This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: JtNO4R+e4txJXsq5Bzg8D0G5TTfv968RL8dMcM2zaTk= Subject key identifier: A7:BA:00:53:A7:20:45:3E:DD:BF:52:51:77:28:2E:00:95:B2:16:AC Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 01EB Signing time: Thu 18 Dec 2025 18:28:54 +0000 Manifest this update: Thu 18 Dec 2025 18:28:54 +0000 Manifest next update: Thu 25 Dec 2025 18:28:54 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: px6mRau4cFR4zGsPolbZWtXalH5NSvadR/dj1U9d4cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Dec 18 18:28:54 2025 GMT Not After : Dec 25 18:28:54 2025 GMT Subject: CN=694447e6-763f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7c:11:45:49:45:0d:41:71:45:8e:b6:87:f1: 87:9d:27:58:2a:f9:e8:73:bc:da:e3:4c:c6:27:c0: 8e:5d:76:d3:cd:3f:86:a5:5d:a7:fd:3e:8e:d8:39: 09:2e:0b:39:01:12:20:1c:a7:53:6e:92:19:a3:14: 91:a2:26:2c:b3:72:6d:db:9b:53:72:de:0c:18:cc: d9:c1:ff:bc:73:01:ac:c6:72:61:f6:a7:b7:3b:fb: de:1b:23:7b:52:ce:d9:6e:eb:a9:19:6e:5a:3d:88: bc:5a:19:40:a8:3a:df:d4:55:57:e9:ac:76:68:d9: 11:0f:19:08:63:4f:c9:f6:af:37:8b:11:0a:a6:5f: 8b:66:c5:13:72:6c:78:66:ac:b5:7f:69:ab:15:df: f9:d9:e5:1e:72:2b:d4:70:1b:4e:a9:78:17:54:a7: 59:f6:4e:40:f5:b9:77:0d:0c:80:d9:2a:d1:04:ab: eb:a6:b9:89:3e:58:5c:84:e2:65:da:f4:d2:ac:64: 21:e2:c5:02:72:35:6c:7e:1d:a3:b3:f6:56:8c:23: 88:8a:b1:7e:99:5a:f0:03:51:27:d7:e4:5a:cd:31: c0:c0:6e:64:92:5d:1d:15:5b:a9:73:81:38:40:1a: b9:60:f5:d6:78:4d:4c:3c:e0:13:49:c2:40:55:7b: af:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BA:00:53:A7:20:45:3E:DD:BF:52:51:77:28:2E:00:95:B2:16:AC X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:af:b1:33:50:85:5c:d8:0e:ff:f7:a1:bb:ae:77:46:57:82: af:d0:f2:1b:29:cd:cf:ec:09:5b:75:ae:0c:fb:35:af:61:6a: ec:c0:87:c0:88:65:4a:2b:91:05:98:33:4a:95:cd:75:14:04: 42:be:7d:98:4d:86:89:ba:c5:98:76:e6:2d:13:57:4c:ec:bf: 15:0e:49:8b:dc:b5:74:28:9e:8a:e8:56:5b:69:35:39:2d:db: 40:b5:f4:df:87:3f:bb:e4:a7:43:c4:b3:de:08:fa:dc:8a:f8: 85:6d:88:71:b5:ec:23:91:fc:c1:01:41:6d:8e:f2:34:d0:fd: b7:55:ad:7c:02:4a:03:e3:66:b1:5c:9a:bd:8a:c2:51:ca:70: c3:4b:a9:68:76:de:1a:8b:61:ba:59:9f:70:91:3a:6b:c5:77: d8:5e:d2:02:51:21:6d:dd:14:a8:2f:8d:40:6a:e7:43:31:1d: 36:d3:58:7d:d7:aa:67:64:2f:70:91:04:be:43:6f:b0:e9:0f: 87:21:4d:d4:7c:52:f0:af:4a:5d:38:40:cf:b1:a0:94:b3:54: 76:31:f9:ee:c9:9d:65:fe:5e:ab:ab:8a:cf:7a:61:88:8b:a2: da:50:ad:12:0d:0e:34:30:0d:15:38:11:e9:bf:7e:90:a0:c2: cb:a1:a6:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjUxMjE4MTgyODU0WhcNMjUxMjI1MTgyODU0WjAYMRYwFAYD VQQDDA02OTQ0NDdlNi03NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63wRRUlFDUFxRY62h/GHnSdYKvnoc7za40zGJ8COXXbTzT+GpV2n/T6O2DkJ Lgs5ARIgHKdTbpIZoxSRoiYss3Jt25tTct4MGMzZwf+8cwGsxnJh9qe3O/veGyN7 Us7ZbuupGW5aPYi8WhlAqDrf1FVX6ax2aNkRDxkIY0/J9q83ixEKpl+LZsUTcmx4 Zqy1f2mrFd/52eUecivUcBtOqXgXVKdZ9k5A9bl3DQyA2SrRBKvrprmJPlhchOJl 2vTSrGQh4sUCcjVsfh2js/ZWjCOIirF+mVrwA1En1+RazTHAwG5kkl0dFVupc4E4 QBq5YPXWeE1MPOATScJAVXuvWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe6AFOn IEU+3b9SUXcoLgCVshasMB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrr7EzUIVc2A7/96G7rndGV4Kv0PIbKc3P7Albda4M+zWvYWrswIfA iGVKK5EFmDNKlc11FARCvn2YTYaJusWYduYtE1dM7L8VDkmL3LV0KJ6K6FZbaTU5 LdtAtfTfhz+75KdDxLPeCPrciviFbYhxtewjkfzBAUFtjvI00P23Va18AkoD42ax XJq9isJRynDDS6lodt4ai2G6WZ9wkTprxXfYXtICUSFt3RSoL41AaudDMR0201h9 16pnZC9wkQS+Q2+w6Q+HIU3UfFLwr0pdOEDPsaCUs1R2MfnuyZ1l/l6rq4rPemGI i6LaUK0SDQ40MA0VOBHpv36QoMLLoabD -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:13 2025 by rpki-client