This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft File: TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json) Hash identifier: xTk3Kg+e5BVbpqBPsbw5vZibnZjODq3DCDQKRbGpKG8= Subject key identifier: 54:6B:2B:BE:07:6D:A1:FF:E8:DE:41:95:BB:98:9F:2E:70:61:BD:0C Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3 Certificate issuer: /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft Manifest number: 05CB Signing time: Thu 18 Dec 2025 23:56:48 +0000 Manifest this update: Thu 18 Dec 2025 23:56:48 +0000 Manifest next update: Thu 25 Dec 2025 23:56:48 +0000 Files and hashes: 1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: ONlW5fe8IGeOQUY0FWPsbDicL1Ap7rBW3Q60X5cV0jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3 Validity Not Before: Dec 18 23:56:48 2025 GMT Not After : Dec 25 23:56:48 2025 GMT Subject: CN=694494c0-1f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:53:4d:35:c2:96:43:57:61:b7:b5:fa:80: 22:c6:f2:2a:02:08:20:6d:aa:77:aa:8b:b0:ab:6f: b6:59:e4:f8:4d:52:22:e2:8c:09:4a:c1:39:79:ae: bc:bc:d5:3e:c1:1f:09:2a:5d:1a:a5:85:57:f2:68: 30:d7:b1:c2:0e:41:f9:4d:72:f4:0c:97:92:f7:32: 2a:90:81:ba:a3:5c:5c:35:00:74:fd:bf:59:23:9d: 80:b4:35:dc:5b:38:78:b8:e5:ec:7e:83:9d:85:18: 59:0d:29:7a:11:89:14:dc:9a:8b:68:65:06:1e:e3: 55:7c:df:a1:94:b7:75:d2:88:97:a9:1a:f2:0f:7d: 87:26:5b:c1:03:9d:d0:6a:b3:26:bd:cf:0c:67:e8: ad:27:a1:ff:b2:45:b6:d3:a5:c8:2c:a2:00:b9:f9: 7c:09:e7:d4:3d:03:6e:26:64:8f:a8:02:e9:d8:17: 41:39:5e:57:39:40:6f:e1:5a:c1:7a:3d:60:a6:d3: 96:52:01:0a:6b:fc:7b:64:5a:07:c3:02:fd:6e:8f: 75:ee:d9:bb:ed:23:e2:43:d3:d0:c0:59:f3:45:b2: d9:eb:cc:e8:dc:31:2a:e0:80:b5:63:33:81:1f:0d: 1f:3c:3f:2f:e9:83:b2:98:5d:92:ea:41:44:98:6b: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:2B:BE:07:6D:A1:FF:E8:DE:41:95:BB:98:9F:2E:70:61:BD:0C X509v3 Authority Key Identifier: keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fd:1e:9f:25:32:a2:d7:ca:4f:b5:06:22:10:dc:0a:7d:58: a7:20:18:8f:32:e3:05:67:71:86:58:cd:7a:39:ae:dc:a3:18: b2:3a:b8:30:6b:74:40:b6:c2:7c:78:ad:c7:17:76:be:0e:43: 63:71:e6:bb:23:8d:a6:fa:b8:9c:37:37:00:4d:12:88:e8:7c: 6e:fb:7b:a8:ca:ed:e9:1b:0f:60:9e:06:d9:b5:bf:f2:6c:98: 8e:d1:45:10:aa:97:cc:98:e2:4a:89:8f:5e:d9:57:b2:15:d0: b6:ed:ee:ac:fe:93:4d:81:59:3d:62:51:23:97:48:92:d6:ed: bf:56:fb:a7:e1:de:eb:cf:99:f7:c8:de:b6:4f:5c:51:3f:24: ab:cb:ad:b0:29:6d:be:c2:96:46:46:24:93:f8:6f:41:0e:5a: ea:b7:60:69:e4:7d:0b:54:f7:8c:7c:e1:ea:fd:53:9f:07:3a: 42:8f:7a:54:4f:29:87:4b:49:55:19:6b:0b:d3:22:85:0b:40: b0:0f:e0:0c:04:70:20:3b:d2:02:34:74:54:0f:9f:f6:b5:00: d1:b1:ed:1b:45:bc:3c:92:63:b1:49:fe:36:b2:f1:24:d1:17: 47:fb:6c:2e:3b:dc:d7:77:eb:48:74:af:00:36:68:a6:24:1b: 64:7c:b6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0RkExMTAvBgNVBAUTKDREMzlERTNFNTA2MDY4QzM4MzZBMDA1NDgxNTU0MTNF NjgyNTk1QjMwHhcNMjUxMjE4MjM1NjQ4WhcNMjUxMjI1MjM1NjQ4WjAYMRYwFAYD VQQDDA02OTQ0OTRjMC0xZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PZTTTXClkNXYbe1+oAixvIqAgggbap3qouwq2+2WeT4TVIi4owJSsE5ea68 vNU+wR8JKl0apYVX8mgw17HCDkH5TXL0DJeS9zIqkIG6o1xcNQB0/b9ZI52AtDXc Wzh4uOXsfoOdhRhZDSl6EYkU3JqLaGUGHuNVfN+hlLd10oiXqRryD32HJlvBA53Q arMmvc8MZ+itJ6H/skW206XILKIAufl8CefUPQNuJmSPqALp2BdBOV5XOUBv4VrB ej1gptOWUgEKa/x7ZFoHwwL9bo917tm77SPiQ9PQwFnzRbLZ68zo3DEq4IC1YzOB Hw0fPD8v6YOymF2S6kFEmGvOkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRrK74H baH/6N5BlbuYny5wYb0MMB8GA1UdIwQYMBaAFE053j5QYGjDg2oAVIFVQT5oJZWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB NkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FNT0RhZ0JVZ1ZWQlBtZ2xs Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RUbmVQbEJnYU1PRGFnQlVnVlZCUG1nbGxiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FN T0RhZ0JVZ1ZWQlBtZ2xsYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN/R6fJTKi18pPtQYiENwKfVinIBiPMuMFZ3GGWM16Oa7coxiyOrgw a3RAtsJ8eK3HF3a+DkNjcea7I42m+ricNzcATRKI6Hxu+3uoyu3pGw9gngbZtb/y bJiO0UUQqpfMmOJKiY9e2VeyFdC27e6s/pNNgVk9YlEjl0iS1u2/Vvun4d7rz5n3 yN62T1xRPySry62wKW2+wpZGRiST+G9BDlrqt2Bp5H0LVPeMfOHq/VOfBzpCj3pU TymHS0lVGWsL0yKFC0CwD+AMBHAgO9ICNHRUD5/2tQDRse0bRbw8kmOxSf42svEk 0RdH+2wuO9zXd+tIdK8ANmimJBtkfLYU -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:21 2025 by rpki-client