This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: KNMjv0kH0RGBTGIMtswrKIajt9p7+I1V9tNGDFVD17M= Subject key identifier: FB:9D:E1:96:39:59:D3:91:3C:7E:31:11:7B:5B:EB:F0:F5:73:31:8B Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 0620 Signing time: Thu 18 Dec 2025 22:10:18 +0000 Manifest this update: Thu 18 Dec 2025 22:10:17 +0000 Manifest next update: Thu 25 Dec 2025 22:10:17 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: u63doYkBRhVBadQMRs2DWnMEyX+QUiUrP6ZDJvsikB0=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Dec 18 22:10:17 2025 GMT Not After : Dec 25 22:10:17 2025 GMT Subject: CN=69447bca-9381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:96:ef:a3:da:59:bf:bc:11:c2:22:bd:0f: 63:d2:17:47:15:86:e8:89:ff:ce:2e:c1:f5:ef:3c: 13:9c:79:7d:24:81:b1:45:80:85:26:eb:11:3b:c8: 0b:e9:c1:52:38:0d:db:f3:43:76:cb:7e:6d:c0:15: af:45:08:42:17:6b:ab:c9:06:72:5e:dd:38:bf:99: 90:9f:67:31:4b:e7:3e:6d:40:c3:ff:5a:6d:e4:1d: b8:81:6f:45:a0:87:f3:52:6c:3e:35:96:87:18:59: 54:60:59:a0:eb:4d:87:a9:69:6c:22:61:c4:0c:13: 96:86:f0:27:a2:17:71:02:04:e8:7c:d6:63:ad:b7: e5:0a:37:ee:1d:b3:f7:ec:58:2e:a7:06:6e:c7:af: 69:1e:46:81:0a:26:bd:7a:b0:ca:07:de:4e:8a:66: 83:55:04:81:e3:08:0c:df:23:ab:35:78:ad:63:e0: 44:b9:5e:5d:4d:2b:a9:53:ca:ad:62:39:26:89:b4: 2d:f7:80:26:8a:27:b1:2c:b9:4d:35:1c:f0:7c:76: de:fe:0d:00:5c:f7:02:47:ec:54:ba:7e:bd:f8:f6: a0:5d:3a:84:6b:e9:d7:3f:7e:e5:91:92:09:5a:de: 03:33:fe:1f:7e:99:13:54:a1:80:c8:72:ba:c8:5c: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9D:E1:96:39:59:D3:91:3C:7E:31:11:7B:5B:EB:F0:F5:73:31:8B X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cd:75:96:98:44:6f:e9:58:39:70:14:75:03:e7:2c:2a:af: 71:c3:3c:b6:b1:65:e2:45:a1:26:51:db:b9:6a:09:37:6b:e6: aa:f7:05:9d:44:be:c5:2f:4a:87:b4:ed:0a:8f:33:07:da:9e: 07:3b:38:6e:df:53:93:d0:09:60:9a:b5:f7:ec:2f:3a:6f:55: 87:66:c9:e0:94:02:d8:a1:b8:fa:f1:f2:45:22:16:59:65:20: 5a:7a:69:e4:d9:d6:6d:d1:fd:25:31:c6:cf:6b:38:df:f6:9f: ad:56:9d:25:59:7e:7c:cd:ba:eb:84:24:09:25:4a:ed:d3:93: 6a:24:aa:7a:d0:73:e3:43:b9:6b:c5:00:c0:71:87:86:b9:fb: b4:13:1f:f5:19:b1:f0:db:36:52:51:a4:5f:e7:bf:cc:c0:71: 2d:8a:ce:8a:16:b0:93:fb:e7:2b:ff:b6:32:56:6e:62:5f:ab: b4:cc:a2:b0:ed:b0:85:c2:5f:5b:fc:d7:13:e7:fe:12:f5:9a: 9a:16:70:f5:5d:51:49:f2:e6:e0:96:a0:fb:84:61:dd:68:5e: 85:34:d7:30:d3:1c:95:70:d8:3f:06:53:77:fb:1b:14:3d:3c: c2:47:65:77:d0:41:59:76:43:38:02:ff:d8:91:0d:7f:58:7e: 60:63:5b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUxMjE4MjIxMDE3WhcNMjUxMjI1MjIxMDE3WjAYMRYwFAYD VQQDDA02OTQ0N2JjYS05MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi2W76PaWb+8EcIivQ9j0hdHFYboif/OLsH17zwTnHl9JIGxRYCFJusRO8gL 6cFSOA3b80N2y35twBWvRQhCF2uryQZyXt04v5mQn2cxS+c+bUDD/1pt5B24gW9F oIfzUmw+NZaHGFlUYFmg602HqWlsImHEDBOWhvAnohdxAgTofNZjrbflCjfuHbP3 7FgupwZux69pHkaBCia9erDKB95OimaDVQSB4wgM3yOrNXitY+BEuV5dTSupU8qt YjkmibQt94AmiiexLLlNNRzwfHbe/g0AXPcCR+xUun69+PagXTqEa+nXP37lkZIJ Wt4DM/4ffpkTVKGAyHK6yFxLwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPud4ZY5 WdORPH4xEXtb6/D1czGLMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtzXWWmERv6Vg5cBR1A+csKq9xwzy2sWXiRaEmUdu5agk3a+aq9wWd RL7FL0qHtO0KjzMH2p4HOzhu31OT0AlgmrX37C86b1WHZsnglALYobj68fJFIhZZ ZSBaemnk2dZt0f0lMcbPazjf9p+tVp0lWX58zbrrhCQJJUrt05NqJKp60HPjQ7lr xQDAcYeGufu0Ex/1GbHw2zZSUaRf57/MwHEtis6KFrCT++cr/7YyVm5iX6u0zKKw 7bCFwl9b/NcT5/4S9ZqaFnD1XVFJ8ubglqD7hGHdaF6FNNcw0xyVcNg/BlN3+xsU PTzCR2V30EFZdkM4Av/YkQ1/WH5gY1vx -----END CERTIFICATE-----Generated at Fri Dec 19 19:14:16 2025 by rpki-client