This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json) Hash identifier: qgob06767qUP5lcbZCJItd/lmf7eK/gkkur4zvoejxo= Subject key identifier: F3:67:79:71:A3:EF:85:8D:E6:4D:82:6F:F5:18:5F:07:19:C4:01:54 Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft Manifest number: 0128 Signing time: Sun 21 Dec 2025 03:51:17 +0000 Manifest this update: Sun 21 Dec 2025 03:51:17 +0000 Manifest next update: Sun 28 Dec 2025 03:51:17 +0000 Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: O4n/ShRa2A2VX23lJ49SbXezTHRDhwMAQYW/wNgD2tU=) 2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: Eb8AfFxkY2lunIzmPfp9ZyHAYk+RBb0a8BG4v3YCxDc=) 3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: Bg47WQyQqPO6vhS9f39oGO32kv0x8D/332r6YxTMVPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Validity Not Before: Dec 21 03:51:17 2025 GMT Not After : Dec 28 03:51:17 2025 GMT Subject: CN=69476eb5-ebdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:0a:d6:08:86:12:03:17:0a:49:d2:26:a9: 4e:b7:6e:5c:9a:61:78:f7:72:a4:56:18:89:8e:8c: d4:81:8a:56:4a:2f:ef:95:b7:10:16:b7:f6:e9:07: 20:73:bb:ab:38:0b:c3:29:89:2c:ad:7d:86:04:d8: a3:36:8f:df:41:49:7f:14:c6:b5:6b:58:26:e8:03: 22:04:5b:0a:b9:c7:09:88:aa:00:9f:3b:83:4c:bb: 7e:3e:78:7b:cd:da:73:7e:f6:b6:4e:32:e3:b3:3c: 5b:4d:29:ed:7a:ae:6e:41:47:7f:63:12:71:5e:83: 1a:09:63:d1:ac:05:71:6a:fe:61:8c:47:9b:ba:60: 77:e9:67:0f:16:80:10:34:89:25:02:ef:78:d3:e3: d7:c8:9a:5f:ce:92:8c:a9:02:a0:f8:18:10:c5:cc: 8d:3d:1c:92:4c:57:3f:d1:6f:6a:f8:2c:49:dc:59: 4f:e7:11:83:dd:c0:ed:00:11:7a:44:5f:9f:6d:6a: 06:87:c5:c9:0f:fb:dd:e2:b9:0c:74:ef:2e:68:d4: 24:9f:9a:72:ee:da:ff:3a:19:71:7b:b9:b0:ce:8c: 4d:62:a7:0f:f2:56:08:ac:8f:cb:6e:73:46:81:56: 3c:1e:b1:70:8b:8f:06:e8:e3:32:98:20:49:a2:21: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:67:79:71:A3:EF:85:8D:E6:4D:82:6F:F5:18:5F:07:19:C4:01:54 X509v3 Authority Key Identifier: keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:81:66:c2:27:c9:79:6c:ae:26:d3:d3:25:c8:05:7b:25:3e: 39:9a:9c:58:ee:49:e8:fc:3b:14:7a:3d:ae:50:1d:87:c8:a2: c8:1e:d3:6d:56:c1:ef:74:8a:eb:57:5c:f7:4a:72:33:9c:7e: 77:b0:bb:66:3f:f1:64:d3:1f:fc:45:ab:71:63:20:53:05:b4: f9:fe:71:fa:85:f2:f0:c3:5a:8e:b9:8d:9a:cc:96:cd:f7:1f: 64:f5:e1:35:85:38:c4:ff:ac:b5:08:3c:da:d5:35:f2:b9:13: ec:d6:d6:c9:e5:a1:e1:b1:f3:52:4d:1e:c5:58:e4:16:e9:6c: 6c:fb:06:e6:ff:bd:08:08:b1:f8:ad:ba:6f:c5:05:bf:c5:16: d0:00:b7:36:8d:32:49:e1:28:d6:13:11:9f:bd:a0:45:77:26: 08:30:f4:83:06:37:ef:c1:bb:ec:86:11:6e:e2:66:53:de:2b: 69:e6:95:33:bb:dc:65:d1:87:2e:3f:d5:69:29:e6:39:b6:c5: 86:ca:7f:bb:7b:28:74:a4:0f:70:75:e0:ef:13:63:e3:03:45: 49:16:02:16:a2:8c:38:7b:75:3f:14:97:d9:37:45:dc:75:08: 44:0f:de:ca:6f:3c:29:e7:d8:cc:7a:23:a0:c3:a0:7d:3f:eb: b6:c6:47:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4 RkFGMUQyQjcwHhcNMjUxMjIxMDM1MTE3WhcNMjUxMjI4MDM1MTE3WjAYMRYwFAYD VQQDDA02OTQ3NmViNS1lYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxAK1giGEgMXCknSJqlOt25cmmF493KkVhiJjozUgYpWSi/vlbcQFrf26Qcg c7urOAvDKYksrX2GBNijNo/fQUl/FMa1a1gm6AMiBFsKuccJiKoAnzuDTLt+Pnh7 zdpzfva2TjLjszxbTSnteq5uQUd/YxJxXoMaCWPRrAVxav5hjEebumB36WcPFoAQ NIklAu940+PXyJpfzpKMqQKg+BgQxcyNPRySTFc/0W9q+CxJ3FlP5xGD3cDtABF6 RF+fbWoGh8XJD/vd4rkMdO8uaNQkn5py7tr/Ohlxe7mwzoxNYqcP8lYIrI/LbnNG gVY8HrFwi48G6OMymCBJoiHJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNneXGj 74WN5k2Cb/UYXwcZxAFUMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH NmZNSzkwcFl4bWVQcngwcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbgWbCJ8l5bK4m09MlyAV7JT45mpxY7kno/DsUej2uUB2HyKLIHtNt VsHvdIrrV1z3SnIznH53sLtmP/Fk0x/8RatxYyBTBbT5/nH6hfLww1qOuY2azJbN 9x9k9eE1hTjE/6y1CDza1TXyuRPs1tbJ5aHhsfNSTR7FWOQW6Wxs+wbm/70ICLH4 rbpvxQW/xRbQALc2jTJJ4SjWExGfvaBFdyYIMPSDBjfvwbvshhFu4mZT3itp5pUz u9xl0YcuP9VpKeY5tsWGyn+7eyh0pA9wdeDvE2PjA0VJFgIWoow4e3U/FJfZN0Xc dQhED97Kbzwp59jMeiOgw6B9P+u2xkeY -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:36 2025 by rpki-client