This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: YDtTtZl8Zdhjs14ejLja6xZEjyp4hi0VtMYFcbbzyuI= Subject key identifier: 25:98:50:3F:93:5E:BF:9F:F4:18:D0:20:45:0D:49:65:06:BB:27:E5 Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: AB Signing time: Fri 19 Dec 2025 05:18:14 +0000 Manifest this update: Fri 19 Dec 2025 05:18:14 +0000 Manifest next update: Fri 26 Dec 2025 05:18:14 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: TKfpcPYD8IMHBjqWElDA7fa9orK7LQ2TA9wu7Pp4AsQ=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Dec 19 05:18:14 2025 GMT Not After : Dec 26 05:18:14 2025 GMT Subject: CN=6944e016-0e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bf:bb:24:3c:09:d9:fc:ec:77:87:b8:2f:02: 2e:e5:fa:3e:e9:f0:fc:49:dc:3d:c7:68:35:40:4a: 7a:9e:7c:87:dd:ea:71:05:5a:b2:c7:cc:8f:d4:25: 8b:76:7d:71:20:a3:42:36:65:b8:6c:79:82:85:54: 0e:b9:ab:dd:ca:04:29:e5:eb:a3:93:cd:9c:01:c8: b9:b3:60:2c:9f:28:76:f0:27:e2:2b:8a:60:e9:37: d6:c0:9d:ec:88:eb:4c:e7:1c:b2:ca:4e:51:08:27: 31:12:71:dc:aa:33:39:fa:83:fb:bb:73:85:69:ad: 6d:1b:48:87:79:18:66:6e:2d:74:a9:26:ad:35:91: 6f:b4:14:e2:be:13:a0:01:1b:74:8f:48:bd:f7:e8: 25:6a:39:2b:c6:03:f8:07:6e:60:f4:23:c9:41:6e: e0:ed:64:1c:49:ca:bd:d0:58:48:9f:7c:e5:e0:da: 36:07:b4:e9:30:bc:31:23:ee:9b:6b:f5:89:1c:9b: 09:0b:59:25:19:80:44:cf:01:f5:22:73:86:be:17: 01:dd:bc:bf:89:9c:d7:80:31:34:11:1c:25:8f:16: a2:10:98:d2:55:aa:bf:3d:f4:e4:91:1c:f5:72:21: cf:11:77:b1:dd:cb:6c:ff:30:c4:3b:a8:f4:8a:c9: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:50:3F:93:5E:BF:9F:F4:18:D0:20:45:0D:49:65:06:BB:27:E5 X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f7:ab:79:6f:a2:24:39:02:ac:b8:94:e2:84:69:44:da:f7: 1f:41:8e:fb:75:8b:84:0f:0c:25:83:38:77:8a:94:1b:23:30: 90:85:8e:c6:7c:21:bd:04:07:9a:66:69:ea:94:08:0d:08:55: e4:5e:2d:f7:a8:cb:af:44:20:bb:b6:37:15:e8:7b:b7:f1:d7: af:f3:46:6c:81:84:54:19:13:f8:fe:38:f9:13:8b:d3:1e:99: aa:ed:fb:18:33:51:74:83:ae:97:2c:2c:a2:a6:62:eb:26:c1: 2a:7f:9f:0d:51:94:56:3e:b3:57:b3:56:58:d2:99:f5:61:9d: bf:ce:73:e3:b0:b9:b7:54:53:78:25:ed:43:bc:77:57:97:48: 4e:83:fd:a8:7d:08:29:27:25:ef:30:d3:12:32:84:1f:4d:c6: 74:4a:34:ee:02:84:b4:32:00:10:81:60:de:c7:b1:76:16:9c: cc:a4:6e:e0:43:53:0a:6d:3e:27:5a:93:83:90:49:eb:4f:b1: 30:73:a5:19:c7:3d:ab:44:a4:07:54:8c:68:80:48:29:07:ef: a5:99:a0:9d:a2:ad:32:2d:2d:f2:6f:d7:12:8c:ab:a0:11:b5: 41:65:e9:fc:bb:43:c5:da:02:ca:c9:46:3d:38:b5:2c:94:c7: 6d:d8:d5:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB N0QwOTNGQjkwHhcNMjUxMjE5MDUxODE0WhcNMjUxMjI2MDUxODE0WjAYMRYwFAYD VQQDDA02OTQ0ZTAxNi0wZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7b+7JDwJ2fzsd4e4LwIu5fo+6fD8Sdw9x2g1QEp6nnyH3epxBVqyx8yP1CWL dn1xIKNCNmW4bHmChVQOuavdygQp5eujk82cAci5s2Asnyh28CfiK4pg6TfWwJ3s iOtM5xyyyk5RCCcxEnHcqjM5+oP7u3OFaa1tG0iHeRhmbi10qSatNZFvtBTivhOg ARt0j0i99+glajkrxgP4B25g9CPJQW7g7WQcScq90FhIn3zl4No2B7TpMLwxI+6b a/WJHJsJC1klGYBEzwH1InOGvhcB3by/iZzXgDE0ERwljxaiEJjSVaq/PfTkkRz1 ciHPEXex3cts/zDEO6j0islphwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWYUD+T Xr+f9BjQIEUNSWUGuyflMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5 MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl emVFX1hvOVo1a0duMEpQN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt96t5b6IkOQKsuJTihGlE2vcfQY77dYuEDwwlgzh3ipQbIzCQhY7G fCG9BAeaZmnqlAgNCFXkXi33qMuvRCC7tjcV6Hu38dev80ZsgYRUGRP4/jj5E4vT Hpmq7fsYM1F0g66XLCyipmLrJsEqf58NUZRWPrNXs1ZY0pn1YZ2/znPjsLm3VFN4 Je1DvHdXl0hOg/2ofQgpJyXvMNMSMoQfTcZ0SjTuAoS0MgAQgWDex7F2FpzMpG7g Q1MKbT4nWpODkEnrT7Ewc6UZxz2rRKQHVIxogEgpB++lmaCdoq0yLS3yb9cSjKug EbVBZen8u0PF2gLKyUY9OLUslMdt2NVY -----END CERTIFICATE-----Generated at Sat Dec 20 03:25:14 2025 by rpki-client