This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: kvc/pf4Xf4Or9abn0wm99XiwK6mbGeSFYVIgILaSvHY= Subject key identifier: DC:EE:05:FA:10:2E:58:9E:0E:D9:B4:43:81:C6:DA:57:53:D3:D7:E1 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 0731 Signing time: Tue 30 Dec 2025 21:41:44 +0000 Manifest this update: Tue 30 Dec 2025 21:41:43 +0000 Manifest next update: Tue 06 Jan 2026 21:41:43 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: FGlobf3FK6eGY4s+TeewxtS7DWEyodEFBu15NA+wnv0=) 2: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: RUIP1xOFQ+ZDvsWKZV/CHSTe0s5xZpcTqMniDp6vi0k=) 3: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: nVi2F1h98I6eFhDtm7NoIpz9Is13r6Zxvgjimh4KJP0=) 4: A716CA94954611EC9B320352C4F9AE02.roa (hash: uTjJg4ld3wAkfp4bASyeuSGU8PR4oaKlDvy4j1UVWtw=) 5: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (hash: NyIoFFnNbfwo9o2cOO+dAaDD78bAuKHqc1arnmJuZ9o=) 6: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: Ybb2csXFZo9W1XG+GRQhzLexAF28aEoPNkvLGKQiexs=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: JkA2VjRkGVaoGTtSe3EFAkpmSjP2mBiftG09Gd2raHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Dec 30 21:41:43 2025 GMT Not After : Jan 6 21:41:43 2026 GMT Subject: CN=69544718-2a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:96:15:94:f4:ae:f4:25:3b:ca:16:38:a1: 0f:65:35:25:0d:80:c1:82:90:8a:8d:ec:82:e9:4f: 7d:04:c8:2c:c5:44:0e:77:25:ed:c6:03:f3:b5:a7: 4d:eb:cf:5b:1a:d1:38:4a:be:2c:c6:52:67:a2:f4: 70:e1:3e:2f:90:0d:2f:61:fc:03:36:09:78:8d:17: 13:7d:ad:d0:ea:03:e6:1c:c8:3f:53:69:31:70:ed: 72:9a:d4:92:16:14:5e:e2:84:bb:e0:bd:66:2d:e3: e3:64:21:c3:59:00:98:24:e8:dc:ca:ee:c5:91:37: bd:b1:d5:9a:25:89:60:1b:cc:fd:7b:a9:37:66:b9: bc:4c:c9:f0:a5:a4:5d:c6:81:8c:55:db:ef:40:36: 5b:4d:5f:31:9d:08:29:74:61:a5:12:1f:3b:ea:78: c8:db:2b:6e:f6:e2:47:b9:66:49:09:d2:3e:0e:e8: e7:bc:73:58:8d:06:2d:64:c8:22:51:79:58:3b:88: c3:93:ef:e4:bb:54:c6:ac:32:b0:85:4f:01:36:37: c4:9d:2f:f4:67:c9:aa:a5:2b:6e:a3:bb:a1:b2:d0: 6b:0f:1e:97:96:f1:bc:76:0a:73:e9:42:9d:9a:1b: 6a:27:f7:62:f0:be:8a:61:fe:22:9a:e0:e0:2f:e7: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EE:05:FA:10:2E:58:9E:0E:D9:B4:43:81:C6:DA:57:53:D3:D7:E1 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fa:cf:e2:80:d3:0b:da:f0:64:9e:7e:78:04:4a:ba:41:8a: bb:d2:5e:86:0f:1b:4a:fa:6d:fd:f1:85:a2:62:de:c2:e8:bc: 10:76:c1:a0:61:3a:68:87:1e:66:66:fd:91:5f:24:30:d3:a0: a1:b9:d1:7a:ed:98:e3:f2:d0:20:65:67:76:fc:ce:0e:eb:2c: 2e:b7:26:50:af:39:c4:83:fe:f5:c9:0b:43:af:84:ee:54:c9: b7:ae:ef:25:f3:6c:bc:37:f0:f3:eb:87:14:38:10:ba:bb:55: d7:b0:70:09:f1:29:cb:f8:09:f5:43:96:ac:35:ff:97:ed:f9: 7d:02:22:6b:c4:8e:ed:9b:fe:c0:99:60:f1:56:3c:80:fa:14: 48:88:4b:67:3e:a0:97:bf:e3:47:fe:76:1b:88:33:6f:b1:1b: eb:72:3a:ae:d9:be:4d:e3:5f:1a:cd:96:ee:0b:ad:96:b8:da: 0b:03:7b:6a:d3:11:c5:68:eb:44:22:6f:53:a7:a6:b5:6f:44: 43:a7:f6:5a:a7:a8:89:0c:a6:cd:0f:62:95:a4:52:86:bf:f4: 68:d2:67:04:0e:a3:89:ec:03:2b:92:c1:24:c0:8a:fb:76:4c: 4f:87:be:bd:b0:2e:dd:21:f1:82:2a:10:c2:9e:40:ec:7a:86: 6a:ef:81:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUxMjMwMjE0MTQzWhcNMjYwMTA2MjE0MTQzWjAYMRYwFAYD VQQDDA02OTU0NDcxOC0yYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAKWFZT0rvQlO8oWOKEPZTUlDYDBgpCKjeyC6U99BMgsxUQOdyXtxgPztadN 689bGtE4Sr4sxlJnovRw4T4vkA0vYfwDNgl4jRcTfa3Q6gPmHMg/U2kxcO1ymtSS FhRe4oS74L1mLePjZCHDWQCYJOjcyu7FkTe9sdWaJYlgG8z9e6k3Zrm8TMnwpaRd xoGMVdvvQDZbTV8xnQgpdGGlEh876njI2ytu9uJHuWZJCdI+DujnvHNYjQYtZMgi UXlYO4jDk+/ku1TGrDKwhU8BNjfEnS/0Z8mqpStuo7uhstBrDx6XlvG8dgpz6UKd mhtqJ/di8L6KYf4imuDgL+d2WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzuBfoQ LlieDtm0Q4HG2ldT09fhMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3+s/igNML2vBknn54BEq6QYq70l6GDxtK+m398YWiYt7C6LwQdsGg YTpohx5mZv2RXyQw06ChudF67Zjj8tAgZWd2/M4O6ywutyZQrznEg/71yQtDr4Tu VMm3ru8l82y8N/Dz64cUOBC6u1XXsHAJ8SnL+An1Q5asNf+X7fl9AiJrxI7tm/7A mWDxVjyA+hRIiEtnPqCXv+NH/nYbiDNvsRvrcjqu2b5N418azZbuC62WuNoLA3tq 0xHFaOtEIm9Tp6a1b0RDp/Zap6iJDKbND2KVpFKGv/Ro0mcEDqOJ7AMrksEkwIr7 dkxPh769sC7dIfGCKhDCnkDseoZq74Gj -----END CERTIFICATE-----Generated at Wed Dec 31 01:52:11 2025 by rpki-client