This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: HhRCzejXDlfyZl3h4AqTNwscL5YBOuMpDpbeHXG2ZtY= Subject key identifier: 41:9A:45:72:45:1C:45:6A:2A:83:23:FA:DF:99:1E:D1:AC:EB:8A:49 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 05CD Signing time: Sat 20 Dec 2025 22:21:25 +0000 Manifest this update: Sat 20 Dec 2025 22:21:24 +0000 Manifest next update: Sat 27 Dec 2025 22:21:24 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: kPEOluWwNCsZnOUj1icyF0a2ruMB6eQdu1OOO8QH1ks=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Dec 20 22:21:24 2025 GMT Not After : Dec 27 22:21:24 2025 GMT Subject: CN=69472164-6d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:e3:d4:bb:e2:d5:cb:76:62:2a:52:c5:64: b3:e2:1b:e4:10:d9:b5:56:ca:d4:38:ec:a5:a8:43: e0:e2:38:d2:60:27:06:89:ee:18:76:36:74:3b:70: 29:ca:b9:fb:b3:b3:d5:c4:17:e3:c4:a0:ca:5b:1c: c5:a2:09:e6:ae:55:3e:44:07:d6:ce:5e:a8:15:33: 3c:79:52:26:93:44:5b:9c:98:04:02:f2:33:a9:3b: aa:91:fd:64:77:73:30:a5:ff:d1:b1:e1:1f:71:98: 12:4e:99:06:24:4d:72:09:ea:52:79:a8:99:68:49: a1:b6:34:94:41:95:cc:47:ba:ac:60:6f:8d:ab:7f: 17:87:c4:9f:9f:c2:81:3b:9f:58:5b:72:de:eb:a3: 20:ff:fc:4c:99:2d:4f:df:9d:10:9d:6a:f9:cb:12: 4e:52:ff:f6:25:cb:d7:a6:6c:80:2b:0b:66:eb:bc: b9:13:a9:81:76:a9:55:1b:16:50:19:4b:ac:0a:de: cd:81:fa:f1:32:4f:46:32:8a:9b:d0:3f:5b:46:c0: fb:29:f3:69:83:70:85:c0:09:2e:44:c4:5d:8c:fd: e3:a2:c7:b8:f2:26:50:7e:5d:a9:d9:72:0e:86:fd: 71:1f:6c:70:68:34:ac:b4:88:b2:1c:e6:48:51:7d: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9A:45:72:45:1C:45:6A:2A:83:23:FA:DF:99:1E:D1:AC:EB:8A:49 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:fe:aa:96:20:a3:61:e8:4c:ff:75:79:e9:b4:24:86:6a:7c: fc:3b:1d:54:d6:72:c0:a8:54:dd:6e:c0:68:6b:d8:f8:8a:28: ed:c0:80:97:98:b7:a2:16:06:a2:71:85:9b:f3:14:8c:48:d2: cc:76:40:c8:d4:4c:61:9d:b3:56:ce:66:15:e0:14:05:73:f5: dd:b7:d6:fa:86:0f:81:08:8e:64:d9:2c:82:13:ae:0b:27:1e: 8e:1e:e9:aa:8c:e3:44:25:f5:89:f5:4b:f3:64:3f:c7:3d:2b: 12:b8:39:78:89:d4:b3:47:80:fa:b5:a1:2c:a9:75:18:f1:69: 3c:2a:5c:1b:c3:3c:12:c8:18:6a:c0:36:5e:19:71:14:3e:41: 5b:76:04:b9:db:9d:d3:7f:d1:13:c9:d5:e0:a4:ed:bd:25:98: 51:e7:ba:d0:03:8a:e1:be:8e:48:33:ec:fc:eb:c6:51:12:16: 17:58:86:bb:98:3b:fd:a0:a3:f4:24:29:67:ef:72:97:ec:91: e6:fb:d6:aa:b7:39:da:7e:ec:41:79:5b:fc:a1:f6:52:c2:7c: 83:26:8a:53:1c:86:bf:77:04:57:75:b6:bd:12:f2:4d:d5:e9: 1a:0e:fa:c9:29:c5:70:6c:d9:bb:f5:75:cb:06:29:ab:04:1f: 45:92:ec:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUxMjIwMjIyMTI0WhcNMjUxMjI3MjIyMTI0WjAYMRYwFAYD VQQDDA02OTQ3MjE2NC02ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslrj1Lvi1ct2YipSxWSz4hvkENm1VsrUOOylqEPg4jjSYCcGie4YdjZ0O3Ap yrn7s7PVxBfjxKDKWxzFognmrlU+RAfWzl6oFTM8eVImk0RbnJgEAvIzqTuqkf1k d3Mwpf/RseEfcZgSTpkGJE1yCepSeaiZaEmhtjSUQZXMR7qsYG+Nq38Xh8Sfn8KB O59YW3Le66Mg//xMmS1P350QnWr5yxJOUv/2JcvXpmyAKwtm67y5E6mBdqlVGxZQ GUusCt7NgfrxMk9GMoqb0D9bRsD7KfNpg3CFwAkuRMRdjP3jose48iZQfl2p2XIO hv1xH2xwaDSstIiyHOZIUX0njwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGaRXJF HEVqKoMj+t+ZHtGs64pJMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ/qqWIKNh6Ez/dXnptCSGanz8Ox1U1nLAqFTdbsBoa9j4iijtwICX mLeiFgaicYWb8xSMSNLMdkDI1ExhnbNWzmYV4BQFc/Xdt9b6hg+BCI5k2SyCE64L Jx6OHumqjONEJfWJ9UvzZD/HPSsSuDl4idSzR4D6taEsqXUY8Wk8KlwbwzwSyBhq wDZeGXEUPkFbdgS5253Tf9ETydXgpO29JZhR57rQA4rhvo5IM+z868ZREhYXWIa7 mDv9oKP0JCln73KX7JHm+9aqtznafuxBeVv8ofZSwnyDJopTHIa/dwRXdba9EvJN 1ekaDvrJKcVwbNm79XXLBimrBB9Fkuw1 -----END CERTIFICATE-----Generated at Sun Dec 21 18:07:50 2025 by rpki-client