This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: +VnCoSXzbQ/F0PHPcNMC/uiPEcDiJ+CN3aIp9jsIZNY= Subject key identifier: 69:BD:F6:10:0E:F0:F9:A5:40:8D:21:A4:63:C9:02:1B:9B:6C:A8:C6 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A7D Signing time: Sat 06 Dec 2025 18:50:29 +0000 Manifest this update: Sat 06 Dec 2025 18:50:29 +0000 Manifest next update: Sat 13 Dec 2025 18:50:29 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: IeZ24wtaqkLsdvYC6h6WkONqzLO+vUi0s+j9BAu5vZk=) 2: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: +Z0u2AO6pzWMC+2Zqy2emMfgxJlMpGAWqdjJa7j1R38=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Dec 6 18:50:29 2025 GMT Not After : Dec 13 18:50:29 2025 GMT Subject: CN=69347af5-95f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:3a:a0:9a:9d:21:d8:b7:97:75:39:0e:dd: e2:45:14:95:cb:69:4e:9d:fa:34:61:1b:0c:7f:c9: b5:1c:ba:a3:03:90:4c:09:40:51:e8:95:06:82:17: 1a:45:24:bc:6a:5d:cf:1c:2b:35:1b:60:bf:f3:56: 00:00:f2:60:69:b8:9c:9e:69:ac:84:8a:7a:bf:de: db:d0:f7:bd:e4:3c:db:16:07:06:67:a5:4f:fe:f8: a7:06:3c:37:52:0d:c4:34:2a:e4:c3:46:5f:7f:09: e7:67:8f:0f:29:5d:df:04:43:2b:3b:87:52:b2:70: 1e:e9:7a:09:6d:b2:ae:ac:73:8f:86:91:78:12:55: 68:f6:17:09:9a:bd:b2:df:03:ae:d9:51:dc:67:48: 04:7a:e8:8f:75:4e:f5:2b:4e:b4:21:de:a9:41:ba: f3:d9:93:aa:1c:aa:7a:6b:21:05:fa:6f:b1:f3:7b: 2f:72:83:05:db:1f:78:90:bf:6f:a9:2e:5c:9a:e1: 81:50:32:b8:5b:25:15:fa:ff:3f:4e:c7:40:be:c2: f5:eb:0e:1c:2b:f2:f0:c5:60:ec:44:ec:08:ff:58: d3:60:b0:0f:94:26:13:f7:0e:51:3f:18:09:ed:4e: 12:7d:81:9a:9c:96:69:9b:f8:71:0b:1a:03:00:37: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BD:F6:10:0E:F0:F9:A5:40:8D:21:A4:63:C9:02:1B:9B:6C:A8:C6 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9f:3b:08:85:92:8b:35:c6:2b:99:8d:42:b3:8f:c1:9d:2a: fe:98:ec:28:28:61:c4:2d:7f:c6:55:ea:67:51:b8:71:6d:b1: a2:92:25:b0:d1:21:0f:91:65:6c:fa:47:83:c5:e3:99:32:2d: 81:d5:b4:0b:62:66:ff:24:c1:b6:ec:e7:d1:d2:ab:3b:98:ed: 43:23:be:d2:01:a6:6d:2a:76:63:c7:60:65:de:86:0a:1d:9a: 12:7a:74:d9:c3:c7:20:29:8e:6f:b0:a5:72:e7:9d:9b:c6:a4: 89:24:a0:0e:39:f3:64:35:d0:1c:9a:e0:c9:7b:d4:7e:bb:83: 2d:4b:a4:3b:db:cf:2b:10:04:59:be:3d:45:2e:bd:36:fc:e5: a3:0e:b7:ae:4b:62:1f:21:4f:e4:d6:af:77:65:96:03:eb:2b: 35:06:df:24:a0:ea:75:57:52:0f:3c:d3:6f:cb:27:af:c5:6d: d9:99:71:87:f1:96:a8:73:ab:f0:a0:11:47:e5:a0:33:77:fc: df:99:b1:b7:29:cf:0b:7f:d1:1d:78:8d:07:34:e4:0d:2c:fe: 94:4d:b8:32:6c:d4:94:6f:5b:36:67:96:0c:af:ef:4f:db:54: 83:fb:9f:6f:dc:cd:00:e2:88:d5:f1:98:8a:a6:56:2a:dc:1e: a8:68:31:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUxMjA2MTg1MDI5WhcNMjUxMjEzMTg1MDI5WjAYMRYwFAYD VQQDEw02OTM0N2FmNS05NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouw6oJqdIdi3l3U5Dt3iRRSVy2lOnfo0YRsMf8m1HLqjA5BMCUBR6JUGghca RSS8al3PHCs1G2C/81YAAPJgabicnmmshIp6v97b0Pe95DzbFgcGZ6VP/vinBjw3 Ug3ENCrkw0ZffwnnZ48PKV3fBEMrO4dSsnAe6XoJbbKurHOPhpF4ElVo9hcJmr2y 3wOu2VHcZ0gEeuiPdU71K060Id6pQbrz2ZOqHKp6ayEF+m+x83svcoMF2x94kL9v qS5cmuGBUDK4WyUV+v8/TsdAvsL16w4cK/LwxWDsROwI/1jTYLAPlCYT9w5RPxgJ 7U4SfYGanJZpm/hxCxoDADdOxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGm99hAO 8PmlQI0hpGPJAhubbKjGMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFnzsIhZKLNcYrmY1Cs4/BnSr+mOwoKGHELX/GVepnUbhxbbGikiWw 0SEPkWVs+keDxeOZMi2B1bQLYmb/JMG27OfR0qs7mO1DI77SAaZtKnZjx2Bl3oYK HZoSenTZw8cgKY5vsKVy552bxqSJJKAOOfNkNdAcmuDJe9R+u4MtS6Q7288rEARZ vj1FLr02/OWjDreuS2IfIU/k1q93ZZYD6ys1Bt8koOp1V1IPPNNvyyevxW3ZmXGH 8Zaoc6vwoBFH5aAzd/zfmbG3Kc8Lf9EdeI0HNOQNLP6UTbgybNSUb1s2Z5YMr+9P 21SD+59v3M0A4ojV8ZiKplYq3B6oaDF7 -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:27 2025 by rpki-client