This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: lDUSUlXyglQxBnG/rXpOxVtplQ0oWfumYY0C6JZuisk= Subject key identifier: E9:DA:8C:D8:AF:4F:0C:A4:5D:0F:1E:29:4F:13:B8:AD:79:AE:62:3C Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 3516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3504 Signing time: Sun 28 Dec 2025 14:50:16 +0000 Manifest this update: Sun 28 Dec 2025 14:50:16 +0000 Manifest next update: Sun 04 Jan 2026 14:50:16 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: +vZQxVmSUSvaydhJsdQJX0m8GmaZ6L/uq+WePXo+5zo=) 2: 2DB78476C69411F09B705765C4F9AE02.roa (hash: w34KSwkw6CEkBPQcFxY9qpFzqznOsG3ipoXTw6sgBMc=) 3: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: jnjl28FUTY22XdJzPEZKhv2fC9E15M9c14yjgyQaqxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13590 (0x3516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Dec 28 14:50:16 2025 GMT Not After : Jan 4 14:50:16 2026 GMT Subject: CN=695143a8-89b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:6e:b6:5f:93:03:9b:38:1c:00:f0:bd:68: bb:d8:7f:aa:6e:ca:89:bf:49:07:4c:76:a8:1e:e4: 12:e2:7c:54:12:4a:43:41:5d:2d:76:dd:9d:36:64: 95:50:73:ca:87:cd:80:aa:09:09:3d:55:ab:2e:52: 61:0e:ca:af:12:c8:be:dd:92:74:75:cf:11:69:1d: 7f:fb:75:50:a4:49:7d:16:fc:69:d2:b1:80:b7:e1: e7:49:17:00:20:5a:bc:be:51:12:c9:84:18:7d:99: 5d:f1:d3:f0:6f:91:3a:4d:a4:e1:6c:6c:a3:ec:ba: a6:13:81:45:c2:4e:22:8c:3b:97:1f:16:f3:0d:c2: 47:16:f6:86:2f:a2:62:79:84:84:18:ab:41:a7:cb: 32:65:a6:09:1d:2c:1d:fa:a3:54:65:29:80:16:af: 22:9f:1f:57:73:94:94:b6:f7:5e:75:d9:36:18:e5: e7:79:c9:72:ed:56:c0:ee:ae:ad:00:e6:c4:f0:ed: 34:ba:28:a5:36:74:3c:7e:fc:2b:0b:a5:0f:9a:5e: 7a:b5:30:bb:d1:05:33:1c:a7:70:ac:ef:1d:75:5b: 4c:05:de:53:5e:5a:23:59:f2:40:48:c1:7b:6b:37: d3:cf:ef:c0:4e:1e:cb:eb:b9:57:23:28:aa:76:ae: 43:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DA:8C:D8:AF:4F:0C:A4:5D:0F:1E:29:4F:13:B8:AD:79:AE:62:3C X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2a:79:3d:b3:fd:b2:c1:07:e5:b7:7b:10:b7:46:a2:02:3e: f9:4b:82:20:a9:d4:c3:cf:8a:33:c1:93:ed:50:b6:53:9b:06: 13:48:fa:2b:15:b1:d3:a3:74:70:2b:c3:eb:5e:d7:b9:d5:43: 03:64:cb:c5:4a:99:d3:1a:06:11:62:b4:a7:74:a0:35:25:67: d4:c1:66:b9:5e:93:71:8a:8b:61:37:f5:98:4a:5d:f9:c9:6b: f4:39:9c:15:f9:44:7b:ef:e5:3d:a4:a1:30:89:97:f7:db:72: 2b:d1:56:f8:7c:99:4d:5b:76:68:eb:43:60:16:06:a0:bd:7b: a3:2b:ce:2f:60:87:f3:34:68:68:06:e1:95:ec:00:b9:7c:9a: ad:05:ca:e2:a2:35:da:e4:d8:8a:17:07:fc:93:77:d7:9a:5b: b9:66:cf:f1:80:56:4f:d6:8f:3a:44:18:e8:e6:8f:11:a0:90: 66:16:ba:72:e6:3a:95:30:ba:a1:d5:b6:04:48:9d:da:d7:98: 0d:fa:d4:ed:d8:3f:26:b3:61:81:68:9b:87:cd:c8:a1:3d:a6: a3:d4:1d:6e:a6:ba:33:1d:a1:81:62:ab:68:73:94:3d:df:24: 7f:2a:61:b6:78:3b:da:ed:6f:af:c5:01:a7:95:1c:5c:34:00: a9:1a:b4:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUxMjI4MTQ1MDE2WhcNMjYwMTA0MTQ1MDE2WjAYMRYwFAYD VQQDDA02OTUxNDNhOC04OWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt95utl+TA5s4HADwvWi72H+qbsqJv0kHTHaoHuQS4nxUEkpDQV0tdt2dNmSV UHPKh82AqgkJPVWrLlJhDsqvEsi+3ZJ0dc8RaR1/+3VQpEl9Fvxp0rGAt+HnSRcA IFq8vlESyYQYfZld8dPwb5E6TaThbGyj7LqmE4FFwk4ijDuXHxbzDcJHFvaGL6Ji eYSEGKtBp8syZaYJHSwd+qNUZSmAFq8inx9Xc5SUtvdeddk2GOXnecly7VbA7q6t AObE8O00uiilNnQ8fvwrC6UPml56tTC70QUzHKdwrO8ddVtMBd5TXlojWfJASMF7 azfTz+/ATh7L67lXIyiqdq5DVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnajNiv TwykXQ8eKU8TuK15rmI8MB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKKnk9s/2ywQflt3sQt0aiAj75S4IgqdTDz4ozwZPtULZTmwYTSPor FbHTo3RwK8PrXte51UMDZMvFSpnTGgYRYrSndKA1JWfUwWa5XpNxiothN/WYSl35 yWv0OZwV+UR77+U9pKEwiZf323Ir0Vb4fJlNW3Zo60NgFgagvXujK84vYIfzNGho BuGV7AC5fJqtBcriojXa5NiKFwf8k3fXmlu5Zs/xgFZP1o86RBjo5o8RoJBmFrpy 5jqVMLqh1bYESJ3a15gN+tTt2D8ms2GBaJuHzcihPaaj1B1uprozHaGBYqtoc5Q9 3yR/KmG2eDva7W+vxQGnlRxcNACpGrQp -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:38 2025 by rpki-client