This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json) Hash identifier: 2tX7nFK7iRfjfdRkm749PpI+RxPq7nykamrQn9+i6Wg= Subject key identifier: 35:36:A6:8B:A2:59:7E:E3:DB:50:89:F5:B0:FB:F8:97:A8:F0:28:A9 Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft Manifest number: 0C Signing time: Thu 18 Dec 2025 20:22:18 +0000 Manifest this update: Thu 18 Dec 2025 20:22:18 +0000 Manifest next update: Thu 25 Dec 2025 20:22:18 +0000 Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: y/w5/rpXYGDMG2FIYe4oD5Ja3VEJafFTkivP8EBnH00=) 2: 527245ACD42311F0A8A37057C4F9AE02.roa (hash: JAe8IRDZjRhBc/cJ3AbxdISllVbM5/bUgdQx1DGqHrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Validity Not Before: Dec 18 20:22:18 2025 GMT Not After : Dec 25 20:22:18 2025 GMT Subject: CN=6944627a-d144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:c5:1b:72:fa:8c:71:56:13:ed:3a:0c:de: 10:ae:2e:c6:f2:10:92:40:cc:a5:b3:8b:69:c0:19: 6d:c0:ca:19:98:50:fd:90:6d:2a:ef:f4:c5:92:18: 1e:0c:98:80:68:b4:b8:6f:7c:f5:33:0b:e2:12:10: 77:65:9d:f4:f2:2f:92:b0:05:ae:bb:23:82:70:81: 60:9b:56:60:d4:b7:43:ff:9d:ae:15:b6:52:1b:92: 6c:65:71:8e:b1:2e:1a:1f:24:99:2e:ef:ed:37:c1: c0:d1:43:70:fd:bf:4e:f3:b9:5f:ad:75:b6:be:07: ab:9b:11:27:97:b7:1e:d7:44:90:99:67:9a:76:79: c8:05:0c:cd:c0:73:53:2f:6e:ea:bd:82:eb:62:27: 91:53:85:c2:b8:03:1d:de:01:05:d0:45:51:95:35: 0b:a9:18:24:c5:98:92:f5:cc:03:88:94:ed:dd:83: 13:1c:e0:77:e9:ce:c5:80:37:99:65:90:55:11:53: 7a:87:fe:5f:e9:9a:c3:c6:6c:42:77:5e:c6:04:46: e4:db:5a:a8:f6:40:97:cb:6f:81:40:f9:c4:3d:82: ce:1c:50:c4:09:83:57:f5:35:ab:c0:f2:0d:24:e9: 61:a2:a8:d9:97:b0:97:5a:30:b6:b4:e4:9d:79:a7: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:36:A6:8B:A2:59:7E:E3:DB:50:89:F5:B0:FB:F8:97:A8:F0:28:A9 X509v3 Authority Key Identifier: keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b7:94:40:6a:fb:97:f5:9f:61:1e:91:04:b7:84:ce:d9:a6: e3:ab:e0:ea:30:25:8b:99:02:8d:24:48:fa:ee:e3:0f:a0:52: 63:71:64:02:08:71:27:e6:3d:83:7d:47:aa:dc:a5:9d:7d:64: 38:d0:07:9f:1c:4e:29:4b:d9:c7:15:26:fd:27:28:8b:66:50: a4:71:34:84:8d:ff:c6:a8:72:25:34:f6:13:7f:39:3b:31:51: 68:a1:a8:ae:06:ca:bf:9c:2f:31:79:59:11:64:3f:af:e8:82: 68:1b:91:c7:ac:c8:46:81:fd:c9:99:4e:14:ae:33:f0:ae:70: b8:e2:92:dd:57:37:d2:bf:d8:2b:ff:58:9b:c9:dc:c9:7a:ca: a9:6b:a4:56:3b:48:9a:da:ea:c0:e7:94:11:65:03:ab:cb:69: 6e:28:05:d8:57:5b:5f:05:39:1d:ea:7d:11:8c:c2:8c:e8:db: 4b:4d:34:72:e9:4c:3c:89:9d:c1:19:0f:6e:a7:21:a4:27:d5: 2b:b7:cd:61:23:b2:a2:e9:8c:d4:d9:cb:4c:a6:c1:b9:91:e3: 12:52:9d:f0:4c:87:37:41:90:1b:09:e1:b5:0d:80:24:43:62: 2c:1c:9f:1d:c4:e7:59:50:c0:61:3e:7c:72:a5:14:9b:9c:ce: ff:77:a1:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTREMTExMC8GA1UEBRMoQjY5NEE4QzUyOEYwQjlBNEQ0NTNCQzQ0MjBFNTBCNTE5 RENGRDBBQjAeFw0yNTEyMTgyMDIyMThaFw0yNTEyMjUyMDIyMThaMBgxFjAUBgNV BAMMDTY5NDQ2MjdhLWQxNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5sMUbcvqMcVYT7ToM3hCuLsbyEJJAzKWzi2nAGW3AyhmYUP2QbSrv9MWSGB4M mIBotLhvfPUzC+ISEHdlnfTyL5KwBa67I4JwgWCbVmDUt0P/na4VtlIbkmxlcY6x LhofJJku7+03wcDRQ3D9v07zuV+tdba+B6ubESeXtx7XRJCZZ5p2ecgFDM3Ac1Mv buq9gutiJ5FThcK4Ax3eAQXQRVGVNQupGCTFmJL1zAOIlO3dgxMc4HfpzsWAN5ll kFURU3qH/l/pmsPGbEJ3XsYERuTbWqj2QJfLb4FA+cQ9gs4cUMQJg1f1NavA8g0k 6WGiqNmXsJdaMLa05J15p03hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNTami6JZ fuPbUIn1sPv4l6jwKKkwHwYDVR0jBBgwFoAUtpSoxSjwuaTUU7xEIOULUZ3P0Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NEQxLzk1MEQ3NzAyQ0U2 RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFUVVU3eEVJT1VMVVozUDBL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHBTb3hTand1YVRVVTd4RUlPVUxVWjNQMEtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NEQxLzk1MEQ3NzAyQ0U2RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFU VVU3eEVJT1VMVVozUDBLcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJG3lEBq+5f1n2EekQS3hM7ZpuOr4OowJYuZAo0kSPru4w+gUmNxZAII cSfmPYN9R6rcpZ19ZDjQB58cTilL2ccVJv0nKItmUKRxNISN/8aociU09hN/OTsx UWihqK4Gyr+cLzF5WRFkP6/ogmgbkcesyEaB/cmZThSuM/CucLjikt1XN9K/2Cv/ WJvJ3Ml6yqlrpFY7SJra6sDnlBFlA6vLaW4oBdhXW18FOR3qfRGMwozo20tNNHLp TDyJncEZD26nIaQn1Su3zWEjsqLpjNTZy0ymwbmR4xJSnfBMhzdBkBsJ4bUNgCRD Yiwcnx3E51lQwGE+fHKlFJuczv93oeg= -----END CERTIFICATE-----Generated at Fri Dec 19 09:56:25 2025 by rpki-client