This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json) Hash identifier: pqhAYHrc8ytT8/kWuOcF7kbQbbKzFIq4/J6qYTTT8i8= Subject key identifier: D5:0A:D9:C3:5A:4C:03:93:5A:23:E7:3E:C5:3D:2B:AA:6D:5A:1F:13 Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538 Certificate serial: 0B84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft Manifest number: 0B7C Signing time: Wed 31 Dec 2025 18:49:16 +0000 Manifest this update: Wed 31 Dec 2025 18:49:16 +0000 Manifest next update: Wed 07 Jan 2026 18:49:16 +0000 Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: KZk84Ufmb5HP+uMTGIu5anyOvunCylKr2UcyXeb1Ux0=) 2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: o16pooFHIEBYiC/U+8swfJroVM1JsQPPQfuyHDWfNA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 18:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2948 (0xb84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538 Validity Not Before: Dec 31 18:49:16 2025 GMT Not After : Jan 7 18:49:16 2026 GMT Subject: CN=6955702c-3617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:49:f0:68:44:25:36:f0:6b:47:06:f0:b1: 55:86:32:e6:fe:02:77:c5:10:46:00:a5:90:eb:f0: f6:c6:79:18:bf:d7:43:5d:4f:c6:c8:b6:c7:06:26: d1:cc:2d:3d:8b:d4:dd:06:2e:e6:69:f4:ab:de:f9: 8e:b6:ee:45:32:fd:a8:e5:dd:83:db:68:3a:df:c5: 5c:b7:80:9f:20:05:21:f2:08:36:15:b9:89:8e:49: 0f:19:22:a2:6c:36:51:08:55:15:d0:ec:cc:0e:12: 24:60:41:d8:53:3b:19:b6:6c:8b:6f:23:79:15:02: e5:32:ad:ff:0e:f7:7a:ee:b3:09:1e:91:0c:c3:5f: 94:7d:f5:ca:d4:02:58:7f:bd:2b:d0:f7:63:9b:2a: 76:fc:83:f0:ac:f5:f5:7d:07:3c:37:7d:08:94:a3: b1:55:27:72:d0:39:46:aa:69:68:79:03:98:3d:37: 02:da:3e:9d:0d:42:5d:da:49:88:cb:63:71:da:c0: 74:5a:75:bf:81:84:46:01:38:19:43:00:bb:ce:c0: 97:d5:94:c7:d6:63:80:a1:64:a4:b0:ac:96:ff:05: a4:30:9c:a7:0e:03:9f:74:d9:de:f8:b0:61:55:7a: 84:d8:a2:93:eb:63:f1:8a:0d:07:73:08:7b:05:74: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0A:D9:C3:5A:4C:03:93:5A:23:E7:3E:C5:3D:2B:AA:6D:5A:1F:13 X509v3 Authority Key Identifier: keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ec:77:32:b3:1a:ac:46:df:fd:5f:6a:23:5d:b3:85:6d:3c: e2:f4:cb:ca:9b:bb:df:a5:87:71:35:fa:f5:84:0f:49:5c:a1: 6c:01:97:30:6e:ca:82:92:3b:82:6e:46:c0:83:c2:69:be:43: a6:8c:6b:f9:c8:79:b4:26:4b:7c:ca:27:22:7d:82:58:ee:9f: 31:eb:2c:3b:b0:07:59:cc:3d:9a:8c:2c:e2:74:79:b9:0e:f7: 7b:15:0d:3b:70:e6:34:6d:f9:96:f1:89:35:b4:0f:d4:e1:ae: b9:39:9e:a0:d2:1c:0d:fd:82:7e:40:f2:e9:18:c3:19:60:e5: 08:f5:1e:f4:61:1e:d2:04:52:7f:34:d6:5a:57:3c:dd:65:a1: a9:0d:56:ae:2a:03:46:03:9a:cd:3f:b5:82:8e:af:62:0c:93: d0:34:27:a3:fc:3a:35:d1:26:72:76:98:15:4b:b4:f7:7d:83: 7f:1e:5a:95:84:fa:cb:5a:af:a0:d4:52:11:ac:9c:d0:5a:cd: 79:4e:1e:48:16:5f:58:2e:2f:ab:c0:fc:5a:20:f6:17:ab:63: fa:25:d1:c5:9b:4c:3d:0e:1a:d5:36:13:91:25:61:6b:65:4b: ce:7f:43:7d:df:2a:51:32:95:38:47:4c:d7:a2:35:ee:2e:fe: 3f:e2:7d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5MjdEMTY4Nzc1 RDc4M0Q1MzgwHhcNMjUxMjMxMTg0OTE2WhcNMjYwMTA3MTg0OTE2WjAYMRYwFAYD VQQDDA02OTU1NzAyYy0zNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlJJ8GhEJTbwa0cG8LFVhjLm/gJ3xRBGAKWQ6/D2xnkYv9dDXU/GyLbHBibR zC09i9TdBi7mafSr3vmOtu5FMv2o5d2D22g638Vct4CfIAUh8gg2FbmJjkkPGSKi bDZRCFUV0OzMDhIkYEHYUzsZtmyLbyN5FQLlMq3/Dvd67rMJHpEMw1+UffXK1AJY f70r0Pdjmyp2/IPwrPX1fQc8N30IlKOxVSdy0DlGqmloeQOYPTcC2j6dDUJd2kmI y2Nx2sB0WnW/gYRGATgZQwC7zsCX1ZTH1mOAoWSksKyW/wWkMJynDgOfdNne+LBh VXqE2KKT62Pxig0Hcwh7BXQuswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUK2cNa TAOTWiPnPsU9K6ptWh8TMB8GA1UdIwQYMBaAFLUXTYJlZJzdJ0Jskn0Wh3XXg9U4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDQ1OS85OUVDODlFQzQy MjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25OMG5RbXlTZlJhSGRkZUQx VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RSZE5nbVZrbk4wblFteVNmUmFIZGRlRDFUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDQ1OS85OUVDODlFQzQyMjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25O MG5RbXlTZlJhSGRkZUQxVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT7HcysxqsRt/9X2ojXbOFbTzi9MvKm7vfpYdxNfr1hA9JXKFsAZcw bsqCkjuCbkbAg8JpvkOmjGv5yHm0Jkt8yicifYJY7p8x6yw7sAdZzD2ajCzidHm5 Dvd7FQ07cOY0bfmW8Yk1tA/U4a65OZ6g0hwN/YJ+QPLpGMMZYOUI9R70YR7SBFJ/ NNZaVzzdZaGpDVauKgNGA5rNP7WCjq9iDJPQNCej/Do10SZydpgVS7T3fYN/HlqV hPrLWq+g1FIRrJzQWs15Th5IFl9YLi+rwPxaIPYXq2P6JdHFm0w9DhrVNhORJWFr ZUvOf0N93ypRMpU4R0zXojXuLv4/4n0T -----END CERTIFICATE-----Generated at Thu Jan 1 07:35:44 2026 by rpki-client