This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json) Hash identifier: M8rG3ukbf+CU982urXKANOGWw1z5wWpwARYjWXvBhlc= Subject key identifier: 8B:88:39:18:F0:76:AC:16:B1:07:81:4F:FE:08:E7:57:72:CE:9F:F9 Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft Manifest number: 70 Signing time: Sat 27 Dec 2025 05:44:13 +0000 Manifest this update: Sat 27 Dec 2025 05:44:12 +0000 Manifest next update: Sat 03 Jan 2026 05:44:12 +0000 Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: LFjQSpwtt1Otdxi+aJ+odlzz79dRafM54dVRsI/hlzg=) 2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 05:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB Validity Not Before: Dec 27 05:44:12 2025 GMT Not After : Jan 3 05:44:12 2026 GMT Subject: CN=694f722d-0294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:e2:c4:f7:9c:0c:9b:94:98:00:ad:5d:18: 1d:1a:56:5b:1f:02:49:91:0d:0e:a2:26:c6:bf:5f: d2:05:0c:e8:52:87:1d:dd:88:fe:8b:fe:63:35:31: 6b:3a:6f:74:30:cf:67:88:e4:80:b2:3c:1a:a7:1b: bd:66:54:fd:23:3f:7e:ed:6c:33:f5:dc:70:96:bc: 84:af:65:6a:b6:9f:b2:d7:b5:2a:86:78:3d:e6:b2: cd:ea:9e:af:1b:60:d4:d9:5d:50:bc:06:7b:a9:10: f0:80:27:2d:d9:bd:08:3b:f6:2e:0e:40:42:2a:2b: ca:49:20:70:ed:c8:45:23:7a:a4:2d:bf:b0:00:be: ef:c9:d3:6f:d7:17:be:38:f8:cc:f0:86:1a:14:52: af:61:90:a9:22:c0:14:78:9d:a4:00:f9:fe:d6:e5: 3c:94:53:ed:1c:ac:3f:cd:08:3a:65:f2:44:f0:48: 5c:75:35:8f:e4:4e:55:72:c0:38:dd:bc:af:75:e9: 23:af:09:af:f7:12:e4:0a:d7:7f:ee:ad:c5:70:05: 83:10:3e:cc:23:dd:e8:13:6b:bf:7c:ed:df:35:ca: 26:c7:d9:02:24:4a:b9:bb:10:05:e5:7a:c5:25:6f: e0:93:0d:04:07:09:73:a6:8a:8c:25:ed:ba:c5:4e: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:88:39:18:F0:76:AC:16:B1:07:81:4F:FE:08:E7:57:72:CE:9F:F9 X509v3 Authority Key Identifier: keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:91:5a:a0:15:1d:1d:5a:24:99:12:d1:0c:12:f8:97:19: b8:9d:cb:fd:50:60:45:c4:5b:0c:73:36:4a:20:20:8c:cf:d3: 0f:4b:e7:7b:c4:12:0a:80:88:91:46:74:3a:f5:37:50:b0:5a: 5d:d3:1d:1b:25:ea:d6:e7:b3:06:33:aa:97:8e:5a:15:50:1e: 7c:15:a5:31:93:3e:49:f8:9f:1c:98:4c:39:04:4a:bd:61:fc: e4:f1:98:e7:89:73:04:a7:c7:4d:23:09:ec:df:bf:73:3f:e8: 3e:04:e3:a6:dd:a0:ea:69:a8:96:02:c2:d4:9a:57:54:88:44: d6:b8:a8:e5:6d:c1:7f:a6:d8:ea:84:32:3c:b2:69:03:62:70: b3:bb:df:e1:b9:2d:04:5d:67:b2:4e:94:61:9d:29:5f:52:3c: 83:39:4c:ed:79:0a:e7:2c:68:f2:c5:e4:e3:aa:d7:a8:0a:b5: 34:3b:8b:58:51:b9:4a:3c:3a:01:a1:82:3d:ab:94:31:c9:7b: 67:68:ad:5c:22:09:bd:76:75:e1:30:9a:33:0a:bf:97:19:ed: 0a:09:78:3a:52:0b:ee:5e:7c:46:eb:3e:38:7c:d6:76:72:70: 02:29:80:49:97:e6:13:5d:ae:25:eb:7b:e5:f2:e5:03:50:32: 8f:88:9e:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2 MzE5Q0RBQjAeFw0yNTEyMjcwNTQ0MTJaFw0yNjAxMDMwNTQ0MTJaMBgxFjAUBgNV BAMMDTY5NGY3MjJkLTAyOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtmuLE95wMm5SYAK1dGB0aVlsfAkmRDQ6iJsa/X9IFDOhShx3diP6L/mM1MWs6 b3Qwz2eI5ICyPBqnG71mVP0jP37tbDP13HCWvISvZWq2n7LXtSqGeD3mss3qnq8b YNTZXVC8BnupEPCAJy3ZvQg79i4OQEIqK8pJIHDtyEUjeqQtv7AAvu/J02/XF744 +MzwhhoUUq9hkKkiwBR4naQA+f7W5TyUU+0crD/NCDpl8kTwSFx1NY/kTlVywDjd vK916SOvCa/3EuQK13/urcVwBYMQPswj3egTa7987d81yibH2QIkSrm7EAXlesUl b+CTDQQHCXOmiowl7brFTpzzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi4g5GPB2 rBaxB4FP/gjnV3LOn/kwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAO3kVqgFR0dWiSZEtEMEviXGbidy/1QYEXEWwxzNkogIIzP0w9L53vE EgqAiJFGdDr1N1CwWl3THRsl6tbnswYzqpeOWhVQHnwVpTGTPkn4nxyYTDkESr1h /OTxmOeJcwSnx00jCezfv3M/6D4E46bdoOppqJYCwtSaV1SIRNa4qOVtwX+m2OqE MjyyaQNicLO73+G5LQRdZ7JOlGGdKV9SPIM5TO15CucsaPLF5OOq16gKtTQ7i1hR uUo8OgGhgj2rlDHJe2dorVwiCb12deEwmjMKv5cZ7QoJeDpSC+5efEbrPjh81nZy cAIpgEmX5hNdriXre+Xy5QNQMo+Inh0= -----END CERTIFICATE-----Generated at Sun Dec 28 22:12:15 2025 by rpki-client