This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: nas2uorgoQADwJI2jKtI58zMkRhwTwMHr2BMOqYGk1c= Subject key identifier: 81:FA:0A:83:EE:DE:EB:4B:38:27:38:FC:57:86:19:03:B5:BD:31:BE Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 19F8 Signing time: Thu 18 Dec 2025 17:21:30 +0000 Manifest this update: Thu 18 Dec 2025 17:21:30 +0000 Manifest next update: Thu 25 Dec 2025 17:21:30 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: ayzZnlPviVzR2j5gfsyrPPP10jq8VNcAr4wCWlpH8W0=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2670 (0xa6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Dec 18 17:21:30 2025 GMT Not After : Dec 25 17:21:30 2025 GMT Subject: CN=6944381a-090f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:54:fa:4c:9e:92:85:c4:d0:68:5a:23:7a: 10:25:b3:36:5e:51:18:94:3b:25:3d:33:31:bc:53: f8:33:db:a4:12:48:21:53:71:06:83:c3:8b:36:7b: 05:f6:1d:08:36:9c:aa:42:cc:1c:c6:0b:87:3e:db: e7:a4:72:be:d1:0d:f1:f7:9f:64:80:e3:67:9f:16: 00:2d:21:6e:07:b3:1c:bf:bb:e6:eb:fb:61:e7:6a: c8:86:2d:8b:ce:11:fc:49:c4:d3:06:ef:cd:50:7d: 8e:c9:e0:0a:a1:e3:69:74:27:10:77:5e:b5:d2:e1: 16:09:be:56:af:fa:53:08:22:5d:95:9c:0f:fb:86: 64:df:40:2d:4a:e7:88:c7:8b:2d:5a:3a:e3:61:93: e1:b5:d3:73:41:d9:ad:92:85:97:4a:a5:a2:98:78: 98:53:cd:ec:0d:0a:0a:e1:7f:a6:52:97:aa:fe:f9: bd:8b:1f:56:10:db:d1:d8:93:45:13:8f:b9:63:d3: 11:e4:5b:c7:74:bc:ba:65:97:f7:0f:c5:6e:c7:de: 1e:25:ea:f2:06:1d:b5:5e:bc:d9:de:68:21:6e:a9: ab:44:db:5d:84:29:a0:73:3d:d9:2c:77:e1:32:95: 7e:76:b0:5b:1c:29:af:11:32:0b:7b:03:ac:62:8f: c7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FA:0A:83:EE:DE:EB:4B:38:27:38:FC:57:86:19:03:B5:BD:31:BE X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e4:6c:38:2b:d6:f9:e4:03:e8:1b:67:a7:a7:3b:53:b4:3b: e7:70:05:ca:50:93:7f:14:f4:59:18:08:d9:ce:e1:85:e8:57: aa:d8:a9:b0:c6:14:f7:55:18:a8:18:49:17:14:b7:41:f1:09: e9:b3:9b:88:93:61:ec:d1:93:ad:15:8f:64:66:da:7b:18:a2: 8e:da:af:c2:3e:1b:0e:dc:89:78:2d:4b:86:87:5d:00:b5:e6: 19:fc:b7:9d:c0:b9:73:d6:38:00:33:21:cb:a7:da:f6:8d:33: 6f:be:88:6c:88:04:c1:79:4d:e8:5b:82:87:63:d7:27:5a:cf: 35:66:e4:70:9f:63:24:c0:47:93:1f:3a:99:5e:f9:ce:13:41: 77:81:fb:4d:4c:ac:43:b0:7f:f6:a7:ad:da:d5:33:22:a6:8d: 45:9c:7e:b4:4c:64:78:37:52:24:cf:aa:cb:b5:a4:41:28:96: 87:3d:12:33:fd:89:dc:a8:d3:1a:8b:d8:23:fc:d0:8f:7b:ad: 4e:77:ba:6a:44:bd:a8:1d:df:40:89:1d:1f:0e:fa:5f:fc:c3: 1e:a9:2e:f5:f1:69:c8:fc:9e:98:a7:20:03:9a:3f:d7:26:c0: f3:ed:6c:83:25:ef:8a:5d:39:f0:58:25:4e:7f:8f:b8:4f:8c: ca:33:5d:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUxMjE4MTcyMTMwWhcNMjUxMjI1MTcyMTMwWjAYMRYwFAYD VQQDDA02OTQ0MzgxYS0wOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvlU+kyekoXE0GhaI3oQJbM2XlEYlDslPTMxvFP4M9ukEkghU3EGg8OLNnsF 9h0INpyqQswcxguHPtvnpHK+0Q3x959kgONnnxYALSFuB7Mcv7vm6/th52rIhi2L zhH8ScTTBu/NUH2OyeAKoeNpdCcQd1610uEWCb5Wr/pTCCJdlZwP+4Zk30AtSueI x4stWjrjYZPhtdNzQdmtkoWXSqWimHiYU83sDQoK4X+mUpeq/vm9ix9WENvR2JNF E4+5Y9MR5FvHdLy6ZZf3D8Vux94eJeryBh21XrzZ3mghbqmrRNtdhCmgcz3ZLHfh MpV+drBbHCmvETILewOsYo/H6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH6CoPu 3utLOCc4/FeGGQO1vTG+MB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+5Gw4K9b55APoG2enpztTtDvncAXKUJN/FPRZGAjZzuGF6Feq2Kmw xhT3VRioGEkXFLdB8Qnps5uIk2Hs0ZOtFY9kZtp7GKKO2q/CPhsO3Il4LUuGh10A teYZ/LedwLlz1jgAMyHLp9r2jTNvvohsiATBeU3oW4KHY9cnWs81ZuRwn2MkwEeT HzqZXvnOE0F3gftNTKxDsH/2p63a1TMipo1FnH60TGR4N1Ikz6rLtaRBKJaHPRIz /YncqNMai9gj/NCPe61Od7pqRL2oHd9AiR0fDvpf/MMeqS718WnI/J6YpyADmj/X JsDz7WyDJe+KXTnwWCVOf4+4T4zKM11I -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:18 2025 by rpki-client