This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: 0QE/H8ohw0tGjyUVjgBUmZeWUQGePsjnI30BlxbKbiU= Subject key identifier: 21:B0:2A:C9:68:15:FF:00:81:8F:24:0C:FD:BF:E7:B6:68:1A:3C:E8 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 046F Signing time: Sat 20 Dec 2025 23:28:40 +0000 Manifest this update: Sat 20 Dec 2025 23:28:39 +0000 Manifest next update: Sat 27 Dec 2025 23:28:39 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: ik19b32okZCrGGm0jpMyFCejSHej+YMj5f2PjFxSas8=) 2: 3FBB06DAA33E11F087A31D6FC4F9AE02.roa (hash: 3hX8h88yIE4bG4c6BEhKQMbhzT9emXY29GoQUCoDJvc=) 3: 1821352EA82D11F0A44D2F49C4F9AE02.roa (hash: eUCAdWAAJYU2vithU9v2dxzSk9NHzeoy+gq9VsH9MFA=) 4: 4AD77714823D11F0A5490821C4F9AE02.roa (hash: VRtVYC+afvhigywAUFy8UkGyU1t5gq1k2av2NI5KhIY=) 5: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: Ic4R+w1Q3P51Ahg1QyjlaOiynLUhpiYZLqnU6ACR3P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Dec 20 23:28:39 2025 GMT Not After : Dec 27 23:28:39 2025 GMT Subject: CN=69473127-1ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:59:f3:3e:31:2a:b0:3e:8f:a7:e4:b9:06: 22:54:0e:01:ce:b3:6f:7a:01:f7:d1:ce:2a:c9:d4: b7:96:d0:d6:08:38:19:7a:ae:bf:79:7d:c9:9d:09: 66:f2:b8:4c:a6:12:ab:a5:2f:65:b6:c2:63:6e:f7: 2a:d3:3b:ef:ef:f8:98:ab:ee:dd:5a:5b:0e:20:e8: 2c:af:5d:ec:83:be:70:8b:e4:c7:d8:ec:91:1e:40: 77:d0:58:b9:69:7c:30:93:de:4b:f6:03:23:5e:7b: 72:a9:aa:d2:c0:cb:52:52:fe:0a:16:f8:98:38:79: f8:f6:6e:38:af:7d:07:87:b8:74:a4:0d:d6:a8:9d: 77:33:8e:fe:68:6a:41:16:b9:87:16:fe:a2:9d:f1: 7f:35:be:7e:28:4c:3b:fa:44:37:4a:a2:60:e3:fb: c7:03:21:99:3e:6d:1f:28:e5:cc:7f:42:bf:46:35: 8b:db:1f:03:f2:8b:f2:39:f3:c5:91:76:61:1a:52: 25:2d:29:39:25:6e:91:c0:a9:f5:21:9c:53:30:59: e3:9f:64:04:7d:e1:39:65:3a:9b:89:67:95:63:a9: c8:04:e3:2b:d9:d3:67:b6:63:83:c3:67:5b:59:22: 64:a9:e4:ac:72:30:3e:de:a6:76:49:bf:54:02:eb: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B0:2A:C9:68:15:FF:00:81:8F:24:0C:FD:BF:E7:B6:68:1A:3C:E8 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:4e:63:4f:a5:5f:7b:5a:06:a3:c1:b0:67:4d:33:a9:80:b8: 6d:c7:3f:4a:d8:39:22:98:75:e2:29:52:be:ce:20:df:e6:ad: 55:73:28:c9:49:fd:c0:0b:c2:7e:ad:a4:08:8d:f7:3c:03:e2: b0:a7:ad:b1:ef:5c:5c:e5:c5:a0:0a:d4:7b:27:f7:1f:ea:15: 3e:09:33:3e:2a:f2:4a:f1:67:6e:01:a6:1e:b2:dd:9e:ed:c1: 23:c0:10:4f:e6:c6:4f:c2:d5:f7:af:df:6a:2a:d0:79:c3:74: 61:43:15:ce:85:53:b5:10:5a:1a:42:ea:75:28:16:62:74:33: de:bb:74:76:47:e5:98:69:10:66:15:f1:0f:28:07:b3:a6:08: 16:fe:1a:b4:72:bf:09:93:ec:ae:56:06:86:c0:46:5b:d9:29: af:26:61:11:81:82:e0:52:ea:ff:37:00:a6:34:cb:ed:a7:15: 5e:7c:f0:4e:bd:24:0a:d7:20:76:93:0a:a9:88:2a:bd:aa:25: 6c:bf:a5:8b:18:0c:73:ab:35:f7:da:bc:d5:3c:44:47:c4:5a: 2e:f7:98:06:d8:80:a5:34:06:31:39:c4:14:d9:23:5e:c3:85: b2:4d:e8:14:0e:4f:f8:15:39:e9:e6:19:87:f5:a6:dd:53:88: e4:ed:dd:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUxMjIwMjMyODM5WhcNMjUxMjI3MjMyODM5WjAYMRYwFAYD VQQDDA02OTQ3MzEyNy0xZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9VZ8z4xKrA+j6fkuQYiVA4BzrNvegH30c4qydS3ltDWCDgZeq6/eX3JnQlm 8rhMphKrpS9ltsJjbvcq0zvv7/iYq+7dWlsOIOgsr13sg75wi+TH2OyRHkB30Fi5 aXwwk95L9gMjXntyqarSwMtSUv4KFviYOHn49m44r30Hh7h0pA3WqJ13M47+aGpB FrmHFv6infF/Nb5+KEw7+kQ3SqJg4/vHAyGZPm0fKOXMf0K/RjWL2x8D8ovyOfPF kXZhGlIlLSk5JW6RwKn1IZxTMFnjn2QEfeE5ZTqbiWeVY6nIBOMr2dNntmODw2db WSJkqeSscjA+3qZ2Sb9UAuurRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGwKslo Ff8AgY8kDP2/57ZoGjzoMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1TmNPpV97WgajwbBnTTOpgLhtxz9K2DkimHXiKVK+ziDf5q1VcyjJ Sf3AC8J+raQIjfc8A+Kwp62x71xc5cWgCtR7J/cf6hU+CTM+KvJK8WduAaYest2e 7cEjwBBP5sZPwtX3r99qKtB5w3RhQxXOhVO1EFoaQup1KBZidDPeu3R2R+WYaRBm FfEPKAezpggW/hq0cr8Jk+yuVgaGwEZb2SmvJmERgYLgUur/NwCmNMvtpxVefPBO vSQK1yB2kwqpiCq9qiVsv6WLGAxzqzX32rzVPERHxFou95gG2IClNAYxOcQU2SNe w4WyTegUDk/4FTnp5hmH9abdU4jk7d0X -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:17 2025 by rpki-client