This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File: TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier: f4GXoqpi+sTgPRxKiISx0RXbOglnWbueahUUtqcWHQQ=
Subject key identifier: 59:E0:FC:5B:C6:F1:83:53:29:63:DC:4D:83:3B:F3:7B:43:D3:9E:6A
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial: 0D23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number: 0D05
Signing time: Thu 18 Dec 2025 17:53:38 +0000
Manifest this update: Thu 18 Dec 2025 17:53:38 +0000
Manifest next update: Thu 25 Dec 2025 17:53:38 +0000
Files and hashes: 1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: ATLgRsfS/Gumb1fN98sbrM+0BTbA5PNpN6GVl/2ckgA=)
2: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
3: D0A73A449B8511F09D2ADB37C4F9AE02.roa (hash: dD6j+sczHYx/xPgDziOIUSB6+t7p5ThcbsCjerYQNgo=)
4: 6953C1BE9B8011F0A7C4F875C4F9AE02.roa (hash: Czi9t9FosAi4B7FBGuvwgOvx85ntHpJmoFPT2ay3ZXo=)
5: 67C349FA9B8011F0A7C4F875C4F9AE02.roa (hash: uhrbx22Mj7VPipJqiTCyDkTOObnHgzhVyzrHGF2K3fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Validity
Not Before: Dec 18 17:53:38 2025 GMT
Not After : Dec 25 17:53:38 2025 GMT
Subject: CN=69443fa2-48c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:af:37:d3:e9:d1:11:40:5c:c1:6d:ca:06:
c9:26:c4:de:53:95:e2:43:12:33:7a:fb:e2:21:c6:
0e:23:ee:8b:e4:e9:0e:28:47:00:da:7c:a3:54:04:
82:7e:ee:34:c3:75:86:7b:81:04:87:a2:5b:53:a4:
e9:6a:ab:9d:31:c7:0a:77:0f:ef:4b:77:8f:30:1a:
a7:41:8f:bf:7f:eb:4d:df:99:55:80:4e:19:96:d4:
d7:03:0b:0d:d3:3a:c4:6a:c6:f7:db:e4:c7:38:c5:
77:7e:d7:2e:6d:99:fe:ae:ea:34:93:a7:dd:81:a3:
d2:c5:dd:6a:6e:87:91:89:08:b0:20:14:1f:3c:29:
86:26:10:7b:40:1a:92:59:ec:7d:e5:51:d0:51:2f:
2d:44:8b:ba:0b:d3:59:e7:4a:15:37:17:66:91:2e:
ad:30:78:ba:18:c8:af:87:2a:56:28:0a:78:e3:bd:
5a:10:96:e9:c7:57:ed:72:07:e0:fe:9f:0c:ce:be:
58:17:f3:65:ba:d1:41:54:5c:93:cd:06:f7:03:77:
75:4a:b3:0d:3f:42:ba:b7:f2:a0:2a:f1:f0:01:15:
29:fd:18:c8:70:07:5b:ec:6e:56:b2:8d:10:36:3b:
32:db:3c:e8:26:6d:ce:55:07:05:16:93:27:2c:71:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:FC:5B:C6:F1:83:53:29:63:DC:4D:83:3B:F3:7B:43:D3:9E:6A
X509v3 Authority Key Identifier:
keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:9c:78:e9:c5:a9:50:3f:6d:f7:ce:e1:13:56:3b:55:96:6d:
ae:d8:74:5f:33:99:30:84:cf:9b:71:24:94:a1:e6:9d:6e:0d:
24:b3:94:93:98:3a:05:ff:c7:7b:92:bf:2c:cc:84:c1:12:bc:
cf:e7:39:da:72:ce:82:8e:bd:19:90:29:ed:bb:36:a6:c0:1e:
45:70:92:0a:1f:e9:a8:5e:1d:5f:db:d4:63:5b:64:3c:82:7f:
53:f9:f2:7b:84:eb:1a:3c:f0:f3:6a:ad:01:43:88:9d:6f:e6:
a2:91:21:21:9d:7e:e6:a4:e5:13:49:36:b0:31:fd:6a:87:09:
58:1c:14:92:4b:b3:df:69:79:ab:e4:9d:59:01:a4:c1:3c:46:
c1:19:0d:52:4a:da:b6:b9:b5:3e:6e:58:86:90:dd:99:06:10:
64:e3:63:3b:c6:2a:a6:3e:a2:75:63:72:58:fa:a0:6e:35:76:
9c:9a:bc:05:fd:21:cb:32:08:f8:24:f0:e3:5b:ff:0c:8e:5c:
13:47:33:eb:22:19:42:9a:c9:d3:8c:87:bc:2d:01:d5:38:6d:
9d:bc:9b:5f:72:04:a3:b4:35:e0:a5:ba:a6:60:78:85:5b:4e:
9e:d1:06:aa:38:68:4b:6c:b7:2a:b0:15:fb:8d:f2:7e:74:31:
e7:b3:8d:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0
M0U3RTdBREIwHhcNMjUxMjE4MTc1MzM4WhcNMjUxMjI1MTc1MzM4WjAYMRYwFAYD
VQQDDA02OTQ0M2ZhMi00OGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswuvN9Pp0RFAXMFtygbJJsTeU5XiQxIzevviIcYOI+6L5OkOKEcA2nyjVASC
fu40w3WGe4EEh6JbU6TpaqudMccKdw/vS3ePMBqnQY+/f+tN35lVgE4ZltTXAwsN
0zrEasb32+THOMV3ftcubZn+ruo0k6fdgaPSxd1qboeRiQiwIBQfPCmGJhB7QBqS
Wex95VHQUS8tRIu6C9NZ50oVNxdmkS6tMHi6GMivhypWKAp4471aEJbpx1ftcgfg
/p8Mzr5YF/NlutFBVFyTzQb3A3d1SrMNP0K6t/KgKvHwARUp/RjIcAdb7G5Wso0Q
Njsy2zzoJm3OVQcFFpMnLHGWewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFng/FvG
8YNTKWPcTYM783tD055qMB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2
ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzA5NC8wMUY4RUI5MkY2ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wt
cjJERGpuYVZzRHRENS1ldHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFnHjpxalQP233zuETVjtVlm2u2HRfM5kwhM+bcSSUoeadbg0ks5ST
mDoF/8d7kr8szITBErzP5znacs6Cjr0ZkCntuzamwB5FcJIKH+moXh1f29RjW2Q8
gn9T+fJ7hOsaPPDzaq0BQ4idb+aikSEhnX7mpOUTSTawMf1qhwlYHBSSS7PfaXmr
5J1ZAaTBPEbBGQ1SStq2ubU+bliGkN2ZBhBk42M7xiqmPqJ1Y3JY+qBuNXacmrwF
/SHLMgj4JPDjW/8MjlwTRzPrIhlCmsnTjIe8LQHVOG2dvJtfcgSjtDXgpbqmYHiF
W06e0QaqOGhLbLcqsBX7jfJ+dDHns40b
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:19:51 2025 by rpki-client