This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: JxzBxcxIa+3AaJm4j3XA6IeNJDFJs2PfHZhgv/A/xsI= Subject key identifier: EF:CC:DF:B8:3F:34:17:2A:6A:57:42:60:17:06:32:07:7A:C5:1C:E8 Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0C97 Signing time: Mon 22 Dec 2025 18:02:13 +0000 Manifest this update: Mon 22 Dec 2025 18:02:13 +0000 Manifest next update: Mon 29 Dec 2025 18:02:13 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: Fsllcp/279K+/Zw4lmoEFoElD+XmndBoyUSyjTWWzRY=) 2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: YQqO3/GsQMAf9ewsQANIfWPP9RflccXF2o5PRECWCc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Dec 22 18:02:13 2025 GMT Not After : Dec 29 18:02:13 2025 GMT Subject: CN=694987a5-a4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:ca:98:84:0f:d0:33:b7:05:9a:ed:ed:6f: 58:13:0e:8c:7a:06:a9:a8:bd:39:12:2d:4f:7d:09: 5e:81:55:d2:60:0d:6f:45:1f:aa:d0:84:67:e2:31: 0c:52:5c:cd:86:60:45:5f:f7:18:e3:22:bc:ee:3f: 03:96:88:28:f0:bb:43:a5:5b:1c:6a:03:5a:26:80: 81:98:8d:b5:3d:b0:d1:94:88:df:08:c7:09:80:72: 7d:eb:f5:a1:8e:be:7f:35:9a:9a:4b:fd:ff:04:78: 77:2d:6f:fc:13:cb:9f:c5:86:ee:c2:7f:af:08:35: d9:8e:4f:08:2c:b0:74:64:14:db:2f:01:59:8a:2b: ea:8f:13:4c:a9:c5:71:aa:c3:92:61:88:c3:bd:b4: e9:58:97:1a:4b:62:38:0d:7d:f3:54:d5:22:16:6d: 69:43:9d:7b:27:29:5a:09:cd:2e:dc:95:23:6f:b8: e2:b4:4d:02:17:51:36:bd:d5:4b:00:14:73:90:06: 05:8e:a1:bf:2c:39:c5:87:ec:b0:d9:53:4b:f3:20: 0c:ae:48:ce:e7:c6:4e:c3:ff:78:2f:9a:ac:d6:2c: 38:dd:20:36:98:19:b0:bd:77:8d:5a:6c:c0:9b:71: 76:57:dc:50:79:4a:4c:8d:42:f0:5e:f7:a7:83:70: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CC:DF:B8:3F:34:17:2A:6A:57:42:60:17:06:32:07:7A:C5:1C:E8 X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:95:1c:be:5e:34:3f:ec:67:a0:2a:64:ba:77:01:36:d1:fd: f3:4c:da:6f:45:a3:79:a1:2d:ff:54:41:a4:78:52:c4:7f:9f: b6:26:32:c2:e6:55:47:75:a7:6d:ca:f3:ec:76:0a:e5:38:03: 03:c7:f4:fe:f1:fe:28:a7:1e:96:51:84:7d:28:bc:8e:8c:15: 54:29:97:f5:a9:ca:c1:88:7a:da:52:59:71:20:e4:80:19:44: bb:67:63:18:58:b1:7d:b0:9a:73:f6:80:98:a3:40:bc:d0:c4: eb:f6:7c:b8:c4:d9:f9:da:1a:97:f0:fe:12:2c:04:ee:f3:c3: 67:ed:14:12:db:ee:2c:3a:37:10:fa:3b:ef:0e:55:89:74:f5: 43:fe:93:a9:0d:d4:88:72:8b:2c:de:da:55:19:cc:9b:11:71: 8d:46:3c:3b:06:62:04:fe:c3:12:a5:f0:dd:8b:fb:ba:91:ab: 6d:8d:01:4e:17:fa:95:b3:23:28:9a:dc:0e:63:98:40:32:d4: 3e:08:f0:d9:33:e6:ef:1a:82:66:f0:cb:fb:4c:6c:51:41:68: 8f:10:ea:ef:54:9a:5c:54:09:01:57:bb:7c:fd:96:b0:55:c4: 60:c5:a6:65:fe:f8:d4:30:50:2b:45:0b:94:37:86:4d:65:92: d6:4d:34:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjUxMjIyMTgwMjEzWhcNMjUxMjI5MTgwMjEzWjAYMRYwFAYD VQQDDA02OTQ5ODdhNS1hNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07DKmIQP0DO3BZrt7W9YEw6MegapqL05Ei1PfQlegVXSYA1vRR+q0IRn4jEM UlzNhmBFX/cY4yK87j8Dlogo8LtDpVscagNaJoCBmI21PbDRlIjfCMcJgHJ96/Wh jr5/NZqaS/3/BHh3LW/8E8ufxYbuwn+vCDXZjk8ILLB0ZBTbLwFZiivqjxNMqcVx qsOSYYjDvbTpWJcaS2I4DX3zVNUiFm1pQ517JylaCc0u3JUjb7jitE0CF1E2vdVL ABRzkAYFjqG/LDnFh+yw2VNL8yAMrkjO58ZOw/94L5qs1iw43SA2mBmwvXeNWmzA m3F2V9xQeUpMjULwXveng3BXpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/M37g/ NBcqaldCYBcGMgd6xRzoMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAlRy+XjQ/7GegKmS6dwE20f3zTNpvRaN5oS3/VEGkeFLEf5+2JjLC 5lVHdadtyvPsdgrlOAMDx/T+8f4opx6WUYR9KLyOjBVUKZf1qcrBiHraUllxIOSA GUS7Z2MYWLF9sJpz9oCYo0C80MTr9ny4xNn52hqX8P4SLATu88Nn7RQS2+4sOjcQ +jvvDlWJdPVD/pOpDdSIcoss3tpVGcybEXGNRjw7BmIE/sMSpfDdi/u6kattjQFO F/qVsyMomtwOY5hAMtQ+CPDZM+bvGoJm8Mv7TGxRQWiPEOrvVJpcVAkBV7t8/Zaw VcRgxaZl/vjUMFArRQuUN4ZNZZLWTTTU -----END CERTIFICATE-----Generated at Wed Dec 24 00:32:09 2025 by rpki-client