This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: 4x2r+lr0TB8cha3nW5nDcNraFzgr1LA1gX1vWk+GA6E= Subject key identifier: 80:CD:E5:76:32:8B:41:2B:B9:A5:D2:F4:DB:A0:E3:17:E0:B1:B8:16 Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: 015E Signing time: Fri 19 Dec 2025 03:44:56 +0000 Manifest this update: Fri 19 Dec 2025 03:44:56 +0000 Manifest next update: Fri 26 Dec 2025 03:44:56 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: kUdrZlwhku1brAeu5ewlSLDCJY9t5Q++K2vqfOo264Y=) 2: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: YWa1hveaHvtRq7W9Wa0tUWbU8dV2y1xZGgeRGYH2cCw=) 3: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: ewzcoiNaimySvhHJOyKRgxhzXnmqi6m6Eh7TiLS4dlQ=) 4: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: VTVe81N4pW9ER21bMKt6sFjbfFvf/H+A7jZRhppZ5sg=) 5: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: 1Eq/vBclyWsRKM4D4caA/umlvuEELi4/AbXwk1feOGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Dec 19 03:44:56 2025 GMT Not After : Dec 26 03:44:56 2025 GMT Subject: CN=6944ca38-5984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:15:d5:ee:b1:8e:ff:51:e3:a1:7d:f5:2a: 7f:9c:2f:1f:72:5d:a0:36:0b:80:3d:21:be:d1:e5: 04:7f:bf:3e:61:0e:9d:42:14:20:68:74:c1:24:c2: a7:57:e1:b9:22:da:7b:dc:4e:b5:8d:e5:09:62:3a: b0:df:87:07:81:13:a5:5c:e4:0f:19:9f:59:1d:cb: 82:74:20:16:cd:dc:6e:b3:e9:46:bc:53:20:48:c9: 55:62:33:46:32:d9:b5:76:76:9c:2a:5f:18:d0:28: 1b:58:fb:e3:e8:70:5f:29:92:3e:42:93:ca:2d:45: 0d:ae:83:ca:95:0b:24:01:42:d4:6e:f1:d8:cf:0c: be:00:23:67:a5:8f:07:b1:b8:e1:0b:e7:65:ea:fc: 9e:31:c2:77:3e:b9:7d:6d:f9:95:9e:f5:88:aa:87: c4:84:4a:8f:25:27:d7:62:ba:3b:b4:19:e2:3f:a5: 3f:35:f1:e0:9c:c3:03:40:f0:d4:49:cf:5d:f8:89: 40:a2:b6:f2:2e:c7:fb:22:6e:ad:05:6a:91:e8:6b: bc:de:35:e0:ba:e7:9c:f1:11:e7:2a:c5:dc:32:94: 0c:57:ed:f4:3b:b0:9e:66:54:ce:ca:b8:7f:e9:c2: 74:05:f0:ce:d7:fb:5e:3b:20:38:f4:19:25:73:f0: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CD:E5:76:32:8B:41:2B:B9:A5:D2:F4:DB:A0:E3:17:E0:B1:B8:16 X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8b:f4:e7:3c:87:13:05:b9:92:5f:29:e2:bd:2a:39:26:08: a6:93:53:e3:e5:52:a0:5f:42:73:87:41:5e:4b:d0:b6:31:33: 90:18:d3:fb:fa:ab:4f:76:2d:c1:c6:f6:82:96:95:dc:fc:c9: 6d:17:80:f0:0f:52:76:10:4e:7a:b5:49:d0:5b:a8:24:6f:52: 2c:de:01:10:10:19:9e:27:a5:d5:8d:02:60:00:04:b8:7a:c6: 98:04:3b:29:82:b6:57:e3:87:aa:57:ec:8c:f1:23:be:f8:a3: ce:b7:48:26:f0:76:84:ce:76:7c:0b:48:70:53:89:d9:9e:88: bf:f6:27:7f:28:77:51:c6:e0:f8:ec:f3:ca:41:ed:e3:2d:3c: 92:de:05:9e:35:4c:58:9c:21:cd:a5:cc:a0:a6:ed:71:c1:3c: b6:13:11:cc:03:33:d4:38:c3:de:9a:b1:65:12:fa:50:b7:9d: 4d:8c:3e:4e:58:75:44:bb:93:4f:22:9d:d8:f8:03:eb:2b:53: e4:6c:7f:11:81:b4:7b:ec:0f:77:3a:2c:5f:1b:d5:b8:f4:ff: 1b:12:aa:8a:9f:ec:79:9c:0a:25:a8:a9:be:be:86:a3:99:68: 95:94:e3:35:55:24:2d:24:67:94:f2:23:34:1e:5d:f0:e0:e0: 65:f7:f9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUxMjE5MDM0NDU2WhcNMjUxMjI2MDM0NDU2WjAYMRYwFAYD VQQDDA02OTQ0Y2EzOC01OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdoV1e6xjv9R46F99Sp/nC8fcl2gNguAPSG+0eUEf78+YQ6dQhQgaHTBJMKn V+G5Itp73E61jeUJYjqw34cHgROlXOQPGZ9ZHcuCdCAWzdxus+lGvFMgSMlVYjNG Mtm1dnacKl8Y0CgbWPvj6HBfKZI+QpPKLUUNroPKlQskAULUbvHYzwy+ACNnpY8H sbjhC+dl6vyeMcJ3Prl9bfmVnvWIqofEhEqPJSfXYro7tBniP6U/NfHgnMMDQPDU Sc9d+IlAorbyLsf7Im6tBWqR6Gu83jXguuec8RHnKsXcMpQMV+30O7CeZlTOyrh/ 6cJ0BfDO1/teOyA49Bklc/A0swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDN5XYy i0EruaXS9Nug4xfgsbgWMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4i/TnPIcTBbmSXynivSo5Jgimk1Pj5VKgX0Jzh0FeS9C2MTOQGNP7 +qtPdi3BxvaClpXc/MltF4DwD1J2EE56tUnQW6gkb1Is3gEQEBmeJ6XVjQJgAAS4 esaYBDspgrZX44eqV+yM8SO++KPOt0gm8HaEznZ8C0hwU4nZnoi/9id/KHdRxuD4 7PPKQe3jLTyS3gWeNUxYnCHNpcygpu1xwTy2ExHMAzPUOMPemrFlEvpQt51NjD5O WHVEu5NPIp3Y+APrK1PkbH8RgbR77A93OixfG9W49P8bEqqKn+x5nAolqKm+voaj mWiVlOM1VSQtJGeU8iM0Hl3w4OBl9/m1 -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:56 2025 by rpki-client