This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: I3igAfWboR1RsP36+QmZYudkiWDvh8q9mkfiPhV9b5o= Subject key identifier: 3F:3E:D9:6E:BF:74:17:2C:A4:86:D0:E8:BE:98:EF:53:A7:D8:C5:0E Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 0468 Signing time: Thu 18 Dec 2025 23:30:34 +0000 Manifest this update: Thu 18 Dec 2025 23:30:33 +0000 Manifest next update: Thu 25 Dec 2025 23:30:33 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: zeUl/R3cv7Yunw1QOfTn73jB16Q5NXcgVywc5DexbuI=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 306xxmMO0L8F4kDhDkLe1fwHAL2pRNtzpCEiuu3Fy6g=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: 09H6WJNzMO6bY1CShsLhlCFgsX+1B/xNo5NQ+Cdhlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Dec 18 23:30:33 2025 GMT Not After : Dec 25 23:30:33 2025 GMT Subject: CN=69448e9a-3f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:f7:28:e9:8a:a7:a9:f5:db:bf:98:db:eb: 7a:b4:b9:03:ec:c8:3a:58:32:a4:a3:ed:16:ec:1a: d7:40:4e:36:2d:73:dd:30:d5:33:bb:58:20:1e:9d: 97:13:fe:fb:40:95:d8:47:e8:7e:1e:f5:06:df:26: 89:93:2f:f4:86:51:cd:5e:86:3b:32:9f:16:22:9d: c9:ba:c8:01:4c:34:0a:03:03:c8:be:34:08:4e:79: ba:7b:23:22:77:9b:51:bf:89:a3:0e:a3:5f:24:f4: 45:f5:f4:5e:f7:81:0f:6f:df:d8:a0:17:86:f5:84: 2f:79:68:51:ce:13:d9:3a:5d:d5:bf:af:5d:2c:89: 56:a5:f2:fb:db:a1:6b:9e:01:fa:2b:9f:5f:c5:81: db:10:d8:e9:3a:a8:53:78:33:39:dc:b0:69:cb:4f: b3:4d:47:27:02:38:d3:91:d8:fe:3d:93:14:df:36: 9a:5f:92:cb:a5:eb:e3:67:1d:c9:59:36:83:fa:44: 83:4e:08:89:ef:92:29:f5:b5:c4:bc:63:99:25:42: 92:bf:3a:65:09:f2:fb:7d:2e:5f:e6:59:1e:90:42: ee:ab:f9:08:81:84:7a:ab:0e:2a:44:3f:87:08:40: 9b:6c:3a:9c:11:16:20:81:88:78:d1:fd:ef:a3:71: 1a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3E:D9:6E:BF:74:17:2C:A4:86:D0:E8:BE:98:EF:53:A7:D8:C5:0E X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:dd:47:c3:b5:72:d1:3b:78:4b:a8:09:81:71:27:03:f3:1b: 50:e0:b8:16:6e:9f:7f:86:9d:07:87:0a:24:55:df:23:3e:db: 3a:ea:63:b2:bf:ef:a4:af:56:99:4f:c5:e5:14:b7:6f:3e:d0: 49:f2:d6:2f:8f:23:2d:cd:5d:b2:4e:e8:1e:2f:e2:ad:96:95: 20:8f:ff:00:c4:fb:44:c5:6f:04:8e:45:9d:55:2b:44:59:2b: 51:5b:05:3c:ff:96:eb:a4:61:c6:7a:94:07:c9:8c:c8:fe:44: a2:91:19:86:28:8a:c3:c7:68:90:aa:a5:2f:a5:fb:fe:f6:7d: fa:38:ff:4a:6c:25:f8:36:b3:4b:61:76:e5:91:51:6d:91:5d: 64:3a:83:5d:4f:db:42:bc:57:85:5f:52:26:9b:19:58:7f:32: a4:2c:12:70:88:a4:6a:b5:14:7b:4b:70:93:57:d5:39:6e:0e: 79:51:f5:2c:7f:ce:2a:09:c8:f0:62:0c:d3:3f:8f:aa:2f:94: b7:7b:cf:3c:68:83:62:7c:81:8c:dd:c2:ed:77:c3:19:ac:a8: 2c:cb:74:03:8e:1d:12:8b:5e:8f:71:0a:47:8a:4a:93:95:7f: 70:3f:f0:ad:23:61:f3:86:2a:9c:1d:3e:3e:88:4b:d7:a9:8f: a9:b5:12:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUxMjE4MjMzMDMzWhcNMjUxMjI1MjMzMDMzWjAYMRYwFAYD VQQDDA02OTQ0OGU5YS0zZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mb3KOmKp6n127+Y2+t6tLkD7Mg6WDKko+0W7BrXQE42LXPdMNUzu1ggHp2X E/77QJXYR+h+HvUG3yaJky/0hlHNXoY7Mp8WIp3JusgBTDQKAwPIvjQITnm6eyMi d5tRv4mjDqNfJPRF9fRe94EPb9/YoBeG9YQveWhRzhPZOl3Vv69dLIlWpfL726Fr ngH6K59fxYHbENjpOqhTeDM53LBpy0+zTUcnAjjTkdj+PZMU3zaaX5LLpevjZx3J WTaD+kSDTgiJ75Ip9bXEvGOZJUKSvzplCfL7fS5f5lkekELuq/kIgYR6qw4qRD+H CECbbDqcERYggYh40f3vo3EaZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8+2W6/ dBcspIbQ6L6Y71On2MUOMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv3UfDtXLRO3hLqAmBcScD8xtQ4LgWbp9/hp0HhwokVd8jPts66mOy v++kr1aZT8XlFLdvPtBJ8tYvjyMtzV2yTugeL+KtlpUgj/8AxPtExW8EjkWdVStE WStRWwU8/5brpGHGepQHyYzI/kSikRmGKIrDx2iQqqUvpfv+9n36OP9KbCX4NrNL YXblkVFtkV1kOoNdT9tCvFeFX1ImmxlYfzKkLBJwiKRqtRR7S3CTV9U5bg55UfUs f84qCcjwYgzTP4+qL5S3e888aINifIGM3cLtd8MZrKgsy3QDjh0Si16PcQpHikqT lX9wP/CtI2HzhiqcHT4+iEvXqY+ptRLR -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:35 2025 by rpki-client