This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft File: TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json) Hash identifier: kNGY99cA62AFWYq8uxtmGt4lC+gPWUu8g8vikgEdq2w= Subject key identifier: 72:56:DB:64:42:5A:A2:F1:5A:19:7B:8E:72:6E:BF:6F:AB:2A:75:DE Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 Certificate issuer: /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft Manifest number: 8D Signing time: Thu 25 Dec 2025 05:32:34 +0000 Manifest this update: Thu 25 Dec 2025 05:32:34 +0000 Manifest next update: Thu 01 Jan 2026 05:32:34 +0000 Files and hashes: 1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: Fih0wp3ri+Wpcsm+N3jx9+aGpdpzU0rC65c1V4LpbOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2 Validity Not Before: Dec 25 05:32:34 2025 GMT Not After : Jan 1 05:32:34 2026 GMT Subject: CN=694ccc72-5885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:5f:59:9f:36:1e:fc:91:61:f0:0e:b9:5e: 6e:57:b6:bf:1a:83:25:95:87:8c:85:4e:50:0d:49: 53:ef:e0:ae:11:30:c6:86:4f:42:1b:d0:79:83:ef: 9d:78:61:2e:2c:fd:28:a1:5a:50:c6:a2:57:a0:07: ed:fb:5d:c0:d2:72:a7:ff:47:b3:e8:53:da:21:fc: 8a:8d:6d:ec:7f:0d:d8:df:6e:08:1a:c9:f0:9a:19: a3:bd:65:aa:b7:31:39:d8:db:5a:90:ee:53:ea:12: d7:e6:ea:40:28:37:8f:84:38:0c:fc:ca:a4:f8:d0: 69:e8:bf:73:63:8b:c1:7e:ec:a0:6c:e1:ac:5f:4f: 79:a2:af:31:8b:f2:cb:d8:3b:e6:f2:0f:9c:ab:94: 27:1e:42:30:25:54:07:80:5f:1c:a0:26:e8:a6:21: 35:c3:65:f9:14:63:bb:3b:1a:29:4e:5f:e6:55:fe: 1d:56:8c:0a:da:eb:f4:35:e0:3f:02:98:9e:86:59: 77:70:19:fa:73:94:29:1c:97:da:4d:9d:19:2a:72: 70:d9:58:94:73:12:73:57:e4:a6:ba:c1:44:3c:3e: 65:f7:ca:41:a0:44:74:82:98:5b:65:6f:30:55:a7: 69:76:33:88:e9:a8:59:28:df:33:5a:06:80:f3:9a: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:56:DB:64:42:5A:A2:F1:5A:19:7B:8E:72:6E:BF:6F:AB:2A:75:DE X509v3 Authority Key Identifier: keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6b:d4:07:ea:85:45:96:b3:72:3d:a5:a1:d9:95:a3:a9:2e: 8c:f0:9e:f8:fa:88:c4:b6:b8:76:8d:2b:5f:f4:7e:44:c4:00: 6b:3c:aa:b0:cc:d6:ee:ad:f5:9e:68:0e:a4:96:5b:1e:87:e5: ad:07:74:d9:67:d8:14:26:01:ee:48:b6:55:15:c5:7d:66:bf: 39:0c:3e:e1:af:98:fe:e6:60:dd:8e:43:80:64:ee:dd:66:0b: 68:c9:03:78:24:c3:47:5d:f0:dd:f0:5d:58:a2:8f:7b:9d:f7: 83:ac:bc:00:37:98:8e:43:49:d2:cd:2c:5f:3a:d3:b7:58:90: bb:cc:47:0c:25:0d:6a:4a:ba:91:45:90:08:f7:ed:d4:b2:64: f2:70:b7:81:06:52:2c:cd:80:39:d5:bc:81:7b:c1:27:c4:2f: c6:8a:ea:47:bc:bf:92:03:1b:aa:e3:d5:1f:e9:01:38:8c:7b: e3:e9:82:ed:d0:df:5d:d8:15:9d:91:fb:f3:5f:69:a2:a0:80: 29:97:5e:69:74:f2:ed:f9:84:29:e8:bd:a7:0e:72:d8:ab:8e: 59:40:ab:1e:7d:10:71:41:b4:54:19:88:69:33:34:c9:ed:38: 33:0f:e1:b2:4c:d5:b1:de:ff:84:31:4a:2f:65:5e:50:e6:fb: da:bc:5e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBREExMTAvBgNVBAUTKDRDMjZGOTdDOTU3QkJGQkQ4Q0FBQUZEQUZBNzk1QTcz MUUxMTJBRDIwHhcNMjUxMjI1MDUzMjM0WhcNMjYwMTAxMDUzMjM0WjAYMRYwFAYD VQQDDA02OTRjY2M3Mi01ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrxfWZ82HvyRYfAOuV5uV7a/GoMllYeMhU5QDUlT7+CuETDGhk9CG9B5g++d eGEuLP0ooVpQxqJXoAft+13A0nKn/0ez6FPaIfyKjW3sfw3Y324IGsnwmhmjvWWq tzE52NtakO5T6hLX5upAKDePhDgM/Mqk+NBp6L9zY4vBfuygbOGsX095oq8xi/LL 2Dvm8g+cq5QnHkIwJVQHgF8coCbopiE1w2X5FGO7OxopTl/mVf4dVowK2uv0NeA/ Apiehll3cBn6c5QpHJfaTZ0ZKnJw2ViUcxJzV+SmusFEPD5l98pBoER0gphbZW8w VadpdjOI6ahZKN8zWgaA85pfzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJW22RC WqLxWhl7jnJuv2+rKnXeMB8GA1UdIwQYMBaAFEwm+XyVe7+9jKqv2vp5WnMeESrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFEQS9GQjU1M0QzMjA5 NTMxMUYwODU0N0EyMTNDNEY5QUUwMi9UQ2I1ZkpWN3Y3Mk1xcV9hLW5sYWN4NFJL dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFEQS9GQjU1M0QzMjA5NTMxMUYwODU0N0EyMTNDNEY5QUUwMi9UQ2I1ZkpWN3Y3 Mk1xcV9hLW5sYWN4NFJLdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAba9QH6oVFlrNyPaWh2ZWjqS6M8J74+ojEtrh2jStf9H5ExABrPKqw zNburfWeaA6kllseh+WtB3TZZ9gUJgHuSLZVFcV9Zr85DD7hr5j+5mDdjkOAZO7d ZgtoyQN4JMNHXfDd8F1Yoo97nfeDrLwAN5iOQ0nSzSxfOtO3WJC7zEcMJQ1qSrqR RZAI9+3UsmTycLeBBlIszYA51byBe8EnxC/GiupHvL+SAxuq49Uf6QE4jHvj6YLt 0N9d2BWdkfvzX2mioIApl15pdPLt+YQp6L2nDnLYq45ZQKsefRBxQbRUGYhpMzTJ 7TgzD+GyTNWx3v+EMUovZV5Q5vvavF4X -----END CERTIFICATE-----Generated at Sat Dec 27 03:53:49 2025 by rpki-client