This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: Bm41CUjZzdD6LeFUDvDdveBbiXBBB9qrA3u2Xyqhafk= Subject key identifier: BD:9E:B0:0B:AF:6D:A2:41:70:AA:3D:9B:FC:C7:09:5A:1E:66:BC:CD Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 0185 Signing time: Fri 19 Dec 2025 02:58:00 +0000 Manifest this update: Fri 19 Dec 2025 02:57:59 +0000 Manifest next update: Fri 26 Dec 2025 02:57:59 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: nLR4VWEZU23JoWZtrbn9PxrC/Gkw+KFaGdGPkxGONBo=) 2: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: Ba1lgzMsQfqpR3ei0tOYxQcrh9RVC5oeP2BQeuQZDHk=) 3: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Dec 19 02:57:59 2025 GMT Not After : Dec 26 02:57:59 2025 GMT Subject: CN=6944bf38-c416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:32:28:44:26:fe:1e:5a:4c:75:ad:a8:82: 8a:80:f4:13:51:20:ce:b2:d2:b7:74:31:4b:de:03: c1:9e:d6:4f:ee:66:4b:a3:84:03:5a:fe:ac:e0:e6: 13:7f:77:3a:79:d7:8a:d4:df:48:5a:14:8b:56:76: 96:62:3d:09:3c:f2:28:5e:49:89:23:73:df:63:a5: d1:af:16:64:69:4d:4c:33:d7:c4:b9:61:e1:c6:50: 4f:1b:4d:87:b0:d0:48:bc:dd:e5:51:d9:f2:81:62: 08:a5:1d:5a:3e:a3:e2:3c:ab:bb:f9:0c:39:30:c7: 5f:10:66:dc:48:e4:cd:aa:be:c6:f4:71:5e:e4:e4: 9b:7e:78:11:ed:05:15:73:37:f0:b3:40:1c:27:f4: 4c:42:01:5a:51:ac:ce:b7:e4:f1:3e:34:55:f1:73: 9b:ab:b6:a0:e6:c3:90:d3:7f:b4:b2:5d:b4:84:61: 68:b4:e2:9b:5d:50:d8:e1:12:03:d2:fa:c0:40:ad: e9:0f:84:e3:86:27:81:ae:a7:b0:6f:ab:54:48:ca: 03:71:25:39:80:dd:4d:31:51:d5:87:f7:86:6c:da: 47:a5:45:17:87:d5:0a:79:a4:06:8d:40:bd:64:77: fe:87:8b:6e:45:cb:c1:89:1b:e1:9a:b8:8f:53:73: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:B0:0B:AF:6D:A2:41:70:AA:3D:9B:FC:C7:09:5A:1E:66:BC:CD X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3d:d1:15:0d:8a:f3:de:6d:69:0f:ee:7e:6e:3b:25:1e:1f: 32:bf:c1:27:d3:5a:33:ea:92:4c:1c:ac:5d:8d:bd:0e:33:73: a7:1b:39:01:d5:15:d5:cf:19:89:62:5d:23:1b:e1:9f:2a:2b: ed:cb:60:db:52:53:22:ca:e1:ed:76:23:1d:bb:d9:78:bb:31: 4c:24:b9:00:78:85:87:96:42:e5:ba:f0:fa:24:83:c1:1b:a7: ad:d7:ff:13:8f:23:46:b0:d0:fe:9d:78:2f:d3:66:ee:d8:a7: 38:10:db:be:f7:b0:87:01:24:72:9c:8e:c6:d9:e1:2c:9e:d4: 71:ef:03:03:fa:aa:7c:e1:4e:4c:b1:bb:c7:ae:4b:59:9e:2e: a3:be:0b:70:a5:da:53:39:15:9d:30:76:c2:e7:9c:27:60:01: c8:e9:04:c5:b8:f2:8b:e4:41:34:5a:dd:ae:24:71:1c:67:37: dd:6b:7d:c3:9a:21:6c:f8:6d:dc:39:05:bc:bb:30:11:45:2f: 7a:4c:64:7f:2a:cc:f7:06:53:c5:f7:a6:2c:de:13:25:72:90: fc:3f:56:e5:bf:7a:a0:c9:d5:c9:d0:16:fb:96:d4:4d:10:0d: c8:17:d2:5d:5c:a8:bf:45:d0:ac:14:57:ff:a1:15:81:6e:bc: 80:4f:f3:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjUxMjE5MDI1NzU5WhcNMjUxMjI2MDI1NzU5WjAYMRYwFAYD VQQDDA02OTQ0YmYzOC1jNDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmYyKEQm/h5aTHWtqIKKgPQTUSDOstK3dDFL3gPBntZP7mZLo4QDWv6s4OYT f3c6edeK1N9IWhSLVnaWYj0JPPIoXkmJI3PfY6XRrxZkaU1MM9fEuWHhxlBPG02H sNBIvN3lUdnygWIIpR1aPqPiPKu7+Qw5MMdfEGbcSOTNqr7G9HFe5OSbfngR7QUV czfws0AcJ/RMQgFaUazOt+TxPjRV8XObq7ag5sOQ03+0sl20hGFotOKbXVDY4RID 0vrAQK3pD4TjhieBrqewb6tUSMoDcSU5gN1NMVHVh/eGbNpHpUUXh9UKeaQGjUC9 ZHf+h4tuRcvBiRvhmriPU3N0TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2esAuv baJBcKo9m/zHCVoeZrzNMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHPdEVDYrz3m1pD+5+bjslHh8yv8En01oz6pJMHKxdjb0OM3OnGzkB 1RXVzxmJYl0jG+GfKivty2DbUlMiyuHtdiMdu9l4uzFMJLkAeIWHlkLluvD6JIPB G6et1/8TjyNGsND+nXgv02bu2Kc4ENu+97CHASRynI7G2eEsntRx7wMD+qp84U5M sbvHrktZni6jvgtwpdpTORWdMHbC55wnYAHI6QTFuPKL5EE0Wt2uJHEcZzfda33D miFs+G3cOQW8uzARRS96TGR/Ksz3BlPF96Ys3hMlcpD8P1blv3qgydXJ0Bb7ltRN EA3IF9JdXKi/RdCsFFf/oRWBbryAT/OJ -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:13 2025 by rpki-client