This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: hp4+SkrZlAkF2ikNkrMbv6ZdTwhsRcwnJV3ZM8tClho= Subject key identifier: BB:A9:79:A2:9C:6B:04:73:31:39:46:C8:4A:B0:66:8B:A2:23:E1:43 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0CBE Signing time: Mon 22 Dec 2025 17:50:43 +0000 Manifest this update: Mon 22 Dec 2025 17:50:43 +0000 Manifest next update: Mon 29 Dec 2025 17:50:43 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: keRT2iLefHzDGmfqDwSLYPRLfwMRTiRYKOfIk5+Ji5M=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Dec 22 17:50:43 2025 GMT Not After : Dec 29 17:50:43 2025 GMT Subject: CN=694984f3-f749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:9e:cb:0b:96:a1:d7:b9:25:22:13:39:a6: f2:4f:d2:3c:17:2b:68:84:a8:38:ea:6a:fe:90:9e: 6d:76:20:e9:55:d3:67:ac:f9:b0:23:fb:cd:fa:f1: 10:5c:59:1f:06:a8:25:70:97:e4:9f:23:62:1e:8c: f6:87:b8:9a:9f:c1:83:94:90:29:8e:fd:22:d3:79: db:ce:b4:99:48:f8:62:c1:38:cd:5e:8d:b3:ac:44: 5c:53:9a:f6:a9:e4:2f:75:2b:bd:09:3d:ed:0a:57: ae:2b:d5:f1:7a:6f:83:52:31:62:0b:76:ba:62:cc: b5:ec:04:f3:6a:5c:88:f4:d3:05:6c:cc:94:be:d2: 70:1c:31:c4:38:52:e5:ca:51:cf:e9:be:64:b3:88: a1:f0:60:50:e0:57:55:07:99:a2:58:e6:6c:56:c2: 6b:b4:ad:32:60:0c:d6:aa:cc:b6:b3:c2:83:1e:41: d5:a8:0d:29:1a:0f:d5:25:41:82:7d:fc:67:cb:65: bc:8c:1e:01:60:93:43:a6:e2:2b:a6:81:20:e9:42: 88:ac:83:cf:e4:f3:0a:26:2a:0c:d8:f2:c4:10:db: de:ad:3c:bb:e4:9b:e4:5d:d4:8d:17:4d:56:52:96: ab:c5:a2:c7:f5:c0:c4:cd:01:fb:d8:cb:54:09:66: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A9:79:A2:9C:6B:04:73:31:39:46:C8:4A:B0:66:8B:A2:23:E1:43 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:15:07:84:66:a5:22:bd:f6:ca:24:ce:54:3e:f6:18:10:7c: b7:ad:d8:19:bf:95:e4:4e:06:56:90:1a:c6:47:46:65:e3:89: 31:80:49:20:37:9d:ff:4d:0b:a7:57:ae:94:85:fa:76:f0:28: 0d:16:3d:d3:bc:17:1b:a0:bb:56:80:9f:ff:2f:da:ce:e6:5b: a2:24:24:fa:cc:97:47:72:13:dc:6a:81:21:cc:25:02:df:eb: af:6a:b4:61:3a:78:b2:49:7e:c7:3d:9a:18:37:7f:a7:48:c1: 15:70:8d:29:91:f2:4b:11:21:0d:c3:85:03:20:62:7a:54:05: 2f:96:29:c0:ab:c3:8f:f4:09:4e:a0:5c:96:9a:ee:db:97:22: 1e:28:8c:64:99:20:22:24:05:57:09:d5:72:de:61:63:ef:6c: e7:5a:47:04:ba:4c:dd:10:a6:e7:a9:be:1d:fe:58:4a:8d:b8: 12:7c:d3:5f:9a:6b:fd:5d:15:bf:da:d0:dc:7d:20:6d:b9:ce: bd:b4:98:b9:7c:0e:79:9f:b9:61:97:2b:38:94:ba:6b:13:f9: a9:56:24:92:af:c4:1e:2e:a8:86:37:76:e7:44:e0:3a:f8:a8: 41:3d:01:d4:87:68:ce:76:4d:57:a8:ac:47:aa:e1:77:c8:45: 62:38:c2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUxMjIyMTc1MDQzWhcNMjUxMjI5MTc1MDQzWjAYMRYwFAYD VQQDDA02OTQ5ODRmMy1mNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXOeywuWode5JSITOabyT9I8FytohKg46mr+kJ5tdiDpVdNnrPmwI/vN+vEQ XFkfBqglcJfknyNiHoz2h7ian8GDlJApjv0i03nbzrSZSPhiwTjNXo2zrERcU5r2 qeQvdSu9CT3tCleuK9Xxem+DUjFiC3a6Ysy17ATzalyI9NMFbMyUvtJwHDHEOFLl ylHP6b5ks4ih8GBQ4FdVB5miWOZsVsJrtK0yYAzWqsy2s8KDHkHVqA0pGg/VJUGC ffxny2W8jB4BYJNDpuIrpoEg6UKIrIPP5PMKJioM2PLEENverTy75JvkXdSNF01W UparxaLH9cDEzQH72MtUCWYYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLupeaKc awRzMTlGyEqwZouiI+FDMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGFQeEZqUivfbKJM5UPvYYEHy3rdgZv5XkTgZWkBrGR0Zl44kxgEkg N53/TQunV66Uhfp28CgNFj3TvBcboLtWgJ//L9rO5luiJCT6zJdHchPcaoEhzCUC 3+uvarRhOniySX7HPZoYN3+nSMEVcI0pkfJLESENw4UDIGJ6VAUvlinAq8OP9AlO oFyWmu7blyIeKIxkmSAiJAVXCdVy3mFj72znWkcEukzdEKbnqb4d/lhKjbgSfNNf mmv9XRW/2tDcfSBtuc69tJi5fA55n7lhlys4lLprE/mpViSSr8QeLqiGN3bnROA6 +KhBPQHUh2jOdk1XqKxHquF3yEViOMKG -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:36 2025 by rpki-client