This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: +JDv5bYGzHjTEnrdDw8VnGZbp+ne8BHJhxrceBJYwE4= Subject key identifier: F1:12:67:E5:88:C4:16:65:DB:FA:B2:AB:26:08:9E:3B:A9:E4:B9:30 Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: F8 Signing time: Mon 29 Dec 2025 04:18:25 +0000 Manifest this update: Mon 29 Dec 2025 04:18:24 +0000 Manifest next update: Mon 05 Jan 2026 04:18:24 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: 11xR7Xp82bUfaE1iMYKfEmhrpNFKpWj0akfDP3MEsfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 04:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Dec 29 04:18:24 2025 GMT Not After : Jan 5 04:18:24 2026 GMT Subject: CN=69520110-d7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:33:99:ce:f1:4d:00:58:0a:57:1b:60:62: 15:6d:ef:f2:a9:31:5f:33:6f:50:4b:05:02:96:08: 7b:3f:54:20:f4:ca:9e:ad:f6:8f:c3:3f:58:3e:1d: a3:63:69:3a:6a:4d:48:96:f7:e5:87:c8:c4:00:20: d1:42:65:10:f2:f9:4a:f1:d1:b3:fc:43:b7:d4:6e: b3:3e:b4:5d:9d:03:b3:57:84:73:ca:4b:26:3c:26: eb:42:29:dc:73:80:77:8a:d7:1f:e0:79:64:f4:31: 90:b4:27:d8:96:55:d9:21:8a:c9:2e:a1:40:1c:54: 70:57:8c:c7:92:fd:7e:52:88:9e:ef:ac:bc:78:90: fb:b5:d4:16:23:74:35:98:5c:c6:37:23:ce:6f:ac: 84:87:dc:92:d8:42:00:5f:31:80:38:e0:8e:76:30: 85:41:43:51:f2:74:78:60:42:1e:0f:c1:50:ad:3b: 9b:ab:8c:2b:01:b6:8a:12:8e:af:90:cc:2b:c5:1f: a8:31:6f:16:d6:9b:81:bd:c8:ee:7a:d0:ee:13:d3: c5:be:25:cf:15:4b:67:24:f9:2f:8e:f6:16:aa:ff: c8:91:10:58:f1:da:7a:c6:fd:60:78:9d:70:09:e4: fd:e8:d6:96:53:a5:63:c5:91:c3:5c:57:5e:0d:d8: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:12:67:E5:88:C4:16:65:DB:FA:B2:AB:26:08:9E:3B:A9:E4:B9:30 X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:15:c8:fd:a4:32:54:b0:09:c4:e5:e2:bb:4e:92:d0:5c:9b: ea:64:b7:7e:61:c4:82:db:5e:2b:75:08:84:e3:b5:2c:51:c4: 18:2c:5b:1c:97:9c:df:56:1c:47:3c:33:99:da:73:92:6b:8f: ca:9c:a1:67:ff:0c:85:7a:7e:de:0b:ae:83:11:a1:da:82:e1: f0:25:47:1a:8e:d1:60:1a:72:6d:17:8c:34:ff:58:19:44:25: 38:2a:29:98:33:b2:e6:de:69:dd:91:ee:31:03:da:10:ef:79: c4:69:76:ef:c2:dc:54:ba:54:57:83:9f:27:a0:89:5b:58:01: 6b:de:36:a8:88:3e:12:24:87:73:0c:3b:66:44:03:20:e8:d5: 36:95:26:df:33:23:01:ba:17:16:b7:0c:54:5c:12:05:34:d9: f2:de:e8:b3:78:9a:14:ed:fa:c5:64:2b:6f:bc:c2:61:06:70: 53:3e:97:54:3c:70:03:ef:0d:93:bb:14:68:e5:17:af:c2:05: 12:89:f4:53:80:16:93:d7:53:54:da:34:22:06:9e:6b:f8:7e: a3:4d:2a:ca:8a:24:5b:ee:bd:20:bb:4c:2a:92:02:a6:ed:cc: 17:73:6e:55:d6:2f:b9:dc:8f:e5:52:ea:1b:77:e7:b9:20:9e: 2e:da:95:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjUxMjI5MDQxODI0WhcNMjYwMTA1MDQxODI0WjAYMRYwFAYD VQQDDA02OTUyMDExMC1kN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh/4zmc7xTQBYClcbYGIVbe/yqTFfM29QSwUClgh7P1Qg9MqerfaPwz9YPh2j Y2k6ak1Ilvflh8jEACDRQmUQ8vlK8dGz/EO31G6zPrRdnQOzV4RzyksmPCbrQinc c4B3itcf4Hlk9DGQtCfYllXZIYrJLqFAHFRwV4zHkv1+Uoie76y8eJD7tdQWI3Q1 mFzGNyPOb6yEh9yS2EIAXzGAOOCOdjCFQUNR8nR4YEIeD8FQrTubq4wrAbaKEo6v kMwrxR+oMW8W1puBvcjuetDuE9PFviXPFUtnJPkvjvYWqv/IkRBY8dp6xv1geJ1w CeT96NaWU6VjxZHDXFdeDdjoHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPESZ+WI xBZl2/qyqyYInjup5LkwMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzFcj9pDJUsAnE5eK7TpLQXJvqZLd+YcSC214rdQiE47UsUcQYLFsc l5zfVhxHPDOZ2nOSa4/KnKFn/wyFen7eC66DEaHaguHwJUcajtFgGnJtF4w0/1gZ RCU4KimYM7Lm3mndke4xA9oQ73nEaXbvwtxUulRXg58noIlbWAFr3jaoiD4SJIdz DDtmRAMg6NU2lSbfMyMBuhcWtwxUXBIFNNny3uizeJoU7frFZCtvvMJhBnBTPpdU PHAD7w2TuxRo5RevwgUSifRTgBaT11NU2jQiBp5r+H6jTSrKiiRb7r0gu0wqkgKm 7cwXc25V1i+53I/lUuobd+e5IJ4u2pWm -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:17 2025 by rpki-client