This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: z4903bGgTVrRgJS8V1lOMPeCgVzrxj5trXQTYZ1iqxg= Subject key identifier: 0D:AF:89:AE:94:D3:93:BA:79:B7:87:89:B6:77:D1:8A:FD:75:07:9A Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: 012A Signing time: Thu 25 Dec 2025 03:42:45 +0000 Manifest this update: Thu 25 Dec 2025 03:42:45 +0000 Manifest next update: Thu 01 Jan 2026 03:42:45 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: 6dPdx3xQpwuDN/nbIvEof9+d51Bd37Bu72iell4vD2U=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: DqAscZot5tvFIRSwhun0FkboyMxWikjQ2XKpTFYg9ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 03:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Dec 25 03:42:45 2025 GMT Not After : Jan 1 03:42:45 2026 GMT Subject: CN=694cb2b5-188a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:63:56:8c:25:31:ed:5e:90:bc:8a:21:47: c7:69:e9:80:e1:8e:e1:ec:e0:98:12:f6:ea:9f:d5: 62:16:a6:68:da:7a:46:9d:ff:42:8b:8e:43:5e:97: e1:f1:b6:d4:a6:6b:98:54:22:54:72:1c:3f:ff:37: 99:83:ac:4b:ff:80:90:12:e2:04:d1:e0:89:9e:95: a1:e4:30:11:80:b3:10:c0:ba:d6:af:0c:65:fd:c3: fd:e5:f5:0a:17:38:92:dc:ca:ee:01:69:08:d9:c7: d7:5d:c5:40:ae:7e:14:0b:42:ec:78:1a:0f:69:9e: 50:30:3e:24:23:72:9e:53:72:3b:dc:f3:e7:37:f2: ce:65:c7:4e:b8:34:1a:f6:c7:f6:c3:ac:50:a1:f4: fc:84:d3:78:1c:cf:dc:25:29:d7:48:4f:5c:41:0d: 61:e3:06:8f:4a:b0:bc:c9:b3:b4:8f:5d:af:2c:dd: 90:25:b3:74:65:28:5f:f9:af:20:27:ca:e8:d4:4a: 31:7a:a3:61:25:e0:23:44:c3:7a:5c:24:8b:97:41: 40:9c:aa:a2:cf:e3:2a:f0:91:45:6b:93:9e:91:bb: 42:9f:fc:7e:e5:c0:54:d5:86:07:4d:2c:e7:43:58: 5e:93:b3:5f:1a:c4:ae:77:ca:6a:c4:e7:8b:23:f0: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AF:89:AE:94:D3:93:BA:79:B7:87:89:B6:77:D1:8A:FD:75:07:9A X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2b:d6:3a:e3:9c:4d:6a:fe:92:39:5c:0a:01:f1:6b:b7:4a: da:57:37:32:60:3a:ea:a9:b9:f1:7d:8f:c0:50:1d:ed:43:80: 96:8e:0e:a7:c7:da:6a:7b:bb:ee:b4:22:ae:d9:56:7f:9f:5d: 14:e2:57:91:72:fc:83:f7:09:81:83:b7:b2:d0:fd:2d:a4:7c: d5:88:8c:cc:79:8a:99:07:36:0b:31:33:f2:aa:b2:d6:09:85: c1:6c:65:c5:08:d7:39:ab:ec:6d:bf:e8:9e:5c:1f:90:f4:5c: 1f:5b:93:d4:33:5a:71:30:1f:07:f8:1d:71:4e:41:24:68:df: ca:71:67:03:cb:eb:83:41:98:19:78:d5:31:f2:6e:73:53:93: f5:40:52:d2:a6:40:a6:bd:1b:eb:db:27:f8:2a:3d:48:d7:fd: c8:9f:32:c0:b8:8d:37:e4:19:cb:e2:f0:17:a5:3a:e1:12:81: bb:ad:14:a3:52:51:19:82:59:c8:b4:7f:7d:89:e8:8c:16:8c: 94:97:b1:57:7e:1c:3c:a2:35:50:74:fd:48:37:92:b6:cd:a1: 6e:b9:6b:51:43:84:bb:17:9c:bb:ec:21:02:a0:12:a4:1c:2c: cc:41:02:d8:38:dc:38:bb:3d:80:c1:14:c5:b3:9b:3e:a2:7f: f8:2e:44:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjUxMjI1MDM0MjQ1WhcNMjYwMTAxMDM0MjQ1WjAYMRYwFAYD VQQDDA02OTRjYjJiNS0xODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2BjVowlMe1ekLyKIUfHaemA4Y7h7OCYEvbqn9ViFqZo2npGnf9Ci45DXpfh 8bbUpmuYVCJUchw//zeZg6xL/4CQEuIE0eCJnpWh5DARgLMQwLrWrwxl/cP95fUK FziS3MruAWkI2cfXXcVArn4UC0LseBoPaZ5QMD4kI3KeU3I73PPnN/LOZcdOuDQa 9sf2w6xQofT8hNN4HM/cJSnXSE9cQQ1h4waPSrC8ybO0j12vLN2QJbN0ZShf+a8g J8ro1EoxeqNhJeAjRMN6XCSLl0FAnKqiz+Mq8JFFa5OekbtCn/x+5cBU1YYHTSzn Q1hek7NfGsSud8pqxOeLI/C3wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2via6U 05O6ebeHibZ30Yr9dQeaMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABK9Y645xNav6SOVwKAfFrt0raVzcyYDrqqbnxfY/AUB3tQ4CWjg6n x9pqe7vutCKu2VZ/n10U4leRcvyD9wmBg7ey0P0tpHzViIzMeYqZBzYLMTPyqrLW CYXBbGXFCNc5q+xtv+ieXB+Q9FwfW5PUM1pxMB8H+B1xTkEkaN/KcWcDy+uDQZgZ eNUx8m5zU5P1QFLSpkCmvRvr2yf4Kj1I1/3InzLAuI035BnL4vAXpTrhEoG7rRSj UlEZglnItH99ieiMFoyUl7FXfhw8ojVQdP1IN5K2zaFuuWtRQ4S7F5y77CECoBKk HCzMQQLYONw4uz2AwRTFs5s+on/4LkTj -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:31 2025 by rpki-client