This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: hdVU2BScHOMxJMYEVlp5JupM9HdFjecD5XlF7qoyelQ= Subject key identifier: DC:41:97:DE:86:DC:6B:9C:B7:52:8C:EF:7E:1F:14:46:ED:23:03:35 Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 02AE Signing time: Mon 29 Dec 2025 00:32:38 +0000 Manifest this update: Mon 29 Dec 2025 00:32:38 +0000 Manifest next update: Mon 05 Jan 2026 00:32:38 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: ewumhFR/fZ4nmRVhCnIYASVQqGe+WgwRs2Cwp+Ctpfc=) 2: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: N2Razv0UpqWwte3fSDYUfYnRdysKXHjWJIk1sn7vc0c=) 3: 36765016252911EDBEF5C985C4F9AE02.roa (hash: rKgSkodd0QWwnADIiLvo3yavSccs7jpZLRjO9DNzizg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 00:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Dec 29 00:32:38 2025 GMT Not After : Jan 5 00:32:38 2026 GMT Subject: CN=6951cc26-fe83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:88:ad:8b:96:66:da:84:af:f4:e1:4d:bf: e9:dc:95:ed:d2:2c:d3:38:78:22:fc:aa:82:16:b7: 63:ef:9f:04:10:df:cd:28:de:b8:b1:ed:f3:a9:3f: 8f:cd:cc:69:7f:81:eb:27:aa:cb:e4:c1:c5:36:16: 51:27:39:33:23:e4:5a:96:b6:e8:bd:ab:93:a6:e5: 3e:2a:31:de:55:fa:e1:66:97:71:c7:6e:54:e2:46: 73:7b:cf:ea:b7:6a:d0:02:17:94:54:da:f7:38:33: d6:11:cd:ff:09:a0:f0:42:d4:37:d3:7b:4a:33:4c: 60:3e:45:2a:29:f5:13:04:1f:ba:40:15:c4:1c:09: 2a:b4:8a:44:06:df:49:71:9f:cd:bf:00:19:56:4d: db:46:80:d0:8b:e7:1f:c6:0f:30:8c:ad:33:51:42: 93:08:68:f3:09:d2:d1:5d:bd:04:9e:06:02:56:1c: f3:e8:d3:00:bc:f7:ae:de:a7:04:c9:24:a5:6c:58: 45:21:4e:69:64:33:4e:81:5e:d2:23:ce:92:da:75: 30:5c:d4:ac:37:11:0f:98:08:d8:5c:15:1f:8e:96: 13:6e:d1:15:63:83:11:6d:f3:43:b3:44:4b:7a:03: be:1d:a0:8f:0b:5e:7f:3b:c6:b6:2a:31:bf:28:cf: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:41:97:DE:86:DC:6B:9C:B7:52:8C:EF:7E:1F:14:46:ED:23:03:35 X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:8e:8b:9a:f5:9d:b5:79:25:22:98:c6:d8:b2:08:e2:70:d1: 25:4a:42:5f:19:04:f2:e5:fd:90:21:6d:78:ba:78:bf:67:aa: 9d:06:0f:91:91:70:2e:73:bb:ce:02:c5:51:a7:82:21:c0:c0: f9:c3:f7:76:dd:ad:c8:e2:83:26:7f:de:b1:b1:70:c2:44:35: 53:43:c2:c3:d0:66:31:2f:51:cf:64:8b:63:06:e3:3f:35:64: 5c:7e:d1:ec:a4:9c:a5:4d:2a:81:12:16:5b:5a:a5:f8:58:46: cf:3c:fe:aa:2c:42:df:76:9f:d3:1b:4c:eb:44:fc:7f:a2:dc: 08:0a:02:14:4e:57:77:68:e1:26:35:f4:d0:e3:2f:4f:66:21: 60:98:26:b3:1a:b2:42:e9:78:7e:67:d9:07:86:6b:0d:33:e3: e6:81:16:a2:ad:04:4d:66:ae:3d:c9:6b:42:f4:6f:98:f5:5b: eb:22:eb:25:3a:5e:64:f1:13:d4:ff:a4:07:b9:04:dd:f3:8e: aa:1e:1a:7d:49:97:a2:6a:bc:78:d4:a3:e7:19:8c:f3:11:49: a3:f4:1d:70:12:1f:ae:dd:1f:7b:e1:2d:0b:1a:72:19:9b:ef: 78:37:b0:e1:a8:33:83:83:c7:ca:c9:d1:97:6e:80:0d:de:eb: 44:08:b2:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjUxMjI5MDAzMjM4WhcNMjYwMTA1MDAzMjM4WjAYMRYwFAYD VQQDDA02OTUxY2MyNi1mZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4GIrYuWZtqEr/ThTb/p3JXt0izTOHgi/KqCFrdj758EEN/NKN64se3zqT+P zcxpf4HrJ6rL5MHFNhZRJzkzI+RalrbovauTpuU+KjHeVfrhZpdxx25U4kZze8/q t2rQAheUVNr3ODPWEc3/CaDwQtQ303tKM0xgPkUqKfUTBB+6QBXEHAkqtIpEBt9J cZ/NvwAZVk3bRoDQi+cfxg8wjK0zUUKTCGjzCdLRXb0EngYCVhzz6NMAvPeu3qcE ySSlbFhFIU5pZDNOgV7SI86S2nUwXNSsNxEPmAjYXBUfjpYTbtEVY4MRbfNDs0RL egO+HaCPC15/O8a2KjG/KM8t9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxBl96G 3Guct1KM734fFEbtIwM1MB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAjoua9Z21eSUimMbYsgjicNElSkJfGQTy5f2QIW14uni/Z6qdBg+R kXAuc7vOAsVRp4IhwMD5w/d23a3I4oMmf96xsXDCRDVTQ8LD0GYxL1HPZItjBuM/ NWRcftHspJylTSqBEhZbWqX4WEbPPP6qLELfdp/TG0zrRPx/otwICgIUTld3aOEm NfTQ4y9PZiFgmCazGrJC6Xh+Z9kHhmsNM+PmgRairQRNZq49yWtC9G+Y9VvrIusl Ol5k8RPU/6QHuQTd846qHhp9SZeiarx41KPnGYzzEUmj9B1wEh+u3R974S0LGnIZ m+94N7DhqDODg8fKydGXboAN3utECLL8 -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:39 2025 by rpki-client