This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
File: TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json)
Hash identifier: 0swj+reQvNAPo/FbWeFsWkW8g8I8ptMsDpXGmzBsij4=
Subject key identifier: 39:23:4C:F8:CC:EC:5F:10:30:18:DF:B8:04:AF:DA:0B:DE:03:AC:24
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Certificate issuer: /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial: 09BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
Manifest number: 09B5
Signing time: Thu 18 Dec 2025 19:33:18 +0000
Manifest this update: Thu 18 Dec 2025 19:33:17 +0000
Manifest next update: Thu 25 Dec 2025 19:33:17 +0000
Files and hashes: 1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: UmdIVs5HGxP6vbRa322QCSNc1tRfb4VPmovmYoqNuyo=)
2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: byJpKNPjQF7b2JFAHp+3RTx6U3vbcPnlcOVf0jom37s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2494 (0x9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Validity
Not Before: Dec 18 19:33:17 2025 GMT
Not After : Dec 25 19:33:17 2025 GMT
Subject: CN=694456fe-b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:c0:0f:2e:59:79:a7:0f:25:54:19:42:be:
b4:fc:53:b8:7f:4f:95:6f:e8:54:66:b2:9f:e1:13:
08:ca:47:df:87:f7:6b:2e:ee:6e:3a:3a:ce:88:57:
96:16:b2:a7:2f:41:df:b9:15:38:82:2a:fa:d5:15:
9f:ae:25:72:95:78:80:60:86:1c:8e:8a:ce:86:31:
34:2d:c0:9d:ca:a2:8d:04:c8:8c:ba:0c:a0:af:81:
e1:9c:b3:0f:d5:d1:bd:d6:51:4e:3a:78:b0:3c:fe:
a8:24:4f:dd:d9:16:3f:db:2a:3c:02:6a:c3:08:31:
75:d9:f8:08:bc:e5:e9:98:5a:74:26:e1:27:76:61:
47:58:93:4f:e8:45:b4:df:7a:ea:51:7f:59:9f:59:
5c:1e:02:0b:60:06:4f:13:ee:ae:eb:7c:80:e7:30:
67:17:cc:3e:d1:6e:c9:65:10:b0:b8:1e:fc:ff:9a:
6c:ea:0c:ec:58:4e:9c:4c:b1:43:1d:62:47:01:f5:
03:91:93:ef:b5:20:69:6a:d3:81:2a:f9:33:33:06:
2c:29:c5:0f:ad:77:05:d1:82:1c:a8:5c:c5:45:1c:
c6:b1:1a:47:22:d3:14:f0:75:91:ee:89:3c:3c:0a:
a8:d6:7a:5e:14:df:2d:71:2e:39:cc:32:bf:23:f8:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:4C:F8:CC:EC:5F:10:30:18:DF:B8:04:AF:DA:0B:DE:03:AC:24
X509v3 Authority Key Identifier:
keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:47:43:be:24:d1:60:96:1d:f4:49:bd:76:77:c4:43:38:0b:
7e:38:24:44:42:14:b1:a2:b6:2a:52:53:da:41:a8:24:84:4d:
0e:b9:7c:53:5c:b7:b3:23:0d:c4:e9:b3:e7:d9:04:06:4e:63:
46:b5:86:a1:d2:49:17:ca:e9:c1:bd:2c:da:92:37:64:e5:11:
56:a1:52:bb:0f:bf:20:6b:95:d3:8c:67:33:e7:a5:98:94:ba:
5a:60:aa:f6:f8:f6:34:c7:79:3d:bf:95:6e:eb:e7:e3:55:93:
30:86:b2:98:a2:a3:15:1f:80:5e:9c:5e:a1:aa:1a:c5:f4:f3:
c2:b9:99:9b:94:11:d4:4c:62:56:99:45:b6:43:eb:04:6b:c6:
19:32:d4:6d:9a:9e:b6:87:bd:b2:16:ae:48:ad:61:29:0e:95:
65:4a:04:c2:62:3b:a7:62:9d:f8:8f:c7:22:48:c2:3a:e7:72:
51:ae:f2:2f:c6:f8:b4:43:4a:cd:6b:69:1f:42:87:1a:e1:72:
73:06:54:eb:34:c3:65:41:fa:54:30:66:c9:ec:7b:a2:71:ab:
cc:59:ef:ba:ee:fc:62:21:4a:b8:ef:cd:12:19:86:c1:77:bd:
7b:a4:5a:21:6a:95:78:f8:17:6c:00:f7:03:f1:72:5a:5e:8d:
0c:83:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:56:12 2025 by rpki-client