This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json) Hash identifier: bpfLue4l+gc+EeitCl1FIgkdB6oZEJ9T/0EVFRd3c3U= Subject key identifier: B2:02:D7:5F:3B:10:68:2A:DA:CD:42:83:3F:B4:74:57:94:BC:52:5A Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft Manifest number: FD Signing time: Sat 27 Dec 2025 04:12:00 +0000 Manifest this update: Sat 27 Dec 2025 04:12:00 +0000 Manifest next update: Sat 03 Jan 2026 04:12:00 +0000 Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: L/5eIu/emNrD5chTDHXzSViBJuz86Ak8tbbpDdlE1yE=) 2: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: 4DEc0wbLK30W3YSB0WhzIpXuKeWb4EluJvYfPFr8RSQ=) 3: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: Co6tkDsI5HQErtzjpED6IOpErLBa9412vvEmJqPigVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 04:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Validity Not Before: Dec 27 04:12:00 2025 GMT Not After : Jan 3 04:12:00 2026 GMT Subject: CN=694f5c90-b34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:75:02:a2:87:84:55:8a:ca:3e:cc:84:c7: fe:72:c6:31:52:8f:6e:fe:91:eb:7b:33:37:6b:3e: e8:58:cb:73:05:fa:74:70:ad:9e:08:3a:23:1d:36: d4:66:79:bb:3b:18:c5:31:1a:07:10:3b:c2:c0:d4: 4e:2d:0f:86:70:c3:fa:9a:9a:26:74:0f:40:5c:bf: c9:9c:fd:4a:91:3b:50:4f:06:6e:30:0c:5e:d7:d0: 62:71:ec:9e:7d:aa:c1:1c:84:7f:5a:70:f0:6d:68: c8:12:c0:f2:4f:06:20:ae:ff:59:b3:5a:e2:15:1d: 18:9f:e9:9b:9f:36:30:00:b5:7d:83:3e:9d:3a:90: 44:78:3a:b6:e0:d0:05:e7:4f:8d:08:9f:f0:8d:9c: 8a:b5:d9:ea:85:e1:2c:53:f8:2c:f9:60:22:6a:d5: 47:26:36:03:e7:3e:d2:34:6a:5a:76:4a:09:88:8a: dd:f8:e0:2f:2f:63:63:96:7d:ad:75:45:dc:52:7c: 8c:86:df:47:03:de:e5:7a:76:11:22:72:a6:56:94: c7:ec:97:ee:59:3a:02:19:ce:1e:29:c2:31:15:a0: cc:47:31:14:c8:bb:45:74:6c:08:6e:2d:6b:50:a1: e3:b6:1a:6a:4f:89:31:66:38:68:55:60:42:5f:76: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:02:D7:5F:3B:10:68:2A:DA:CD:42:83:3F:B4:74:57:94:BC:52:5A X509v3 Authority Key Identifier: keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:08:20:2c:88:6f:f8:42:30:ae:3b:2a:ac:01:0c:d7:97:8a: ae:50:e7:75:db:35:95:0a:54:40:a0:85:56:03:dd:0d:cb:31: 2d:18:02:f9:7f:6f:10:b6:a1:7d:d6:db:f2:b3:3b:ba:38:1d: 92:53:55:b6:5c:8b:c1:bf:5a:b4:10:78:59:61:f3:86:f5:4e: 6b:ab:04:0f:71:8a:c3:6d:66:fe:7a:1f:75:32:f3:49:f3:f9: de:64:3f:ae:12:35:5f:c6:71:03:c0:5a:cd:a8:eb:e9:f1:74: 4c:bd:85:04:cd:48:3e:e7:22:56:df:71:d8:0c:e4:76:13:4f: 25:18:17:90:58:f7:23:29:09:ca:0e:91:bf:ca:49:fa:0d:18: 06:4c:87:a2:69:7f:ab:31:64:79:5f:a9:59:b6:9e:c5:80:00: df:a1:25:6e:92:ff:6b:ce:b8:ec:d8:0f:16:ed:d8:66:f9:4e: 24:18:ac:05:17:7a:a7:17:6c:5c:ab:a6:25:bc:ef:17:4d:48: 8d:64:5e:54:89:bd:81:28:4d:fe:5b:8c:44:b7:2c:fc:a6:07: b0:c0:a8:16:06:ff:7d:35:b8:f3:2d:86:3e:c8:7b:7a:46:3c: 26:73:d7:f8:93:fb:d8:20:d8:28:1a:dd:43:98:20:4f:42:b8: 25:91:58:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3 MzM1RTRGNTkwHhcNMjUxMjI3MDQxMjAwWhcNMjYwMTAzMDQxMjAwWjAYMRYwFAYD VQQDDA02OTRmNWM5MC1iMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPR1AqKHhFWKyj7MhMf+csYxUo9u/pHrezM3az7oWMtzBfp0cK2eCDojHTbU Znm7OxjFMRoHEDvCwNROLQ+GcMP6mpomdA9AXL/JnP1KkTtQTwZuMAxe19Biceye farBHIR/WnDwbWjIEsDyTwYgrv9Zs1riFR0Yn+mbnzYwALV9gz6dOpBEeDq24NAF 50+NCJ/wjZyKtdnqheEsU/gs+WAiatVHJjYD5z7SNGpadkoJiIrd+OAvL2Njln2t dUXcUnyMht9HA97lenYRInKmVpTH7JfuWToCGc4eKcIxFaDMRzEUyLtFdGwIbi1r UKHjthpqT4kxZjhoVWBCX3a8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIC1187 EGgq2s1Cgz+0dFeUvFJaMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54 SHhsRWFPcUJWRTF6TmVUMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkCCAsiG/4QjCuOyqsAQzXl4quUOd12zWVClRAoIVWA90NyzEtGAL5 f28QtqF91tvyszu6OB2SU1W2XIvBv1q0EHhZYfOG9U5rqwQPcYrDbWb+eh91MvNJ 8/neZD+uEjVfxnEDwFrNqOvp8XRMvYUEzUg+5yJW33HYDOR2E08lGBeQWPcjKQnK DpG/ykn6DRgGTIeiaX+rMWR5X6lZtp7FgADfoSVukv9rzrjs2A8W7dhm+U4kGKwF F3qnF2xcq6YlvO8XTUiNZF5Uib2BKE3+W4xEtyz8pgewwKgWBv99NbjzLYY+yHt6 Rjwmc9f4k/vYINgoGt1DmCBPQrglkVjK -----END CERTIFICATE-----Generated at Mon Dec 29 03:29:19 2025 by rpki-client