This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: 5pToPBLbwr8SFJtvMq1/1I817WPM9MV9z2i/9Bf8Oc4= Subject key identifier: 91:60:05:9E:DC:A2:48:B1:D3:CA:00:B1:80:6D:58:26:05:32:F4:D6 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 06AD Signing time: Sun 28 Dec 2025 21:22:38 +0000 Manifest this update: Sun 28 Dec 2025 21:22:37 +0000 Manifest next update: Sun 04 Jan 2026 21:22:37 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: w/bvFtRir4nYD0oo6FtjH9w9taVzi13ETkvT5Eun1X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Dec 28 21:22:37 2025 GMT Not After : Jan 4 21:22:37 2026 GMT Subject: CN=69519f9d-d4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:24:96:a4:aa:b7:35:fd:8a:d4:75:16:29: b1:e3:e8:c3:82:32:f9:bd:a3:a2:3b:20:d0:45:44: c0:4a:15:8a:bb:1c:ff:38:fa:c9:21:ca:4f:59:38: ad:41:05:cd:0d:98:f6:33:61:98:59:2d:94:50:6d: 62:22:14:81:c2:f1:6e:43:d4:bb:21:b7:4b:4a:f3: e5:30:c0:0a:8d:e7:66:05:4d:f4:e1:97:dc:06:17: 99:3f:88:05:cb:28:42:ed:17:d8:4a:f5:4f:6f:ab: 81:5d:6f:40:2e:49:98:7e:27:3d:76:b3:a5:34:66: c9:56:37:b9:ee:11:32:7d:e8:aa:33:2f:38:12:94: 5d:55:b6:fa:24:18:22:45:a0:b0:af:33:28:b7:a2: 07:fb:32:f8:a1:2b:9a:05:16:b7:86:98:6e:d6:fc: a7:58:da:2f:39:50:a7:0e:eb:f1:e6:a1:a8:ab:c2: 15:a9:1d:7a:7f:56:40:d5:8b:e4:1f:21:01:85:5e: 9c:b3:13:d6:da:16:4e:dc:b5:e4:e2:46:02:cc:5a: 38:e0:c8:16:9f:de:46:b6:10:ba:cb:2d:a6:69:fc: 35:02:3d:cf:88:a2:02:e5:50:3c:e0:55:b5:9f:48: f3:bd:45:e2:0f:af:2e:07:91:cd:39:79:b2:7d:f8: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:05:9E:DC:A2:48:B1:D3:CA:00:B1:80:6D:58:26:05:32:F4:D6 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:93:89:2b:94:14:ce:fc:dd:e1:24:1c:7b:30:63:4a:af:52: f7:b6:75:4f:81:ee:2c:37:f1:a2:34:83:23:bf:bf:02:c4:aa: 28:ba:f0:bc:d4:e3:fe:e6:03:3b:9f:f3:1a:ae:4f:57:51:34: 70:e1:cb:42:bf:0d:bc:3e:67:1f:7c:ab:56:19:e8:af:fb:3b: 15:7e:3e:1f:94:e2:4d:d6:db:d4:83:00:33:55:cc:48:9e:03: 55:a3:07:d5:29:37:1a:b3:6f:5c:e7:de:30:22:c1:2a:41:2f: e4:45:fe:db:43:2b:f3:5c:b8:50:af:2f:ce:87:76:66:46:5c: 27:23:a5:59:7e:cb:00:92:9d:9d:46:18:93:b7:00:28:4d:3b: 41:48:8b:0f:de:0a:77:b6:87:48:78:3a:56:69:55:55:2f:74: ea:9f:39:0e:13:bf:0d:d9:c9:10:d5:38:6a:8a:90:6f:f8:52: c7:43:3b:30:78:67:4f:77:49:b2:e9:71:eb:e6:5b:df:27:f6: 44:4c:7c:8c:72:21:0c:3f:97:7d:45:b5:3d:bc:e0:8d:da:3b: 56:73:68:cf:b0:ca:25:9a:bc:a0:26:38:f0:a5:a3:bb:6c:7a: 90:e8:4f:a6:a7:0f:5e:b3:3a:64:46:17:03:fa:c3:69:8b:fb: 1f:44:84:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUxMjI4MjEyMjM3WhcNMjYwMTA0MjEyMjM3WjAYMRYwFAYD VQQDDA02OTUxOWY5ZC1kNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HMklqSqtzX9itR1Fimx4+jDgjL5vaOiOyDQRUTAShWKuxz/OPrJIcpPWTit QQXNDZj2M2GYWS2UUG1iIhSBwvFuQ9S7IbdLSvPlMMAKjedmBU304ZfcBheZP4gF yyhC7RfYSvVPb6uBXW9ALkmYfic9drOlNGbJVje57hEyfeiqMy84EpRdVbb6JBgi RaCwrzMot6IH+zL4oSuaBRa3hphu1vynWNovOVCnDuvx5qGoq8IVqR16f1ZA1Yvk HyEBhV6csxPW2hZO3LXk4kYCzFo44MgWn95GthC6yy2mafw1Aj3PiKIC5VA84FW1 n0jzvUXiD68uB5HNOXmyffgUuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFgBZ7c okix08oAsYBtWCYFMvTWMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqk4krlBTO/N3hJBx7MGNKr1L3tnVPge4sN/GiNIMjv78CxKoouvC8 1OP+5gM7n/Mark9XUTRw4ctCvw28PmcffKtWGeiv+zsVfj4flOJN1tvUgwAzVcxI ngNVowfVKTcas29c594wIsEqQS/kRf7bQyvzXLhQry/Oh3ZmRlwnI6VZfssAkp2d RhiTtwAoTTtBSIsP3gp3todIeDpWaVVVL3TqnzkOE78N2ckQ1ThqipBv+FLHQzsw eGdPd0my6XHr5lvfJ/ZETHyMciEMP5d9RbU9vOCN2jtWc2jPsMolmrygJjjwpaO7 bHqQ6E+mpw9eszpkRhcD+sNpi/sfRIRf -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:54 2025 by rpki-client