This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json) Hash identifier: jx/Zz33t3r0FtrHqsqw0Vk1VmdE3HAKmR5DaSGQfElo= Subject key identifier: FC:9D:87:27:B2:54:FB:CF:59:C1:D8:20:B5:42:71:60:55:28:11:D4 Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft Manifest number: 0230 Signing time: Fri 19 Dec 2025 01:14:34 +0000 Manifest this update: Fri 19 Dec 2025 01:14:34 +0000 Manifest next update: Fri 26 Dec 2025 01:14:34 +0000 Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: dc70WbOWqRYDjNs8k+XPs/Q4w3ZIEC9ka5ATc064Mfo=) 2: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: obiTww85QuSqqaBr+wHlV1xXUBQMd397eQ+sOdxR/MM=) 3: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: g45HkZ0JD76C5KDwWCZpJ0FuHMFHg7MzrotI4Or5T+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Validity Not Before: Dec 19 01:14:34 2025 GMT Not After : Dec 26 01:14:34 2025 GMT Subject: CN=6944a6fa-7285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:58:c0:79:23:03:c3:42:a1:95:d8:94:75: 33:1c:ac:dd:21:a1:4d:d2:89:d0:21:4d:b7:f3:c3: 34:ac:2e:3f:68:ad:71:c4:28:4c:e5:43:3c:d2:c6: bf:fe:e2:5b:61:d0:be:d7:d4:28:c9:47:5e:15:91: c2:b0:d3:d3:35:f0:87:74:f6:0a:b5:2d:52:79:26: 99:e1:dd:db:69:05:96:e5:a0:d9:a6:ad:7b:85:d0: 8f:c9:81:ed:2e:23:a4:d9:b6:60:c5:66:2d:d9:f3: 3b:6d:0c:81:13:4e:de:5f:9f:9e:a9:69:d9:5e:c9: f9:9a:ef:99:7f:35:34:6b:d7:82:59:f0:ee:27:38: 15:bf:d5:89:7b:21:16:e5:6e:7c:59:34:49:3e:fe: f7:cc:58:f4:3b:1d:ee:30:3f:bc:f3:8e:25:5c:5a: 5d:f7:76:95:66:a2:08:c3:7b:76:a3:c6:e0:71:1b: 35:66:02:e9:26:c0:8e:7c:05:4c:c5:dd:aa:49:ef: 63:81:07:59:45:ac:eb:cd:0f:49:1c:fd:60:6b:fa: 67:72:0c:4f:24:b3:2a:27:07:52:16:7a:67:75:bf: af:fc:7d:19:2d:ba:85:d3:f3:43:8f:45:f0:d7:e4: f8:ec:9f:68:0e:6b:00:83:75:60:47:2c:e0:71:58: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9D:87:27:B2:54:FB:CF:59:C1:D8:20:B5:42:71:60:55:28:11:D4 X509v3 Authority Key Identifier: keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:8c:1a:5e:22:af:ac:9a:05:ba:bf:1f:d5:3e:c3:ec:27:92: f5:33:a8:f1:87:13:94:4b:8a:4a:04:9f:83:71:21:67:ce:90: 98:1d:98:41:4b:a7:0a:d2:0a:d0:6c:c6:54:ff:9b:12:ff:0d: ea:61:df:0a:48:2d:9f:93:d9:8d:b6:a8:c3:14:35:c8:71:f6: d7:f5:09:dd:db:7a:7f:de:2b:bf:6a:11:c8:3a:b7:36:3f:60: 86:8b:f8:49:37:bd:bb:5d:d5:c4:9e:42:4a:a6:a2:ff:8a:20: 64:d1:48:41:f5:05:8c:d8:b7:71:5f:c7:63:61:69:30:36:da: f5:f8:60:30:2d:02:2b:11:fe:02:79:54:af:fd:67:69:46:0a: 06:15:b7:8f:f9:bc:31:53:05:1d:5a:d6:53:a9:37:c4:0e:74: 07:15:04:9b:1b:7e:4e:8a:3e:aa:2e:52:4b:20:60:69:a8:5b: 9e:a5:fd:ba:d5:09:c8:b8:fd:6e:47:40:0d:48:e3:3c:42:4a: 2c:b1:3e:d0:55:11:87:bb:10:b3:a2:2d:2a:f4:36:33:e4:7c: e7:43:68:c6:68:ce:ed:1b:90:cb:cc:c2:ba:fb:f9:45:39:ef: 63:8f:a2:8d:c3:53:4e:b2:db:ce:eb:3e:66:eb:9d:9a:5a:59: d4:41:9e:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5 OEYyNjJCOEMwHhcNMjUxMjE5MDExNDM0WhcNMjUxMjI2MDExNDM0WjAYMRYwFAYD VQQDDA02OTQ0YTZmYS03Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW9YwHkjA8NCoZXYlHUzHKzdIaFN0onQIU2388M0rC4/aK1xxChM5UM80sa/ /uJbYdC+19QoyUdeFZHCsNPTNfCHdPYKtS1SeSaZ4d3baQWW5aDZpq17hdCPyYHt LiOk2bZgxWYt2fM7bQyBE07eX5+eqWnZXsn5mu+ZfzU0a9eCWfDuJzgVv9WJeyEW 5W58WTRJPv73zFj0Ox3uMD+8844lXFpd93aVZqIIw3t2o8bgcRs1ZgLpJsCOfAVM xd2qSe9jgQdZRazrzQ9JHP1ga/pncgxPJLMqJwdSFnpndb+v/H0ZLbqF0/NDj0Xw 1+T47J9oDmsAg3VgRyzgcVg6twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPydhyey VPvPWcHYILVCcWBVKBHUMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTjBpeIq+smgW6vx/VPsPsJ5L1M6jxhxOUS4pKBJ+DcSFnzpCYHZhB S6cK0grQbMZU/5sS/w3qYd8KSC2fk9mNtqjDFDXIcfbX9Qnd23p/3iu/ahHIOrc2 P2CGi/hJN727XdXEnkJKpqL/iiBk0UhB9QWM2LdxX8djYWkwNtr1+GAwLQIrEf4C eVSv/WdpRgoGFbeP+bwxUwUdWtZTqTfEDnQHFQSbG35Oij6qLlJLIGBpqFuepf26 1QnIuP1uR0ANSOM8QkossT7QVRGHuxCzoi0q9DYz5HznQ2jGaM7tG5DLzMK6+/lF Oe9jj6KNw1NOstvO6z5m652aWlnUQZ5w -----END CERTIFICATE-----Generated at Sat Dec 20 04:59:49 2025 by rpki-client