This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: lbLk9cNNOZUVxBcAeJMbYE3KGOR9fQdvokHRM7YoFoY= Subject key identifier: A2:24:1A:0C:1C:F7:C7:E1:DB:90:44:D8:D9:2B:96:D9:40:83:FE:90 Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 01CA Signing time: Sun 21 Dec 2025 02:13:20 +0000 Manifest this update: Sun 21 Dec 2025 02:13:19 +0000 Manifest next update: Sun 28 Dec 2025 02:13:19 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: Yfgro4KnySA17t1oiBZb95rGIQXEoLia2JpzQKgOQmI=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: XO+ul7lF7sjvsPZ/wUsLZ1kf4agxiZYpp0ew7HMRh6M=) 3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: rk+SPflwPgB4vTfzwjF5uUSSjGvEoj32LpORFaq9djc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: Dec 21 02:13:19 2025 GMT Not After : Dec 28 02:13:19 2025 GMT Subject: CN=694757c0-fd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:1f:20:69:74:61:57:b4:15:b8:85:1b:08: b9:85:8b:ce:6f:9c:00:00:71:3e:38:c4:d2:66:44: 33:a2:e1:f8:b6:1d:85:8c:a0:44:df:1b:8b:35:37: e5:28:12:0b:b2:bf:6b:78:b9:89:b8:95:2d:1a:7c: 48:68:87:8c:1a:5b:de:b4:f0:e0:8a:b0:77:cf:68: 75:e4:89:b7:b5:b9:c9:9d:21:ba:43:59:64:2a:59: 2a:4c:c9:7b:db:6b:b8:ec:7c:e9:48:bd:22:85:bf: c7:90:af:bd:cb:79:5b:d6:8a:e7:82:32:a8:76:b2: 80:09:d6:5a:5b:cb:20:f3:94:f7:a8:3a:2b:50:06: a4:73:0d:b2:fb:14:02:54:88:40:9e:c2:1d:b0:89: 0d:06:81:dc:ab:79:a6:66:21:4c:58:21:b3:8b:fe: a2:1e:9a:93:2f:dd:d7:c6:24:90:6a:ab:83:15:c3: 82:24:78:15:6d:cc:cd:4a:75:5f:7b:de:47:77:29: 2d:c2:bf:39:e6:b1:4b:92:f4:46:10:16:4d:6d:f2: 31:33:01:90:96:c0:07:95:1c:70:2b:fb:a2:96:c4: e7:69:ba:50:d7:59:05:5a:bc:5b:69:24:42:bb:8b: cb:85:ba:42:70:c1:0e:15:76:b0:ad:0d:3e:15:1b: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:24:1A:0C:1C:F7:C7:E1:DB:90:44:D8:D9:2B:96:D9:40:83:FE:90 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a6:de:d0:d3:f7:1b:9d:51:09:6b:3b:11:d2:ed:08:1c:62: c7:22:80:45:c6:1b:55:3d:c8:f9:1e:22:5d:cb:a3:f4:a0:69: 9f:00:87:af:46:fc:38:44:3e:f4:5b:36:d9:bb:cd:4d:03:0e: 51:19:4f:ee:bc:c8:2c:b8:b4:3d:8e:a2:86:a8:ec:87:35:8b: f6:6a:96:17:da:2b:bd:96:5c:8d:3e:de:35:8a:78:f7:15:17: 43:a1:d4:ac:25:05:74:bc:79:f8:5e:cc:4c:81:36:a4:1d:e6: 1c:63:3c:f4:d8:b0:35:96:e0:c8:46:82:3c:60:5f:c6:ff:88: f4:23:cd:7d:71:16:20:e6:bb:58:e6:88:f3:3e:2d:60:62:3e: 0c:ab:8b:c1:5d:9e:6c:b3:bb:87:e5:78:e1:a3:4e:9c:28:ed: 57:a5:8c:fe:d2:f2:16:b6:b6:01:a2:c9:94:07:12:c7:1a:55: 0a:d8:67:b6:2a:bd:d3:5e:0e:86:85:a6:f9:6a:06:f2:e3:64: 3c:a2:80:23:ff:0b:43:69:df:6e:2f:ff:20:cc:8e:c5:b5:92: 4d:a0:53:f2:0f:2a:52:93:20:93:ab:c9:5e:d7:89:30:c4:3b: bf:19:c0:93:fb:59:72:82:0a:9f:ac:a0:a3:3f:45:39:10:00: a9:69:85:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUxMjIxMDIxMzE5WhcNMjUxMjI4MDIxMzE5WjAYMRYwFAYD VQQDDA02OTQ3NTdjMC1mZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKAfIGl0YVe0FbiFGwi5hYvOb5wAAHE+OMTSZkQzouH4th2FjKBE3xuLNTfl KBILsr9reLmJuJUtGnxIaIeMGlvetPDgirB3z2h15Im3tbnJnSG6Q1lkKlkqTMl7 22u47HzpSL0ihb/HkK+9y3lb1orngjKodrKACdZaW8sg85T3qDorUAakcw2y+xQC VIhAnsIdsIkNBoHcq3mmZiFMWCGzi/6iHpqTL93XxiSQaquDFcOCJHgVbczNSnVf e95Hdyktwr855rFLkvRGEBZNbfIxMwGQlsAHlRxwK/uilsTnabpQ11kFWrxbaSRC u4vLhbpCcMEOFXawrQ0+FRs1GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIkGgwc 98fh25BE2NkrltlAg/6QMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAupt7Q0/cbnVEJazsR0u0IHGLHIoBFxhtVPcj5HiJdy6P0oGmfAIev Rvw4RD70WzbZu81NAw5RGU/uvMgsuLQ9jqKGqOyHNYv2apYX2iu9llyNPt41inj3 FRdDodSsJQV0vHn4XsxMgTakHeYcYzz02LA1luDIRoI8YF/G/4j0I819cRYg5rtY 5ojzPi1gYj4Mq4vBXZ5ss7uH5Xjho06cKO1XpYz+0vIWtrYBosmUBxLHGlUK2Ge2 Kr3TXg6Ghab5agby42Q8ooAj/wtDad9uL/8gzI7FtZJNoFPyDypSkyCTq8le14kw xDu/GcCT+1lyggqfrKCjP0U5EACpaYUX -----END CERTIFICATE-----Generated at Sun Dec 21 09:35:28 2025 by rpki-client