This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: VZrrKkw3ix5O0mMr8AajlH85CJV1WykjK8UxIeyYM/Q= Subject key identifier: DA:F5:99:7D:4D:73:62:05:84:07:41:38:44:86:9B:C5:89:02:48:19 Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 1872 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 1868 Signing time: Sun 28 Dec 2025 16:16:31 +0000 Manifest this update: Sun 28 Dec 2025 16:16:31 +0000 Manifest next update: Sun 04 Jan 2026 16:16:31 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: BHp+HCCYy3v0FsDYqLxw7Xk4S74Ud59fy+CwKXTGAzk=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: QdjDueVM8wncTyRNMQMy4qX7bQck6tPgDDwRBdsy/14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 15:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6258 (0x1872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: Dec 28 16:16:31 2025 GMT Not After : Jan 4 16:16:31 2026 GMT Subject: CN=695157df-254e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:1f:9b:9e:ec:b0:5a:a7:d9:89:ae:39:b1: 96:ff:de:c4:f4:d6:2d:9d:cd:54:a4:80:49:b4:13: 8b:59:b0:d9:af:01:83:3f:c7:57:e6:ff:90:36:6c: b5:2a:bc:3f:72:25:56:5d:df:d0:bb:fd:3e:08:57: e6:9b:d3:ce:5a:ec:37:77:fe:55:44:72:0d:d8:2d: 2d:4c:e1:b9:dc:96:47:4c:fe:c7:60:b9:3f:f7:20: b6:77:3f:23:c6:97:34:09:da:c1:49:57:9b:28:68: 7e:03:07:00:a1:cc:9e:0e:cc:19:f2:ac:1c:5d:8d: 95:c4:a0:c8:8b:9c:56:26:af:62:48:7e:48:27:45: 7f:55:d1:b3:01:11:ef:0c:2c:b0:44:66:ee:c4:5a: 9f:b4:c7:02:6c:dc:04:44:55:a4:3b:e9:4c:35:5f: f0:48:44:6e:b9:a6:03:e5:e1:7e:d0:c1:00:66:23: bf:ed:85:6b:06:21:c3:72:7d:22:62:53:a7:1d:1e: ee:dc:e9:6e:b8:6c:92:ef:b9:df:3e:ec:11:6c:06: 40:13:96:14:41:e5:7c:5f:34:3d:5e:b0:17:2d:b2: 2d:82:35:e3:70:c4:8a:27:5d:3c:86:6b:b5:36:b6: b6:73:43:8c:96:58:e6:8d:5e:11:fd:e4:98:ab:a2: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F5:99:7D:4D:73:62:05:84:07:41:38:44:86:9B:C5:89:02:48:19 X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3b:14:e3:bf:5c:d0:32:e6:d7:e0:f3:a8:65:b7:80:a4:06: d8:5d:7b:0a:1d:76:eb:39:1e:b1:06:75:dc:e0:e0:17:86:c5: 3c:71:33:c1:9c:e1:6b:10:f3:d6:59:3a:d8:53:8e:7b:40:92: 98:69:3b:fc:a5:57:e3:76:d0:f0:db:cb:93:63:4c:a5:c8:fd: 12:6e:a4:b0:f0:03:b5:85:c6:ab:0b:5f:6a:b8:d1:4f:37:cd: 3e:f4:a1:a6:f7:5e:13:01:8d:05:dc:b5:a3:c9:65:24:6e:f7: 88:ad:80:d2:0a:0f:7b:fd:5d:11:a9:d8:33:d2:9d:e3:10:9f: 30:7f:e6:fb:2a:e0:19:7c:d0:6b:91:c0:7c:6b:e7:7f:3b:e1: 16:27:04:6b:b9:21:14:b5:2e:63:6f:7c:32:cf:9c:c8:fe:5f: ea:cc:9f:b0:bd:4f:fa:f9:f2:cc:ce:06:4f:e0:35:bd:5e:c9: 8c:ec:15:2c:1a:d1:ea:ae:30:cf:8b:ae:17:8e:eb:c0:44:05: bf:ef:44:41:28:4b:10:23:e9:67:bf:85:7c:ca:c8:f7:1b:4e: c1:f4:80:2c:01:08:8f:b6:24:85:c0:f4:48:fe:ee:98:df:0e: eb:1f:2d:f0:2a:b1:37:fe:cd:c9:aa:bf:ec:e7:ed:f7:2e:8e: f3:b9:ac:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjUxMjI4MTYxNjMxWhcNMjYwMTA0MTYxNjMxWjAYMRYwFAYD VQQDDA02OTUxNTdkZi0yNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU4fm57ssFqn2YmuObGW/97E9NYtnc1UpIBJtBOLWbDZrwGDP8dX5v+QNmy1 Krw/ciVWXd/Qu/0+CFfmm9POWuw3d/5VRHIN2C0tTOG53JZHTP7HYLk/9yC2dz8j xpc0CdrBSVebKGh+AwcAocyeDswZ8qwcXY2VxKDIi5xWJq9iSH5IJ0V/VdGzARHv DCywRGbuxFqftMcCbNwERFWkO+lMNV/wSERuuaYD5eF+0MEAZiO/7YVrBiHDcn0i YlOnHR7u3OluuGyS77nfPuwRbAZAE5YUQeV8XzQ9XrAXLbItgjXjcMSKJ108hmu1 Nra2c0OMlljmjV4R/eSYq6LZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNr1mX1N c2IFhAdBOESGm8WJAkgZMB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZOxTjv1zQMubX4POoZbeApAbYXXsKHXbrOR6xBnXc4OAXhsU8cTPB nOFrEPPWWTrYU457QJKYaTv8pVfjdtDw28uTY0ylyP0SbqSw8AO1hcarC19quNFP N80+9KGm914TAY0F3LWjyWUkbveIrYDSCg97/V0Rqdgz0p3jEJ8wf+b7KuAZfNBr kcB8a+d/O+EWJwRruSEUtS5jb3wyz5zI/l/qzJ+wvU/6+fLMzgZP4DW9XsmM7BUs GtHqrjDPi64XjuvARAW/70RBKEsQI+lnv4V8ysj3G07B9IAsAQiPtiSFwPRI/u6Y 3w7rHy3wKrE3/s3Jqr/s5+33Lo7zuayh -----END CERTIFICATE-----Generated at Sun Dec 28 20:15:33 2025 by rpki-client