This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft File: tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json) Hash identifier: VWAuOOsqaZ5qDJsCT23aXMRjZkxpmfpToSPan5pegE0= Subject key identifier: 8B:67:7A:2F:24:6A:E3:96:D8:FE:D3:51:11:A5:0F:91:A9:8B:21:E1 Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Certificate serial: 156D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft Manifest number: 1539 Signing time: Sat 20 Dec 2025 16:35:10 +0000 Manifest this update: Sat 20 Dec 2025 16:35:09 +0000 Manifest next update: Sat 27 Dec 2025 16:35:09 +0000 Files and hashes: 1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: WCFAt+pJRBs5xcjY7bOLzuoMZ2WR0RraMc5l+d0CYek=) 2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=) 3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5485 (0x156d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Validity Not Before: Dec 20 16:35:09 2025 GMT Not After : Dec 27 16:35:09 2025 GMT Subject: CN=6946d03e-6192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:19:94:d1:53:3d:16:49:c8:8b:df:d5:cc: d9:6f:71:36:1d:70:72:cb:f4:63:68:38:52:2f:48: 65:ec:02:6c:d8:3a:8a:17:31:92:17:9c:10:0c:e7: c0:50:10:13:18:ac:09:8e:0f:74:4b:54:75:f5:a0: 0e:58:bb:87:12:28:2e:5c:89:44:bd:51:70:17:25: 05:ab:2e:c5:8d:1a:69:d3:83:1c:ad:6a:ef:51:d0: 08:4c:98:a3:58:31:18:ac:ed:44:df:0e:f7:e1:05: 40:d4:4b:73:fd:45:13:7f:21:4a:f5:5d:57:fa:87: a7:99:4a:21:f4:bc:78:2e:f4:56:56:fa:8c:9f:3e: e6:42:58:2f:61:93:ff:70:86:3d:f7:1f:9f:2c:4f: a1:a5:3d:a2:f5:b2:ad:80:c2:13:ee:9b:1d:a9:64: b9:be:df:21:f6:d3:61:a9:34:4a:26:70:c5:1b:56: fe:43:26:bc:9b:5d:a1:03:a7:5e:38:9c:b9:3f:ca: 30:1c:da:83:81:f0:f3:46:fa:56:03:5e:0b:ab:2c: 73:19:5f:8f:31:1b:4e:07:22:57:f3:ff:d1:45:81: ab:7c:04:1c:a4:50:6b:71:8b:7e:5a:ce:7e:40:29: 6b:f2:77:8f:0b:6e:52:1b:cb:79:aa:3a:3b:0a:50: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:67:7A:2F:24:6A:E3:96:D8:FE:D3:51:11:A5:0F:91:A9:8B:21:E1 X509v3 Authority Key Identifier: keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:bb:7f:5b:5d:8a:f6:c5:38:a8:b1:17:fa:9f:c0:81:6e:3e: 5a:b4:cd:b4:3c:d2:ba:58:0c:fd:b5:93:81:ed:49:51:0c:11: ba:94:69:51:8f:c0:58:86:d8:cf:e6:45:2f:e2:f0:27:77:6f: 20:90:fc:a1:0f:69:fb:02:a6:0f:73:b7:ec:28:a8:cc:ba:70: 2c:cd:c5:46:67:47:93:15:b5:c9:81:ff:a2:76:28:ab:af:37: e5:7f:bf:3f:1b:ab:17:a7:fb:61:ed:bb:a3:a1:fd:cb:17:93: 8c:af:c7:39:39:0b:65:f6:70:e0:53:dd:7a:23:ff:4e:34:3b: d0:ca:b8:5b:7e:ca:2f:77:2d:69:f5:6d:a8:4a:83:c2:42:bc: 27:23:b2:be:fc:78:18:24:ae:b0:72:2a:af:e2:f0:74:9e:14: 81:a4:df:b5:29:7a:96:62:48:46:f4:7b:5a:5e:88:dc:dd:7b: 6c:13:c3:46:66:5f:c4:5e:10:1c:07:0f:0f:69:07:79:dc:2d: b9:aa:02:f4:99:31:6c:81:b5:ca:77:08:18:79:b7:dc:b8:71: c7:da:b1:df:f5:b0:9f:83:1b:3c:b5:a0:da:d6:8f:75:19:16: 83:6f:45:d9:24:7a:ec:33:09:9d:40:50:41:fe:81:82:02:3b: c9:ce:5c:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE RTU0QjA5M0UwHhcNMjUxMjIwMTYzNTA5WhcNMjUxMjI3MTYzNTA5WjAYMRYwFAYD VQQDDA02OTQ2ZDAzZS02MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4IZlNFTPRZJyIvf1czZb3E2HXByy/RjaDhSL0hl7AJs2DqKFzGSF5wQDOfA UBATGKwJjg90S1R19aAOWLuHEiguXIlEvVFwFyUFqy7FjRpp04McrWrvUdAITJij WDEYrO1E3w734QVA1Etz/UUTfyFK9V1X+oenmUoh9Lx4LvRWVvqMnz7mQlgvYZP/ cIY99x+fLE+hpT2i9bKtgMIT7psdqWS5vt8h9tNhqTRKJnDFG1b+Qya8m12hA6de OJy5P8owHNqDgfDzRvpWA14LqyxzGV+PMRtOByJX8//RRYGrfAQcpFBrcYt+Ws5+ QClr8nePC25SG8t5qjo7ClCOOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItnei8k auOW2P7TURGlD5GpiyHhMB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDlFMC81MTU0QTExMDVGRkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVl bUhqc0JyOGtmM3JlVkxDVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUu39bXYr2xTiosRf6n8CBbj5atM20PNK6WAz9tZOB7UlRDBG6lGlR j8BYhtjP5kUv4vAnd28gkPyhD2n7AqYPc7fsKKjMunAszcVGZ0eTFbXJgf+idiir rzflf78/G6sXp/th7bujof3LF5OMr8c5OQtl9nDgU916I/9ONDvQyrhbfsovdy1p 9W2oSoPCQrwnI7K+/HgYJK6wciqv4vB0nhSBpN+1KXqWYkhG9HtaXojc3XtsE8NG Zl/EXhAcBw8PaQd53C25qgL0mTFsgbXKdwgYebfcuHHH2rHf9bCfgxs8taDa1o91 GRaDb0XZJHrsMwmdQFBB/oGCAjvJzlxq -----END CERTIFICATE-----Generated at Mon Dec 22 03:32:31 2025 by rpki-client