This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: KTatyKN3riiIqS0/2tFZmkf04hz2YK64VMgMaTDTkho= Subject key identifier: 1E:A4:FE:AE:F4:91:A1:CB:53:3E:79:72:69:1F:F9:FC:F3:18:93:FB Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 08DF Signing time: Fri 26 Dec 2025 19:46:40 +0000 Manifest this update: Fri 26 Dec 2025 19:46:39 +0000 Manifest next update: Fri 02 Jan 2026 19:46:39 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: LrZYL1YJt+NFFIvgT6NnxFLEPZy42w2yiiGRb6BX9ek=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: opv4DBbLy0U1nxAJSQ/FW4lgkGanCqSRXcsssLo5kGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: Dec 26 19:46:39 2025 GMT Not After : Jan 2 19:46:39 2026 GMT Subject: CN=694ee620-25fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:e6:7a:c7:c1:c0:de:ed:e1:11:17:68:2d: 1f:92:d6:9c:af:54:87:41:8f:41:26:f8:f3:b1:7a: 24:b7:29:75:15:4c:5a:1e:3e:34:16:77:53:c4:38: 8f:35:02:0c:f1:7a:22:3f:cd:b3:f0:98:65:57:bd: fe:62:e4:17:0a:65:da:35:ca:15:79:9d:ce:65:1e: e0:fa:fa:f9:c7:b7:e1:c3:87:f1:9d:35:79:06:dd: 4d:fc:09:e8:09:04:89:7f:13:79:73:3b:82:fa:fa: 84:f9:7f:d0:21:57:85:13:ce:49:99:75:4c:98:a5: f2:31:95:2d:ea:fc:63:b5:8d:66:33:46:1d:c2:06: 7e:9e:da:ef:e1:f5:23:e2:eb:da:17:e5:60:02:fc: b2:b3:a3:e0:21:d5:5d:ba:4b:7e:c9:ec:34:83:61: 34:48:fb:a7:0e:82:d1:85:d0:ec:1e:b6:ec:27:93: ca:b5:2e:bc:f3:b5:4e:75:40:7f:97:26:a4:20:ca: 8d:95:cd:4a:69:00:7d:00:07:44:c9:06:49:a1:f4: d6:09:71:a9:cc:14:aa:c3:7d:b8:f0:ca:aa:31:0b: da:26:72:2c:74:7b:be:93:c9:ca:46:c3:47:f7:bf: 3c:65:79:dc:c7:be:a9:7e:99:7e:42:22:fc:b2:ed: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A4:FE:AE:F4:91:A1:CB:53:3E:79:72:69:1F:F9:FC:F3:18:93:FB X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e9:ba:8f:4c:76:70:89:79:b4:65:1f:8f:30:a7:3d:4f:87: 34:08:67:e8:81:a3:b4:8b:34:24:3b:62:79:15:73:bc:d4:39: d5:d6:2c:08:96:3a:f5:46:5d:c1:e4:4a:30:c7:6a:2f:06:f6: 5c:31:2d:ad:9a:84:08:19:71:bf:f6:57:ce:0f:43:24:9a:05: cf:0c:ac:12:af:58:b6:50:78:d6:1a:4a:b5:08:7a:91:7e:61: a4:16:0c:98:b6:e5:61:b2:f0:5e:20:2c:48:ab:d9:07:97:97: 0b:b3:71:ad:ed:cc:fb:ab:8f:96:52:db:3f:bd:96:f7:a9:13: ca:31:7f:96:58:26:6c:ee:c6:20:b7:17:95:67:69:5c:bf:2e: 5a:8a:97:be:ba:cd:2a:c7:03:bb:f8:89:f8:55:e5:34:d0:79: 4c:e8:1a:20:2a:0f:16:53:8c:93:7c:26:24:ad:a1:de:19:1f: 5d:fc:df:b4:a5:88:62:98:e8:86:12:d9:3e:bd:29:44:ed:cb: f3:3f:46:2b:3e:20:f9:da:56:da:76:3d:c7:ba:fb:b6:ff:00: 5c:bf:27:49:3c:48:10:5a:84:46:eb:e1:41:61:ff:51:59:03: 90:c4:e8:dc:6f:8f:22:ae:d9:68:46:40:9b:fc:7e:d9:f6:5f: 61:65:89:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjUxMjI2MTk0NjM5WhcNMjYwMTAyMTk0NjM5WjAYMRYwFAYD VQQDDA02OTRlZTYyMC0yNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQXmesfBwN7t4REXaC0fktacr1SHQY9BJvjzsXoktyl1FUxaHj40FndTxDiP NQIM8XoiP82z8JhlV73+YuQXCmXaNcoVeZ3OZR7g+vr5x7fhw4fxnTV5Bt1N/Ano CQSJfxN5czuC+vqE+X/QIVeFE85JmXVMmKXyMZUt6vxjtY1mM0YdwgZ+ntrv4fUj 4uvaF+VgAvyys6PgIdVdukt+yew0g2E0SPunDoLRhdDsHrbsJ5PKtS6887VOdUB/ lyakIMqNlc1KaQB9AAdEyQZJofTWCXGpzBSqw3248MqqMQvaJnIsdHu+k8nKRsNH 9788ZXncx76pfpl+QiL8su2kmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6k/q70 kaHLUz55cmkf+fzzGJP7MB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO6bqPTHZwiXm0ZR+PMKc9T4c0CGfogaO0izQkO2J5FXO81DnV1iwI ljr1Rl3B5Eowx2ovBvZcMS2tmoQIGXG/9lfOD0MkmgXPDKwSr1i2UHjWGkq1CHqR fmGkFgyYtuVhsvBeICxIq9kHl5cLs3Gt7cz7q4+WUts/vZb3qRPKMX+WWCZs7sYg txeVZ2lcvy5aipe+us0qxwO7+In4VeU00HlM6BogKg8WU4yTfCYkraHeGR9d/N+0 pYhimOiGEtk+vSlE7cvzP0YrPiD52lbadj3Huvu2/wBcvydJPEgQWoRG6+FBYf9R WQOQxOjcb48irtloRkCb/H7Z9l9hZYkD -----END CERTIFICATE-----Generated at Sat Dec 27 15:48:53 2025 by rpki-client