This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: 3qw43AmdHyBFHO8mnX5qzk6J09UXZW8dh3abMpzkONc= Subject key identifier: 90:8D:DD:80:CC:EE:72:EC:D6:DC:4A:1E:A3:B9:46:D8:CC:DA:DC:F3 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0D1C Signing time: Sun 28 Dec 2025 19:54:07 +0000 Manifest this update: Sun 28 Dec 2025 19:54:06 +0000 Manifest next update: Sun 04 Jan 2026 19:54:06 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: FlxxHdL2jXB4FKxRYblEweBfvctfYv9rHfzD2yi243g=) 2: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: khC3NWIbwkvutKI6Vqs7kfio6cgD4nvnuDwfjQlSlpw=) 3: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: R9z8+TOIkB2HShaZE8kZf0+7pw9G6s/c+bvTwVe027E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Dec 28 19:54:06 2025 GMT Not After : Jan 4 19:54:06 2026 GMT Subject: CN=69518adf-34d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:d3:2a:65:37:c5:0b:36:1d:10:cb:61:87: 7e:48:c5:c0:f0:90:92:1f:ff:49:f1:8a:62:4e:f5: 56:b0:33:ac:a9:2a:62:03:df:e7:f9:60:7c:97:0e: 57:09:17:ee:7e:d6:10:f2:fd:f3:71:7c:98:2b:f8: 19:9f:3f:2a:d5:e8:db:0a:2b:fa:06:3d:7d:22:81: 20:c8:15:d0:b8:cf:59:08:10:ae:00:38:29:2d:d5: ab:9e:0e:09:b7:8d:55:b9:f9:4d:a5:d8:76:85:1c: ba:f0:77:1d:63:8f:6b:85:77:4f:c8:8d:56:4f:4a: 91:72:96:31:e4:06:c1:44:cc:82:27:52:8b:dc:85: 91:bc:4e:26:17:61:de:2e:75:2c:54:55:4b:5f:51: 95:aa:19:c6:8b:3c:b9:b4:8b:a0:35:a9:ab:75:d4: d4:35:46:fc:0b:a0:ab:5f:6a:fb:fe:be:ba:81:05: d3:1c:62:8c:47:62:56:5f:44:67:1d:6a:e5:64:18: 7e:dd:40:61:a8:e3:fe:76:44:a0:69:09:92:0a:27: ef:85:a4:6b:0c:4f:db:66:07:f6:79:da:9f:0e:9f: 56:82:48:6e:95:18:16:93:ea:4c:d9:d1:ac:27:60: 85:8e:cd:f5:d3:10:76:47:d9:fc:7d:8c:e1:ac:09: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:DD:80:CC:EE:72:EC:D6:DC:4A:1E:A3:B9:46:D8:CC:DA:DC:F3 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:9c:e3:b9:85:3b:77:2c:9b:f6:0c:2c:f0:85:93:2a:63:df: 74:50:7e:60:39:07:1d:f7:12:57:9e:72:24:4b:94:d0:1c:d7: 75:ec:87:66:a0:c9:a9:cc:19:66:f6:84:cf:3b:c4:63:a0:2c: 69:80:5e:89:60:ad:e1:49:95:e4:79:f2:a6:f0:37:b5:02:87: d2:a0:5d:22:32:43:a7:04:a8:ac:59:78:7a:08:a8:46:be:f1: ea:1f:f5:6f:d4:63:2f:85:37:91:84:f0:df:11:fa:67:fc:bd: a8:e1:33:8d:01:68:74:48:5c:f8:31:d0:fa:1a:18:32:8b:5c: 99:20:f5:5a:bb:0e:8e:d8:77:41:98:8c:a8:0c:39:c9:b7:7a: 01:4a:2e:65:79:88:6a:fe:8a:51:f1:3b:06:f7:d1:49:8a:bf: 7d:ef:e9:7f:86:73:ad:22:95:70:08:77:03:9e:31:1b:00:eb: bd:5d:f9:41:4e:88:01:92:5b:2d:7a:9a:7c:22:06:e6:38:ff: 3a:8d:0b:db:84:f0:57:bd:49:84:c4:31:48:6c:8f:fc:46:26: 1f:50:aa:5c:ec:22:59:e1:9e:ea:8a:1c:7b:70:22:7e:f9:75: 50:6c:f3:52:c6:47:b5:a8:76:6c:28:ab:44:20:a2:c6:99:63: a1:f3:bd:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjUxMjI4MTk1NDA2WhcNMjYwMTA0MTk1NDA2WjAYMRYwFAYD VQQDDA02OTUxOGFkZi0zNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsbTKmU3xQs2HRDLYYd+SMXA8JCSH/9J8YpiTvVWsDOsqSpiA9/n+WB8lw5X CRfuftYQ8v3zcXyYK/gZnz8q1ejbCiv6Bj19IoEgyBXQuM9ZCBCuADgpLdWrng4J t41VuflNpdh2hRy68HcdY49rhXdPyI1WT0qRcpYx5AbBRMyCJ1KL3IWRvE4mF2He LnUsVFVLX1GVqhnGizy5tIugNamrddTUNUb8C6CrX2r7/r66gQXTHGKMR2JWX0Rn HWrlZBh+3UBhqOP+dkSgaQmSCifvhaRrDE/bZgf2edqfDp9WgkhulRgWk+pM2dGs J2CFjs310xB2R9n8fYzhrAmmdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCN3YDM 7nLs1txKHqO5RtjM2tzzMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGnOO5hTt3LJv2DCzwhZMqY990UH5gOQcd9xJXnnIkS5TQHNd17Idm oMmpzBlm9oTPO8RjoCxpgF6JYK3hSZXkefKm8De1AofSoF0iMkOnBKisWXh6CKhG vvHqH/Vv1GMvhTeRhPDfEfpn/L2o4TONAWh0SFz4MdD6Ghgyi1yZIPVauw6O2HdB mIyoDDnJt3oBSi5leYhq/opR8TsG99FJir997+l/hnOtIpVwCHcDnjEbAOu9XflB TogBklstepp8IgbmOP86jQvbhPBXvUmExDFIbI/8RiYfUKpc7CJZ4Z7qihx7cCJ+ +XVQbPNSxke1qHZsKKtEIKLGmWOh873r -----END CERTIFICATE-----Generated at Mon Dec 29 14:40:20 2025 by rpki-client