This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier: rNjOnkU199+fwTxp9ilI9q08dY7QlN8seT6NyGzxyBQ=
Subject key identifier: F4:41:B9:BA:51:64:AE:05:F8:F6:41:CE:4E:29:08:73:B0:5C:50:13
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number: 01B3
Signing time: Fri 19 Dec 2025 02:20:08 +0000
Manifest this update: Fri 19 Dec 2025 02:20:07 +0000
Manifest next update: Fri 26 Dec 2025 02:20:07 +0000
Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: ZdGWGNXX2UTTU0SaywBZjFkzh1mYl+X1BNlvIHbRNIw=)
2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: c8xC2gX2VG0WPWJTP0Tr0I6LdHRsTfIm5z3hVzO25VA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Validity
Not Before: Dec 19 02:20:07 2025 GMT
Not After : Dec 26 02:20:07 2025 GMT
Subject: CN=6944b658-dc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:60:1a:f9:79:e3:18:d7:51:3f:28:31:5b:
cc:8d:52:0f:98:3c:d7:03:88:2d:1a:2d:04:b1:f3:
66:01:a4:2e:03:cf:40:8d:67:0f:c0:1e:23:aa:91:
61:4b:dd:ee:3e:27:b1:5f:f5:aa:a0:96:60:af:16:
1c:bb:44:0b:75:a2:ed:a8:3e:6a:e0:53:95:b7:c7:
24:48:ca:e1:c8:c1:ed:f9:9f:b3:21:18:4e:cc:49:
1e:06:86:dc:a8:32:dd:af:93:90:59:59:54:73:93:
36:86:99:70:a2:db:52:47:77:5e:e1:c2:1a:7b:3c:
27:94:b8:91:dd:a8:7b:f4:4b:20:34:b5:de:f8:00:
a8:06:a2:4b:05:c3:57:6a:74:af:cc:88:51:79:66:
9f:6b:d7:06:3c:48:e9:e8:94:ab:85:16:0d:ef:4c:
f6:bf:2e:fc:12:6e:2a:e7:8e:2b:e8:90:cc:0e:e0:
d0:b5:5f:ce:5f:14:14:66:be:33:bb:48:92:28:5f:
e3:a0:52:86:a9:a0:46:68:a7:0c:62:41:ca:fa:96:
ed:17:d9:8b:bd:a6:cf:ad:25:7e:80:51:d7:c5:f1:
0f:f5:c9:f1:4f:b7:2f:1c:78:74:0c:52:3c:b1:5b:
4f:79:0c:aa:df:0b:e2:7f:2b:b9:60:cf:e3:2f:98:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:B9:BA:51:64:AE:05:F8:F6:41:CE:4E:29:08:73:B0:5C:50:13
X509v3 Authority Key Identifier:
keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:68:ad:d6:ea:5d:9e:f4:b2:0d:19:a1:5e:68:55:93:a5:7c:
ab:35:a2:49:09:0d:4f:36:5c:d6:5b:40:f8:95:df:1e:76:04:
62:7e:cf:1c:29:e3:14:c3:1e:ed:d0:0c:03:08:ab:67:ce:e5:
9a:8b:91:33:71:d9:1f:74:81:cd:87:6d:d9:f2:cb:08:71:5a:
19:6d:70:2e:3c:1f:8a:e2:9e:92:9c:29:61:c5:de:49:a9:08:
6b:33:08:81:82:89:c7:76:4b:de:8b:21:b0:37:09:b7:2b:87:
f8:d2:a0:4b:79:e5:4e:d5:df:87:ca:f0:8a:75:83:1b:07:3f:
2c:c0:2d:73:d9:d8:bd:b5:82:5e:f1:46:61:a9:0f:7f:45:2c:
9b:a1:7e:7c:ba:8d:8f:bf:23:85:ed:d7:fd:90:94:13:e1:74:
66:d4:d1:ab:0b:af:74:29:22:d9:68:9d:02:48:06:30:a0:1e:
62:dc:fd:b6:76:15:03:f7:bb:66:ff:66:cd:ad:e3:09:9c:15:
8c:2e:d0:f0:9b:fb:67:21:50:81:0c:00:67:8c:4d:f4:84:ec:
cd:4a:56:04:2a:f4:73:0b:49:5d:5d:de:e8:a8:b5:e6:e2:af:
35:aa:5a:6d:2d:33:8a:3d:1b:f0:fb:b4:d5:ab:6a:f3:e9:98:
eb:58:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:39 2025 by rpki-client