This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json) Hash identifier: Rsu2cOCG39v7VSA0rbg7thYgEfQhxZrB9AGweM0D5M4= Subject key identifier: 7E:2B:15:93:A1:C2:53:B9:3F:B6:0F:2B:28:CF:00:D5:C1:F4:5A:DF Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft Manifest number: C7 Signing time: Thu 25 Dec 2025 04:53:41 +0000 Manifest this update: Thu 25 Dec 2025 04:53:41 +0000 Manifest next update: Thu 01 Jan 2026 04:53:41 +0000 Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: kMtI0qDfVjsD3WBq7b+m1kTrQxUiaVFkbcweGwgMnoc=) 2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: c+aLqfbR3Fgu4NT0Rj31V85wle+td9tPpiQLLrA3X1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Validity Not Before: Dec 25 04:53:41 2025 GMT Not After : Jan 1 04:53:41 2026 GMT Subject: CN=694cc355-0b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:29:c7:06:37:2d:4f:3c:d1:74:a6:30:f3: 98:8b:a2:ac:8a:df:13:03:41:63:b1:9e:71:54:56: b1:61:36:95:6a:45:6f:f2:a5:e5:c4:13:bb:f5:be: e6:4f:7f:e3:c2:6c:e3:de:a2:c3:d7:40:44:be:12: ab:f9:5b:b6:d5:55:e7:cb:45:d5:e6:a3:35:2c:8b: ca:8f:be:c9:a3:bf:2b:69:a0:01:52:f5:fe:bd:82: 7a:cf:04:14:3f:9a:0f:fc:19:f5:d4:f5:fa:c2:b1: 09:24:bb:68:4b:b3:22:92:e2:91:70:32:f3:7d:b2: c3:bb:5f:0e:d9:fb:d0:4b:f0:70:18:4b:36:45:10: cf:f2:a8:43:1f:87:10:71:60:60:5e:ab:29:57:95: 8b:44:85:47:bc:e1:07:4a:ec:8e:c1:17:ae:cc:28: 94:0c:49:86:d6:fe:1f:ab:96:8c:cf:57:74:62:77: 63:6f:0c:ca:40:84:5a:6a:33:69:1c:b9:6c:2b:2f: c8:85:b7:9f:5c:0b:04:17:fd:cc:44:b2:1c:61:81: ae:9b:9d:b9:1a:08:a1:21:cf:ab:18:f2:1f:3d:f0: 9a:05:bd:67:9a:39:ee:d4:13:0c:74:b1:0c:5a:29: 58:18:51:e1:e4:09:88:bc:f2:69:e6:19:43:9e:78: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2B:15:93:A1:C2:53:B9:3F:B6:0F:2B:28:CF:00:D5:C1:F4:5A:DF X509v3 Authority Key Identifier: keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c2:ef:e3:63:df:bb:d9:06:83:01:45:30:b4:16:10:64:61: 62:33:68:55:81:1b:f8:d0:b7:9e:fc:a4:5d:1c:41:24:1b:0b: 06:5d:99:2b:57:de:71:82:b2:9e:0e:19:f3:a3:36:1c:56:aa: dd:77:96:58:87:45:2a:b9:e5:cc:a4:0e:10:20:9c:25:8e:3a: db:44:bf:a1:0e:e9:e7:75:ca:7a:f1:ac:ba:3c:f2:bf:8c:1b: 69:af:15:eb:60:c9:82:69:0c:ca:c2:d0:49:48:7d:4f:59:10: 1b:dd:ce:e8:53:b8:ae:66:d1:be:39:80:80:07:bf:89:78:a5: 24:54:9e:78:63:11:11:de:d3:2a:0f:3e:10:05:95:d1:04:63: 14:c0:a4:77:14:73:f5:db:4c:85:51:1a:dc:7f:a2:81:64:96: 11:2a:29:d3:5c:2c:df:96:0e:74:04:30:61:0c:b1:22:50:08: 65:eb:f5:1b:c0:62:d1:c3:56:53:9c:0a:19:1b:df:aa:7d:d3: 86:64:83:ea:46:f2:77:a2:d7:c8:6b:ce:a3:64:68:12:de:37: 98:07:43:b5:0b:8e:28:b0:64:22:c0:8c:f8:2a:28:3d:44:b9: bf:a3:bd:95:1b:15:0b:db:d1:df:19:31:bf:96:74:ed:a6:f0: 80:03:04:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyMzMxMTAvBgNVBAUTKDRFNzU5QUIyREUyNDU0NjlGODMxMUI5MjczQjU1NTM4 N0U3NTBBOTAwHhcNMjUxMjI1MDQ1MzQxWhcNMjYwMTAxMDQ1MzQxWjAYMRYwFAYD VQQDDA02OTRjYzM1NS0wYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd8pxwY3LU880XSmMPOYi6Ksit8TA0FjsZ5xVFaxYTaVakVv8qXlxBO79b7m T3/jwmzj3qLD10BEvhKr+Vu21VXny0XV5qM1LIvKj77Jo78raaABUvX+vYJ6zwQU P5oP/Bn11PX6wrEJJLtoS7MikuKRcDLzfbLDu18O2fvQS/BwGEs2RRDP8qhDH4cQ cWBgXqspV5WLRIVHvOEHSuyOwReuzCiUDEmG1v4fq5aMz1d0YndjbwzKQIRaajNp HLlsKy/IhbefXAsEF/3MRLIcYYGum525GgihIc+rGPIfPfCaBb1nmjnu1BMMdLEM WilYGFHh5AmIvPJp5hlDnngnrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4rFZOh wlO5P7YPKyjPANXB9FrfMB8GA1UdIwQYMBaAFE51mrLeJFRp+DEbknO1VTh+dQqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjIzMy8wOEYwNTI2MEIz NzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZHbjRNUnVTYzdWVk9INTFD cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjIzMy8wOEYwNTI2MEIzNzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZH bjRNUnVTYzdWVk9INTFDcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLwu/jY9+72QaDAUUwtBYQZGFiM2hVgRv40Lee/KRdHEEkGwsGXZkr V95xgrKeDhnzozYcVqrdd5ZYh0UqueXMpA4QIJwljjrbRL+hDunndcp68ay6PPK/ jBtprxXrYMmCaQzKwtBJSH1PWRAb3c7oU7iuZtG+OYCAB7+JeKUkVJ54YxER3tMq Dz4QBZXRBGMUwKR3FHP120yFURrcf6KBZJYRKinTXCzflg50BDBhDLEiUAhl6/Ub wGLRw1ZTnAoZG9+qfdOGZIPqRvJ3otfIa86jZGgS3jeYB0O1C44osGQiwIz4Kig9 RLm/o72VGxUL29HfGTG/lnTtpvCAAwS0 -----END CERTIFICATE-----Generated at Thu Dec 25 19:44:04 2025 by rpki-client