This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: mzDHgTLR+WC8D4DCsusTnnSf4f9RbcRcdqCzddPoc0U= Subject key identifier: 71:A1:14:5B:15:A6:71:8D:48:20:85:C7:57:DC:11:4D:73:59:60:13 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: FD Signing time: Tue 23 Dec 2025 04:08:08 +0000 Manifest this update: Tue 23 Dec 2025 04:08:07 +0000 Manifest next update: Tue 30 Dec 2025 04:08:07 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: y6OYA6SQgP+9MFXYvsVG32FBF1LdMRzAbADH2KwSw88=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: Ji4FnaAA41M0xkMFETxyoill5QqKNA4PIi1n5I8VonU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Dec 23 04:08:07 2025 GMT Not After : Dec 30 04:08:07 2025 GMT Subject: CN=694a15a8-e9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:77:4d:df:60:40:27:d2:71:1e:26:df:24: 59:7a:4e:77:b3:f4:bf:5f:0b:ae:74:4e:6a:d3:ee: e8:16:6e:23:ed:45:94:b0:5a:34:0c:6d:f3:11:b0: ff:93:1f:b3:63:13:5c:35:66:f8:18:95:0e:d9:f2: 48:ec:3c:ea:67:79:17:96:74:ee:5c:2d:6e:19:a1: b1:1d:3f:19:fa:38:28:e0:1b:ff:60:15:cf:05:28: b2:35:d6:9f:5b:89:50:d5:f2:5e:c0:e1:6d:cb:e2: e7:75:33:66:40:96:9b:a7:e5:90:7b:dc:c0:47:20: 73:49:4f:40:ab:f7:73:8a:a5:14:2f:39:36:d0:2e: b6:ae:1a:8d:29:a6:2b:ab:50:1f:eb:5d:66:31:43: cf:a3:29:de:a4:6b:08:77:49:86:84:29:fd:5a:c3: ed:d3:b5:82:c1:b0:72:a4:a0:3a:95:6a:a1:99:94: ac:bb:7f:27:36:12:79:d1:56:1d:4a:2b:b1:31:1b: a2:75:57:9f:ac:b7:3b:83:4f:ac:48:be:8f:b5:dd: c9:31:4b:de:a4:ed:cb:f3:fe:41:36:31:e4:0b:bc: d1:4f:65:cb:d3:14:1e:8a:dd:0c:ac:c2:37:9a:0f: 71:ae:2c:b6:d4:d5:3f:54:0e:c4:61:7e:28:67:a3: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A1:14:5B:15:A6:71:8D:48:20:85:C7:57:DC:11:4D:73:59:60:13 X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:23:d2:4f:d5:81:71:14:c9:d1:8a:ff:87:21:67:50:d9:5d: 80:bb:6c:83:59:11:d6:36:d1:be:7e:fc:d6:24:64:8c:e4:04: a2:43:e1:82:b9:ce:e1:22:eb:01:04:3b:19:cb:4c:34:39:93: 3c:9f:44:25:24:2a:9a:0c:3f:39:8b:1b:4e:2e:79:ac:9a:c0: 6f:1f:06:3c:25:d5:d6:8b:be:a0:06:63:03:c0:7e:dd:75:16: 06:40:79:ee:ed:83:63:1e:24:88:30:7f:6c:8b:91:22:a9:c4: 27:01:11:45:25:3e:d2:6d:7c:ae:3e:d2:3f:31:7a:eb:a8:15: 78:19:11:65:7d:4a:be:28:32:1a:6d:9b:e1:0a:97:81:67:b3: 63:89:4a:a4:1f:5b:3e:e4:23:bc:e9:83:70:db:2b:b7:a8:84: c0:aa:e6:45:33:3f:62:b6:2a:b4:34:0f:ee:08:a2:f4:55:45: dd:2a:b6:43:0c:4b:75:7c:99:63:75:48:71:a1:74:5b:40:98: b3:8a:e5:90:55:1d:60:6f:52:c5:bd:47:5a:99:e4:49:b5:d7: c8:21:94:a0:87:39:8d:ef:b8:12:e2:94:60:3d:55:87:3e:2c: 7d:e4:64:86:2b:61:66:8c:e6:5a:a4:8d:e9:4b:df:40:9e:75: 9d:1c:84:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjUxMjIzMDQwODA3WhcNMjUxMjMwMDQwODA3WjAYMRYwFAYD VQQDDA02OTRhMTVhOC1lOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOt3Td9gQCfScR4m3yRZek53s/S/XwuudE5q0+7oFm4j7UWUsFo0DG3zEbD/ kx+zYxNcNWb4GJUO2fJI7DzqZ3kXlnTuXC1uGaGxHT8Z+jgo4Bv/YBXPBSiyNdaf W4lQ1fJewOFty+LndTNmQJabp+WQe9zARyBzSU9Aq/dziqUULzk20C62rhqNKaYr q1Af611mMUPPoynepGsId0mGhCn9WsPt07WCwbBypKA6lWqhmZSsu38nNhJ50VYd SiuxMRuidVefrLc7g0+sSL6Ptd3JMUvepO3L8/5BNjHkC7zRT2XL0xQeit0MrMI3 mg9xriy21NU/VA7EYX4oZ6OblQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGhFFsV pnGNSCCFx1fcEU1zWWATMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYI9JP1YFxFMnRiv+HIWdQ2V2Au2yDWRHWNtG+fvzWJGSM5ASiQ+GC uc7hIusBBDsZy0w0OZM8n0QlJCqaDD85ixtOLnmsmsBvHwY8JdXWi76gBmMDwH7d dRYGQHnu7YNjHiSIMH9si5EiqcQnARFFJT7SbXyuPtI/MXrrqBV4GRFlfUq+KDIa bZvhCpeBZ7NjiUqkH1s+5CO86YNw2yu3qITAquZFMz9itiq0NA/uCKL0VUXdKrZD DEt1fJljdUhxoXRbQJiziuWQVR1gb1LFvUdameRJtdfIIZSghzmN77gS4pRgPVWH Pix95GSGK2FmjOZapI3pS99AnnWdHISg -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:53 2025 by rpki-client