This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: Jtv32yhb5JcV07Sl6g8TQub9f4UBxDMyh3ukb2UK/9A= Subject key identifier: D1:68:26:C2:DB:F1:87:73:36:C9:26:69:19:B5:A7:7E:98:1F:E0:83 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B74 Signing time: Thu 18 Dec 2025 18:46:42 +0000 Manifest this update: Thu 18 Dec 2025 18:46:41 +0000 Manifest next update: Thu 25 Dec 2025 18:46:41 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: e5njmk6caoNUrt0YjfhJBCMZSw2AYgAiNvd8cKBmtgA=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8tDMb7QbvAxPwaQ73OW8ydvRFg2I4adHfXyKJL4c0jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2942 (0xb7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Dec 18 18:46:41 2025 GMT Not After : Dec 25 18:46:41 2025 GMT Subject: CN=69444c12-e8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:8f:a2:32:21:55:7e:67:9f:cb:c4:64:56: 86:c5:7f:26:6e:4d:0f:a2:f2:f3:5e:a6:1c:dd:66: 61:3c:3d:73:db:3e:6f:c4:46:3d:32:38:3d:2a:67: 1d:1c:ff:12:d3:56:d1:2f:e7:30:a2:ec:6f:1f:b8: 2d:a2:e1:22:7b:b8:8e:86:d0:6f:38:bc:21:01:ca: fd:2a:d2:b4:69:8e:88:0d:5b:7a:a2:47:f9:32:04: 7f:8b:56:dc:bc:b0:77:da:a0:fe:b1:14:ff:19:1d: b3:4f:20:85:b7:9d:f8:ba:ea:99:9d:b9:0b:f1:41: 46:c2:cb:86:a4:cc:fa:2d:f7:b8:84:ce:82:0e:f0: f7:0a:f0:64:e4:c5:2b:4d:9b:a8:2f:26:6e:b8:97: 9c:73:06:cd:50:64:c0:c9:cd:5d:cf:36:8b:ce:41: 88:5c:27:51:0a:aa:0d:5c:58:a9:4e:14:3f:d2:a4: 12:3f:0f:16:6f:62:11:95:c3:4e:76:9b:f0:27:d6: 98:79:92:c7:30:27:3a:40:f8:42:67:e4:1c:19:35: a2:c2:40:6e:34:3c:ad:14:39:3e:7a:7f:a8:2d:c8: 6f:b8:aa:53:a5:1e:3a:b2:5e:fe:23:1e:c2:c4:c1: f6:50:7f:fc:9b:1f:55:a1:87:49:fe:92:ae:48:d2: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:26:C2:DB:F1:87:73:36:C9:26:69:19:B5:A7:7E:98:1F:E0:83 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:48:d9:72:e6:63:99:8f:3b:50:e6:dc:e4:7a:88:47:15:65: 11:ec:05:f7:7d:f6:fa:4a:22:61:e4:20:cc:cd:b3:f8:44:1b: a3:4e:d8:3a:15:bb:b8:37:1e:f4:be:c6:8c:e8:62:f1:84:19: c8:8f:34:e9:d9:29:49:d0:01:8c:8e:e5:39:b1:5a:19:c2:a2: c6:36:8e:e5:93:4d:f0:36:7f:c9:2a:be:6b:5b:92:96:3a:b0: fd:df:94:09:2b:3c:ed:83:9a:bd:11:53:59:b6:e5:9b:aa:7b: f2:0b:a5:67:56:23:ae:55:47:b5:c7:75:7a:7a:6e:7c:fe:ec: 1a:5d:b3:21:7b:95:17:4a:f0:d6:f9:5b:52:8e:02:28:11:5d: 9b:c6:c7:a9:38:5c:02:ee:1c:b2:52:e5:d5:13:67:ea:e5:33: 90:a9:7b:66:8e:93:5e:b8:03:03:73:ea:e3:3b:74:85:e8:4d: 96:04:76:3a:5b:a7:5c:f4:e5:4e:c2:43:04:a3:54:2c:bf:f9: 83:37:7f:d1:75:78:9a:42:98:24:c8:ad:9c:f5:5c:85:38:c9: 06:b3:7f:a4:56:f9:80:56:11:af:46:da:2c:d1:4b:98:4b:d8: 01:d4:30:b7:25:44:92:62:56:06:33:a6:9b:e3:a9:62:5d:ca: 65:91:ed:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUxMjE4MTg0NjQxWhcNMjUxMjI1MTg0NjQxWjAYMRYwFAYD VQQDDA02OTQ0NGMxMi1lOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpOPojIhVX5nn8vEZFaGxX8mbk0PovLzXqYc3WZhPD1z2z5vxEY9Mjg9Kmcd HP8S01bRL+cwouxvH7gtouEie7iOhtBvOLwhAcr9KtK0aY6IDVt6okf5MgR/i1bc vLB32qD+sRT/GR2zTyCFt534uuqZnbkL8UFGwsuGpMz6Lfe4hM6CDvD3CvBk5MUr TZuoLyZuuJeccwbNUGTAyc1dzzaLzkGIXCdRCqoNXFipThQ/0qQSPw8Wb2IRlcNO dpvwJ9aYeZLHMCc6QPhCZ+QcGTWiwkBuNDytFDk+en+oLchvuKpTpR46sl7+Ix7C xMH2UH/8mx9VoYdJ/pKuSNIIFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFoJsLb 8YdzNskmaRm1p36YH+CDMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQSNly5mOZjztQ5tzkeohHFWUR7AX3ffb6SiJh5CDMzbP4RBujTtg6 Fbu4Nx70vsaM6GLxhBnIjzTp2SlJ0AGMjuU5sVoZwqLGNo7lk03wNn/JKr5rW5KW OrD935QJKzztg5q9EVNZtuWbqnvyC6VnViOuVUe1x3V6em58/uwaXbMhe5UXSvDW +VtSjgIoEV2bxsepOFwC7hyyUuXVE2fq5TOQqXtmjpNeuAMDc+rjO3SF6E2WBHY6 W6dc9OVOwkMEo1Qsv/mDN3/RdXiaQpgkyK2c9VyFOMkGs3+kVvmAVhGvRtos0UuY S9gB1DC3JUSSYlYGM6ab46liXcplke1z -----END CERTIFICATE-----Generated at Fri Dec 19 22:00:56 2025 by rpki-client