This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json)
Hash identifier: fX6F8qEXP4pN/Wo9f5NOSfznB0HtlnOwuY0dYUtysRo=
Subject key identifier: 6B:C4:30:FD:6B:99:37:64:D6:28:78:3F:6F:48:17:80:F7:4A:89:FA
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial: 05B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
Manifest number: 05A9
Signing time: Thu 18 Dec 2025 22:29:07 +0000
Manifest this update: Thu 18 Dec 2025 22:29:06 +0000
Manifest next update: Thu 25 Dec 2025 22:29:06 +0000
Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: /Ixzs2AyJGfmcTFVjh6pOotmuvPJEm/7n9R+2xt/LnA=)
2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: S07N/8Ez+PeXS+KaKtYo/aw1ppaoCrg3SZIV/r7xqcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Validity
Not Before: Dec 18 22:29:06 2025 GMT
Not After : Dec 25 22:29:06 2025 GMT
Subject: CN=69448033-cc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:81:6a:53:4b:88:25:0e:15:31:c7:db:57:
88:d2:ab:d4:7e:d7:da:e2:5f:96:78:a5:61:ce:83:
14:e7:3d:6b:ef:ec:ea:63:da:eb:64:bd:f8:10:f0:
01:2d:43:2e:17:98:09:77:71:2e:75:56:64:f4:20:
f9:f0:ea:a2:9f:f2:a6:45:e9:64:7a:0a:9b:f9:59:
be:af:7c:ee:4c:a8:ba:11:c3:98:44:29:64:93:c0:
1b:8e:8c:d6:a6:cd:29:01:15:61:e7:1d:b4:3e:e3:
b3:b1:e6:c3:6e:ab:a3:a2:f8:0f:4d:c2:e5:fc:77:
0e:fe:26:94:97:85:80:52:1b:88:4d:dc:fd:57:41:
85:36:1d:60:8d:66:61:ba:c8:9f:96:25:25:b2:ec:
b8:94:91:3f:dd:85:22:30:71:fe:77:fa:da:20:69:
3d:23:fc:c2:06:72:18:2f:32:1f:cd:a7:e9:5d:64:
de:34:45:33:bd:40:5a:0f:b0:44:44:7c:3b:2f:c7:
f7:dc:00:cc:23:bd:d0:ee:45:05:ac:ba:0f:19:49:
c1:d1:39:1c:c9:27:16:2d:31:be:53:f8:a7:53:54:
d9:09:53:ae:c9:21:04:f3:da:4b:63:ed:7f:f7:06:
f0:8a:a4:d5:2f:5f:35:f9:84:cb:8d:d4:83:3b:82:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:30:FD:6B:99:37:64:D6:28:78:3F:6F:48:17:80:F7:4A:89:FA
X509v3 Authority Key Identifier:
keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:af:34:d3:ca:53:70:2a:72:9b:89:35:ff:fd:8c:7f:12:62:
17:cd:81:ae:18:26:cf:5e:9f:a9:68:af:ab:16:61:1f:02:62:
79:21:79:bb:cc:0e:c4:55:a1:52:c1:b0:19:45:35:44:66:d2:
56:3f:78:57:bb:26:17:a1:55:30:b3:cd:ee:84:39:cb:f0:78:
44:d7:c2:97:1a:5e:fc:60:ce:7c:8a:c5:da:5c:0c:ee:4d:26:
cc:8f:f4:ba:92:e8:d5:a3:95:3a:61:e6:79:2d:33:03:db:a5:
4f:bd:ef:03:f8:fd:36:14:8f:af:82:c7:07:98:e9:bd:2b:f1:
4b:b6:2c:34:b9:9d:db:2f:ac:71:93:52:aa:8b:c5:32:4a:31:
4d:d3:9c:c8:a7:f0:db:26:0c:d7:64:aa:f0:af:d5:04:64:21:
86:6e:82:33:26:0f:6b:2e:a0:b5:44:2f:89:a2:b2:5e:2f:65:
13:ed:ad:8d:72:c1:9e:a4:e6:de:2d:47:7e:98:24:20:9e:61:
ce:5f:45:19:f8:de:c6:e4:85:cf:ba:a4:c3:25:9a:78:a1:e0:
86:90:32:ab:64:63:f4:3d:73:2b:b5:79:b5:7d:c0:64:d5:06:
28:b3:7c:c4:bc:79:f6:75:52:a6:5f:23:30:35:eb:21:eb:aa:
e4:da:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:20:20 2025 by rpki-client