This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: 0hDJPpLfIe/kOZCArNi8traeMHx2Pd+YmjF/exsj4To= Subject key identifier: BE:3A:8C:24:5A:71:F0:77:65:AA:42:9E:4A:26:A6:19:9B:AB:33:8E Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 89 Signing time: Fri 19 Dec 2025 05:42:22 +0000 Manifest this update: Fri 19 Dec 2025 05:42:21 +0000 Manifest next update: Fri 26 Dec 2025 05:42:21 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: QUlBCiJlW/lOXPRCZKJYnBWXRvkQ5MX+4TqE2zrhy9s=) 2: AB942EE0607C11F0A8F5A261C4F9AE02.roa (hash: Ib7XrV2UdhfMc2uSkqN8sJc2pYT7HHMtYcCkEQkD9OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Dec 19 05:42:21 2025 GMT Not After : Dec 26 05:42:21 2025 GMT Subject: CN=6944e5be-4f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:00:e0:3b:9f:d4:42:f6:ae:78:da:b9:14:79: aa:69:a7:94:2f:d2:73:17:76:0a:65:4a:8a:33:fe: 3d:ab:f9:1e:f1:85:ca:87:7a:57:6d:7a:c4:56:53: 49:76:6a:13:2e:5f:3f:7b:45:f7:d0:88:a6:fc:1c: ce:10:c0:f3:b5:c8:83:ff:bf:36:20:a9:62:01:4e: 06:5b:97:83:61:38:e2:49:af:55:7c:67:b2:b9:f1: c5:c5:66:ba:e9:57:08:00:e9:5c:bb:9d:7c:e5:b7: 63:4b:e2:58:a3:72:48:9f:41:47:dc:0f:d4:01:3c: 75:27:7f:ba:9f:53:2e:eb:54:60:10:8c:76:53:df: 03:52:fc:be:20:c3:95:4d:de:8b:aa:dd:7a:66:ad: 17:f6:4b:e9:32:a1:c1:1d:37:94:e4:77:a1:74:0e: 58:a2:55:72:44:8b:02:49:17:fd:e3:86:81:38:2a: 7d:87:67:ac:73:ee:ff:a7:2b:80:0a:fc:12:21:44: ae:44:b1:a7:83:9a:95:5a:e4:2b:40:68:e8:ec:c8: 64:a2:d2:6f:1c:39:83:7b:95:b5:cd:23:e2:90:71: 3b:cf:52:ad:3b:27:60:87:83:95:12:7c:20:ae:df: 2a:2b:93:de:1d:88:b1:e8:12:b9:b0:17:ee:f9:75: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3A:8C:24:5A:71:F0:77:65:AA:42:9E:4A:26:A6:19:9B:AB:33:8E X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c5:df:f4:f8:2b:c6:b6:82:cf:71:d0:fe:59:36:85:83:d9: b5:58:d4:34:b3:6a:f4:a3:1b:de:b2:f0:c7:70:2a:da:1f:88: 19:15:7a:47:49:82:ac:25:ae:73:f6:40:72:b1:a5:46:15:3e: 7d:a6:59:b9:d7:2a:73:b0:ca:5c:c4:6a:43:fe:d4:06:65:78: de:f8:53:1e:ca:15:b6:d2:8b:78:3b:df:50:6e:75:8c:0a:12: 59:3d:a4:92:27:2d:5d:70:b2:51:eb:83:a4:1f:f3:52:cb:72: dc:1d:b2:73:90:4d:4c:80:92:63:bc:da:d5:c9:72:60:8b:c7: 12:c8:03:a7:9b:34:bf:72:26:35:62:ed:88:f5:83:78:0a:9e: e6:f4:97:19:a6:fd:a6:46:b5:77:6c:c6:2d:ad:2e:a7:c5:6c: b1:3b:e4:99:3b:f8:46:c7:51:ba:10:fb:7b:25:6e:97:2c:bf: c6:78:9c:f9:ba:bd:15:2d:74:78:09:10:5e:bf:99:d4:ce:76: 70:d4:9c:83:ad:47:87:c5:94:ef:b3:6b:11:a6:cd:c6:a1:ce: 8c:f2:26:2a:46:4f:28:b6:b0:67:67:eb:3a:d7:22:04:99:95: 40:05:be:cf:fb:35:91:2e:7e:52:28:6f:07:09:4c:b3:69:db: 75:53:a7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2 QUVDOTlBQzYwHhcNMjUxMjE5MDU0MjIxWhcNMjUxMjI2MDU0MjIxWjAYMRYwFAYD VQQDDA02OTQ0ZTViZS00ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9wDgO5/UQvaueNq5FHmqaaeUL9JzF3YKZUqKM/49q/ke8YXKh3pXbXrEVlNJ dmoTLl8/e0X30Iim/BzOEMDztciD/782IKliAU4GW5eDYTjiSa9VfGeyufHFxWa6 6VcIAOlcu5185bdjS+JYo3JIn0FH3A/UATx1J3+6n1Mu61RgEIx2U98DUvy+IMOV Td6Lqt16Zq0X9kvpMqHBHTeU5HehdA5YolVyRIsCSRf944aBOCp9h2esc+7/pyuA CvwSIUSuRLGng5qVWuQrQGjo7MhkotJvHDmDe5W1zSPikHE7z1KtOydgh4OVEnwg rt8qK5PeHYix6BK5sBfu+XWx8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL46jCRa cfB3ZapCnkomphmbqzOOMB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA3MC9BRTM2NDY5NjEzODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVs WUFqZnhnWUl0U0ZxN0ptc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxxd/0+CvGtoLPcdD+WTaFg9m1WNQ0s2r0oxvesvDHcCraH4gZFXpH SYKsJa5z9kBysaVGFT59plm51ypzsMpcxGpD/tQGZXje+FMeyhW20ot4O99QbnWM ChJZPaSSJy1dcLJR64OkH/NSy3LcHbJzkE1MgJJjvNrVyXJgi8cSyAOnmzS/ciY1 Yu2I9YN4Cp7m9JcZpv2mRrV3bMYtrS6nxWyxO+SZO/hGx1G6EPt7JW6XLL/GeJz5 ur0VLXR4CRBev5nUznZw1JyDrUeHxZTvs2sRps3Goc6M8iYqRk8otrBnZ+s61yIE mZVABb7P+zWRLn5SKG8HCUyzadt1U6cP -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:45 2025 by rpki-client