This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: EGHGzd4QbjyrqDXAv+xZvl6854Okf85V/fqEt9Qacrk= Subject key identifier: 71:25:23:5F:13:25:39:13:38:91:5E:5F:82:C6:A7:7D:87:42:C8:9F Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 0335 Signing time: Thu 25 Dec 2025 00:08:21 +0000 Manifest this update: Thu 25 Dec 2025 00:08:21 +0000 Manifest next update: Thu 01 Jan 2026 00:08:21 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: Gd5gNwKOQ6Z2DfziXrbe6E3UB9JM8zAxiJKJRkkW8Wk=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: pBwxys1yivtkEToGBFIFFmXXN52OvE5FFgRhewDkeko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Dec 25 00:08:21 2025 GMT Not After : Jan 1 00:08:21 2026 GMT Subject: CN=694c8075-82a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ac:f6:e8:cd:b5:2d:86:f4:98:45:d4:7c:f8: 1c:5f:c9:a3:ba:b4:98:55:66:61:89:0e:6f:17:37: ad:d0:76:2c:d6:3d:5b:d1:85:99:82:74:79:c1:17: 98:36:ee:82:44:88:a0:60:e1:e9:5b:41:43:df:45: 25:4d:af:6a:7f:67:fe:29:61:50:b2:f4:a6:17:4c: c5:87:7d:b1:a4:cc:b0:3c:21:0d:a8:c5:2e:28:ea: 93:94:cf:23:71:3b:e2:a3:d9:4c:b4:7a:0f:fc:2a: 29:38:ea:02:30:5f:9e:15:18:41:e8:88:be:de:bf: 68:e2:4b:c4:95:17:e7:28:1e:08:81:0b:16:6c:ea: 6b:65:8c:9c:c4:a3:71:0c:c6:96:b9:ba:27:9a:60: 9d:e1:11:57:3b:9c:e2:a6:30:c5:c5:c0:0e:4c:30: d9:c5:64:1a:4f:ed:81:1c:57:0d:dc:b3:49:85:20: 93:be:27:1f:5c:b7:c6:fc:89:5e:12:60:04:f8:80: 99:6b:32:5e:55:33:df:9f:cc:7e:37:93:f6:2e:a2: 5a:86:8f:b6:4f:45:76:31:ff:48:cc:3c:14:ac:6d: 08:06:96:20:83:bc:86:b4:0b:9d:d2:72:92:aa:0e: 3d:c3:ce:8a:26:d3:41:14:36:0a:f8:a4:2c:1f:ef: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:25:23:5F:13:25:39:13:38:91:5E:5F:82:C6:A7:7D:87:42:C8:9F X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:7a:3a:23:43:38:b2:30:33:29:5a:12:60:18:aa:2a:53:ee: 0c:84:dc:52:81:44:c5:36:e3:5e:d4:7b:4c:56:86:15:82:73: 0c:80:3c:c9:93:67:4e:38:c0:8c:ad:24:cb:b3:64:b3:ab:6f: 81:df:96:54:ff:63:3e:6e:27:11:fa:5a:c6:e2:79:12:6d:c4: 7b:34:e3:e6:d0:10:91:24:fa:7c:fb:bc:c0:7a:3a:fa:6a:d3: d5:b8:e6:ec:cd:af:ff:1d:75:ef:7c:84:8f:c4:76:c9:a0:88: 66:e9:64:59:40:81:00:0e:bc:52:cc:69:48:62:a7:0d:0b:df: be:7d:39:d3:63:0f:9a:0b:07:03:ab:3d:b4:5a:eb:5b:a8:ff: a5:25:7b:85:d6:40:15:3e:45:f2:04:a7:f6:4e:2e:ce:a1:ed: 68:5c:79:11:4f:43:ee:cb:2f:8e:a0:f5:89:7a:c8:fb:08:4f: 48:ae:8a:d8:66:97:3a:58:cb:c1:fe:89:d8:9b:79:c2:43:06: 60:f3:3f:9e:03:1f:46:67:93:59:64:a5:bc:7e:44:bb:44:14: 7d:26:8d:cd:b4:c6:92:fb:96:f7:f2:e5:10:fa:d9:8d:94:19: 1f:57:f5:c8:0e:a9:b0:df:6e:81:89:58:28:c6:e0:cf:81:30: ba:f9:a0:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUxMjI1MDAwODIxWhcNMjYwMTAxMDAwODIxWjAYMRYwFAYD VQQDDA02OTRjODA3NS04MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46z26M21LYb0mEXUfPgcX8mjurSYVWZhiQ5vFzet0HYs1j1b0YWZgnR5wReY Nu6CRIigYOHpW0FD30UlTa9qf2f+KWFQsvSmF0zFh32xpMywPCENqMUuKOqTlM8j cTvio9lMtHoP/CopOOoCMF+eFRhB6Ii+3r9o4kvElRfnKB4IgQsWbOprZYycxKNx DMaWubonmmCd4RFXO5zipjDFxcAOTDDZxWQaT+2BHFcN3LNJhSCTvicfXLfG/Ile EmAE+ICZazJeVTPfn8x+N5P2LqJaho+2T0V2Mf9IzDwUrG0IBpYgg7yGtAud0nKS qg49w86KJtNBFDYK+KQsH+8/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHElI18T JTkTOJFeX4LGp32HQsifMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKejojQziyMDMpWhJgGKoqU+4MhNxSgUTFNuNe1HtMVoYVgnMMgDzJ k2dOOMCMrSTLs2Szq2+B35ZU/2M+bicR+lrG4nkSbcR7NOPm0BCRJPp8+7zAejr6 atPVuObsza//HXXvfISPxHbJoIhm6WRZQIEADrxSzGlIYqcNC9++fTnTYw+aCwcD qz20WutbqP+lJXuF1kAVPkXyBKf2Ti7Ooe1oXHkRT0Puyy+OoPWJesj7CE9IrorY Zpc6WMvB/onYm3nCQwZg8z+eAx9GZ5NZZKW8fkS7RBR9Jo3NtMaS+5b38uUQ+tmN lBkfV/XIDqmw326BiVgoxuDPgTC6+aB5 -----END CERTIFICATE-----Generated at Thu Dec 25 03:18:08 2025 by rpki-client