This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json) Hash identifier: kXvnNrN5g1afbD6FC00ERi6eJCX5M8lW/FfaiSz41Gk= Subject key identifier: 59:A9:4C:7C:E2:13:CE:AF:3A:CB:80:16:69:53:F6:28:98:EF:19:6F Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 18EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft Manifest number: 1872 Signing time: Sun 04 Jan 2026 16:17:01 +0000 Manifest this update: Sun 04 Jan 2026 16:17:01 +0000 Manifest next update: Sun 11 Jan 2026 16:17:01 +0000 Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: r2bxgDM0LM74If5QvF7clxSDjHR6Dl+cJrRPC4ay0Xo=) 2: 2F268460A40311EFBD995535C4F9AE02.roa (hash: Nc9fjbQQaQM2ngJvCwaCgEuj+SZKkpHjO1qgG0sZIHg=) 3: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: G2dT/aqsMx0KoCwmXvgkhmTnoPOvK+397UePsMgxeC8=) 4: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: Efx4cvLJwgDVDbTYOOkuaG1d46gN7cwEwLt6snlfZA0=) 5: 2F903356A40311EFBD995535C4F9AE02.roa (hash: uO169iwF7Z+iK825Wy21kUBoHTcQcMmcJT8QN4XB2IQ=) 6: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: pLQhbQ0mTRBssMztKv86DK/TOvY561i4aTIXdGlEvzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 16:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6382 (0x18ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Jan 4 16:17:01 2026 GMT Not After : Jan 11 16:17:01 2026 GMT Subject: CN=695a927d-9d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:50:9e:08:b0:c7:70:5a:fa:a0:6d:ac:a5:85: dc:e9:2c:bd:58:d9:ee:3f:c2:1e:dd:7c:e6:89:fc: b8:6c:b7:64:1a:38:68:95:c7:d4:f7:ca:54:0f:18: 29:f1:7b:ed:1a:38:c5:1e:65:20:36:93:f0:37:26: 39:40:6d:03:55:fa:1a:ab:93:af:dd:44:9c:78:36: dc:78:bd:ff:0a:44:d4:8f:8c:86:69:06:41:01:f6: 25:e5:a3:cd:3c:2b:11:45:ac:c3:0b:9a:35:4f:a0: 38:db:47:c1:56:94:f6:bf:51:d5:24:bf:ed:ef:1d: ca:17:c2:46:bc:7c:11:cd:b8:5c:dc:6a:84:16:01: 48:3b:00:3e:08:64:ff:94:7b:5f:2d:ec:08:e1:bf: 55:21:75:51:d2:54:e8:11:85:2f:23:45:a9:97:65: fa:aa:b2:80:47:0e:55:33:ef:b5:23:1c:59:a5:2a: 8e:08:df:bd:34:58:77:9c:cf:10:ff:43:38:a0:03: 9b:d7:dc:5d:c3:72:55:e6:e2:f3:1f:ae:56:e4:a1: 75:12:cb:30:1f:36:ed:0e:dc:82:e7:f4:ae:95:96: 6c:45:e4:22:69:66:e5:01:d6:1a:99:d2:ea:8a:55: 2e:f0:b1:dd:8f:14:fc:ed:87:3c:55:6d:72:d1:3b: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A9:4C:7C:E2:13:CE:AF:3A:CB:80:16:69:53:F6:28:98:EF:19:6F X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f7:7c:7f:53:d4:d6:60:58:1d:f1:3e:60:14:24:da:0e:8b: 90:78:d3:4d:e5:a8:db:05:22:6f:56:ac:1e:86:6f:9f:a6:13: 6a:af:1d:43:0d:31:fe:6b:d2:0c:66:7e:de:00:c2:93:2c:19: 34:1c:af:9f:52:24:9e:87:b8:7b:b5:ef:74:49:0a:02:b6:b6: 01:bf:87:cd:94:e4:03:ed:ea:99:05:ee:2f:87:75:16:6b:86: 78:d1:c4:ba:ea:ed:ef:a2:a9:78:26:82:43:b6:c8:a1:e1:8f: 00:f3:41:bf:b9:be:83:a9:6a:4b:4d:2e:e9:9d:ab:c9:67:d0: 3f:b8:79:5e:ad:5e:df:6e:b2:9b:05:da:2c:11:a1:e0:9b:74: 53:bc:11:44:45:3e:c5:94:f2:c8:81:ba:d5:75:8f:02:24:2f: 5e:d4:c7:f5:c9:80:1d:b9:c0:0e:d3:3e:d3:0d:e8:b5:a3:8c: d7:7c:d4:e5:2b:44:6b:f1:21:3e:d6:df:90:3b:3b:d6:0f:b5: 9c:d0:72:78:e4:d0:79:ff:93:47:74:af:1d:87:66:ef:1c:8e: 45:bd:60:af:15:cc:f8:20:c1:4f:64:59:c3:65:12:63:c3:6c: 46:7d:26:d5:60:54:89:5f:e1:dc:61:dd:56:6c:80:37:68:fc: e2:bb:ea:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjYwMTA0MTYxNzAxWhcNMjYwMTExMTYxNzAxWjAYMRYwFAYD VQQDDA02OTVhOTI3ZC05ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVCeCLDHcFr6oG2spYXc6Sy9WNnuP8Ie3Xzmify4bLdkGjholcfU98pUDxgp 8XvtGjjFHmUgNpPwNyY5QG0DVfoaq5Ov3USceDbceL3/CkTUj4yGaQZBAfYl5aPN PCsRRazDC5o1T6A420fBVpT2v1HVJL/t7x3KF8JGvHwRzbhc3GqEFgFIOwA+CGT/ lHtfLewI4b9VIXVR0lToEYUvI0Wpl2X6qrKARw5VM++1IxxZpSqOCN+9NFh3nM8Q /0M4oAOb19xdw3JV5uLzH65W5KF1EsswHzbtDtyC5/SulZZsReQiaWblAdYamdLq ilUu8LHdjxT87Yc8VW1y0TvnjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmpTHzi E86vOsuAFmlT9iiY7xlvMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUI0OS8wNzgwQjk5MEM5RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNf dllNYXZRSmdPMS13LTVSYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq93x/U9TWYFgd8T5gFCTaDouQeNNN5ajbBSJvVqwehm+fphNqrx1D DTH+a9IMZn7eAMKTLBk0HK+fUiSeh7h7te90SQoCtrYBv4fNlOQD7eqZBe4vh3UW a4Z40cS66u3voql4JoJDtsih4Y8A80G/ub6DqWpLTS7pnavJZ9A/uHlerV7fbrKb BdosEaHgm3RTvBFERT7FlPLIgbrVdY8CJC9e1Mf1yYAducAO0z7TDei1o4zXfNTl K0Rr8SE+1t+QOzvWD7Wc0HJ45NB5/5NHdK8dh2bvHI5FvWCvFcz4IMFPZFnDZRJj w2xGfSbVYFSJX+HcYd1WbIA3aPziu+q+ -----END CERTIFICATE-----Generated at Tue Jan 6 02:57:41 2026 by rpki-client