This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: Gv+rHwOgQ0kcATQES1DHCXk4F+lYAiFEV95yqZtMLjk= Subject key identifier: 82:E2:C3:94:77:48:03:13:E9:44:77:13:D8:4A:35:B7:E2:8E:2C:9B Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 04B3 Signing time: Sat 20 Dec 2025 23:11:17 +0000 Manifest this update: Sat 20 Dec 2025 23:11:16 +0000 Manifest next update: Sat 27 Dec 2025 23:11:16 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: pddUPst+KdvVzIM53N7tbbMzguJCDQh3fl+mdvW15x0=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Dec 20 23:11:16 2025 GMT Not After : Dec 27 23:11:16 2025 GMT Subject: CN=69472d14-12d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:e1:1d:9d:44:eb:c9:08:59:87:7e:f5:e8: 5f:ae:3c:b0:c7:b5:e9:e4:87:f5:0d:4d:b3:0a:9a: 0c:d9:de:1e:51:e3:22:2b:85:b9:8b:b1:1f:0c:09: 67:7b:9a:b3:fa:2b:ff:9a:d0:54:56:b0:7d:e2:9c: 1a:2b:64:b0:09:78:b5:62:57:52:b9:34:1e:d1:12: d4:e6:f7:af:13:4a:e5:89:dd:54:26:88:76:f8:19: 05:b5:48:07:52:83:9c:88:5f:75:b8:c7:53:14:75: 34:a4:03:f7:6d:6b:22:71:30:a5:f7:3d:86:7c:70: f4:18:c6:00:8e:a5:a8:9e:49:a6:ba:f2:a8:4f:b3: bf:25:dd:ad:41:76:eb:a7:c7:3e:8f:59:d0:f1:b7: 4d:9f:6c:ef:c8:1c:6a:14:55:72:3d:26:1f:6c:8a: 76:fd:f2:1f:2e:3e:fb:f3:52:45:3b:20:7d:93:34: 9e:c8:c7:a0:b4:3d:ec:7f:ff:8a:75:6a:7f:9c:a2: 27:04:e8:e9:a1:2c:b1:9b:a2:62:29:2b:8a:71:cb: 96:18:2a:e1:b7:a7:11:d4:1e:e2:64:ba:b4:62:ce: a5:47:47:8a:69:c6:21:7c:f7:f6:6e:ea:aa:49:e9: 75:61:12:40:02:d6:dc:3b:5e:4c:ec:c5:1e:e8:bb: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E2:C3:94:77:48:03:13:E9:44:77:13:D8:4A:35:B7:E2:8E:2C:9B X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e0:02:a6:22:90:04:fb:91:65:0d:d0:b1:3d:49:16:07:7d: cb:26:21:83:ac:68:a6:d1:13:65:f6:f1:cc:1a:c0:4e:d6:94: 5b:d1:0a:37:28:59:11:c5:67:56:aa:37:1b:f4:73:ad:68:e3: ea:03:62:94:65:bf:72:85:6a:5f:64:22:bd:80:08:21:95:ee: 6d:eb:72:ca:34:c1:a1:d0:09:11:b5:93:4f:59:42:63:b1:1b: 21:f1:a7:c8:85:0d:85:41:c5:68:2a:69:7a:0c:b9:c5:8b:4d: 90:9d:75:6a:57:78:f0:d3:cc:e0:c4:59:2d:28:57:f1:52:f2: 79:23:a3:04:71:2e:06:8b:69:44:4f:bb:40:2b:a7:65:97:bc: 9e:61:6d:f9:3b:1e:1e:d7:e3:22:d4:24:3f:1f:e7:01:f4:5d: 04:be:9f:00:94:e7:92:30:1c:53:e7:c9:26:d2:58:39:57:20: c3:02:2b:7e:9f:22:05:4d:3b:85:26:13:c8:4a:20:dd:78:4a: ef:fd:4f:c5:0b:a0:02:03:61:43:92:8a:e6:28:95:9d:b1:da: 90:e5:fd:02:cd:fd:6a:76:cc:77:df:84:da:a4:f9:1d:30:71: 3c:a4:fb:f5:e0:95:74:7d:2b:73:94:dc:72:a8:f2:7e:41:59: 39:f4:d6:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjUxMjIwMjMxMTE2WhcNMjUxMjI3MjMxMTE2WjAYMRYwFAYD VQQDDA02OTQ3MmQxNC0xMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtavhHZ1E68kIWYd+9ehfrjywx7Xp5If1DU2zCpoM2d4eUeMiK4W5i7EfDAln e5qz+iv/mtBUVrB94pwaK2SwCXi1YldSuTQe0RLU5vevE0rlid1UJoh2+BkFtUgH UoOciF91uMdTFHU0pAP3bWsicTCl9z2GfHD0GMYAjqWonkmmuvKoT7O/Jd2tQXbr p8c+j1nQ8bdNn2zvyBxqFFVyPSYfbIp2/fIfLj7781JFOyB9kzSeyMegtD3sf/+K dWp/nKInBOjpoSyxm6JiKSuKccuWGCrht6cR1B7iZLq0Ys6lR0eKacYhfPf2buqq Sel1YRJAAtbcO15M7MUe6LvzjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILiw5R3 SAMT6UR3E9hKNbfijiybMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH4AKmIpAE+5FlDdCxPUkWB33LJiGDrGim0RNl9vHMGsBO1pRb0Qo3 KFkRxWdWqjcb9HOtaOPqA2KUZb9yhWpfZCK9gAghle5t63LKNMGh0AkRtZNPWUJj sRsh8afIhQ2FQcVoKml6DLnFi02QnXVqV3jw08zgxFktKFfxUvJ5I6MEcS4Gi2lE T7tAK6dll7yeYW35Ox4e1+Mi1CQ/H+cB9F0Evp8AlOeSMBxT58km0lg5VyDDAit+ nyIFTTuFJhPISiDdeErv/U/FC6ACA2FDkormKJWdsdqQ5f0Czf1qdsx334TapPkd MHE8pPv14JV0fStzlNxyqPJ+QVk59NZw -----END CERTIFICATE-----Generated at Sun Dec 21 02:14:40 2025 by rpki-client