:86:84: f2:94:17:90:25:08:39:fc:c0:6d:d0:30:73:6c:ff: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:E9:ED:46:AA:18:8E:1D:F6:A4:1C:38:37:E3:5C:8E:2D:21:DA X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:49:63:fc:51:3f:c4:6e:f3:4e:d0:eb:e1:ac:f1:5a:71:1e: 7b:49:05:69:b7:ec:5a:d0:1d:b1:23:a2:27:14:a5:18:a3:0f: 06:3d:50:25:a2:3f:d7:5c:36:30:f9:5c:84:9d:5c:33:b8:20: 1f:52:13:49:8e:9f:cd:1d:8f:67:a2:7f:f8:f6:e9:9b:20:56: e0:ef:91:87:3e:21:33:8a:b1:d3:58:9a:48:fb:10:9c:fb:d6: b8:19:ca:7b:c1:a7:b1:88:1a:75:ad:68:c7:e1:7f:46:ef:73: d5:33:73:30:60:21:09:e9:b2:60:c2:39:e7:52:4f:03:f3:f5: 16:e0:2f:36:17:92:a1:fd:03:bf:ea:a2:fd:79:08:40:33:bb: da:85:c8:15:3c:30:9d:55:f2:99:1e:ca:84:1c:31:45:f6:ff: 14:34:f9:b4:8f:5d:1b:61:6d:b0:f5:ff:f7:1c:7b:21:a1:3b: c6:42:a0:0d:5e:62:83:75:5c:1b:1b:7d:21:fc:b0:40:a8:27: 49:15:f6:1b:3f:40:9e:ab:4a:dd:ae:88:7b:f8:47:13:9c:f8: b2:c0:b7:c4:00:b1:ef:9f:44:44:b8:79:93:98:5c:2a:31:12: e5:23:b1:81:ab:4c:39:a9:45:05:be:5e:9c:bd:1b:56:b0:04: 34:1e:33:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjUxMjIyMjMzMjAxWhcNMjUxMjI5MjMzMjAxWjAYMRYwFAYD VQQDDA02OTQ5ZDRmMS02NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqr8Y6oWV3uH16iamg58h/PnmN/VUYj+PSvPvEYFYcIY3ne4jG7kRcVjwu3sb eQbzz3i8xl2RznQSbyifh1zI9Qy4NAFtESVIj/gp8V2dR8OUiVBS9Gxvftebh7ys 5VpbxN3jFY4z12WAHBUTBiVZ8F4QuSUWd6N656faE0ak0VEwILrJUrBm0kCN2S/r WPx+VhGidewA0SSXp6DOQAiNGjzobARtyoOVSCEGpBUt3NYWjxvq11RMLTOOVsdv 28+VDc72JB0vf9Ta93On2Zec0t6LtMLZ444dX2PE9LCQ0mVFktoIzONzZ4TK0x2A hoTylBeQJQg5/MBt0DBzbP8aTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoU6e1G qhiOHfakHDg341yOLSHaMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUSWP8UT/EbvNO0OvhrPFacR57SQVpt+xa0B2xI6InFKUYow8GPVAl oj/XXDYw+VyEnVwzuCAfUhNJjp/NHY9non/49umbIFbg75GHPiEzirHTWJpI+xCc +9a4Gcp7waexiBp1rWjH4X9G73PVM3MwYCEJ6bJgwjnnUk8D8/UW4C82F5Kh/QO/ 6qL9eQhAM7vahcgVPDCdVfKZHsqEHDFF9v8UNPm0j10bYW2w9f/3HHshoTvGQqAN XmKDdVwbG30h/LBAqCdJFfYbP0Ceq0rdroh7+EcTnPiywLfEALHvn0REuHmTmFwq MRLlI7GBq0w5qUUFvl6cvRtWsAQ0HjMm -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:38 2025 by rpki-client