This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier: HCXppP/dX/WtifBsEUupfd+G/iRRHObLgcXiG98Zxv8=
Subject key identifier: 74:C7:B9:22:0B:4F:96:64:C3:47:76:E9:E6:99:8C:17:EF:92:7D:8D
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial: 085E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number: 0856
Signing time: Sat 06 Dec 2025 19:49:32 +0000
Manifest this update: Sat 06 Dec 2025 19:49:32 +0000
Manifest next update: Sat 13 Dec 2025 19:49:32 +0000
Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: EsDtUYQLuaQ134WDngo3dc4o31rb3B9LptX39SgwkPg=)
2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: QdFj4b+G66zoM24orGpWvQKYWAowBUe3I5QM3qjwxak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142 (0x85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Validity
Not Before: Dec 6 19:49:32 2025 GMT
Not After : Dec 13 19:49:32 2025 GMT
Subject: CN=693488cc-70ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:70:55:69:c1:0a:b6:c3:5f:01:a2:12:c0:
47:87:bd:39:7b:df:68:cc:44:92:cb:4c:9b:cf:74:
08:c5:e1:ec:9a:e9:d0:cd:a2:b9:1a:17:83:ac:04:
04:bc:5a:f7:87:70:dc:97:e5:2a:12:8e:a7:7b:c3:
02:39:f9:96:8a:66:bd:9a:e8:31:28:a2:74:58:90:
91:98:29:a3:bc:9b:f0:3a:6a:fc:db:4f:93:87:db:
60:98:21:0d:38:e3:4b:aa:0e:bf:e5:43:61:67:7f:
d4:ca:31:2d:d7:4a:b7:71:94:47:3a:e0:f4:fb:dc:
96:c6:78:95:72:42:21:05:11:65:8e:cf:86:b6:b5:
a8:cb:88:a4:34:19:df:c6:47:cd:4f:48:8e:62:74:
7e:09:30:99:f5:0a:dd:39:b1:e9:a3:16:02:df:4b:
6c:38:33:ff:a0:eb:35:d2:85:e2:23:5e:23:94:fd:
83:4b:c6:ea:14:1e:c1:d5:3d:f4:3f:75:80:bb:93:
9f:34:f2:c2:ba:e6:56:50:8d:8e:15:6c:30:16:a3:
3d:39:0a:17:8f:c8:b5:da:0f:4c:fa:66:23:21:0a:
42:d4:84:a2:8b:23:de:8f:d0:29:6d:74:1e:19:b5:
fe:52:17:7d:50:62:d2:ac:d3:52:50:39:1f:89:98:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:B9:22:0B:4F:96:64:C3:47:76:E9:E6:99:8C:17:EF:92:7D:8D
X509v3 Authority Key Identifier:
keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:c0:95:dc:e2:c3:8a:0b:25:5c:06:61:de:64:77:a4:c1:8b:
f1:7f:fe:d3:d9:6d:42:bd:7b:ec:7e:f0:35:21:da:5a:29:ca:
1b:07:93:19:ca:5b:eb:de:22:c7:e8:ca:d9:06:a9:7f:7f:ce:
2a:df:1b:df:dd:49:0c:f0:eb:98:62:60:4e:da:a5:01:83:ee:
59:e5:d3:81:de:c1:ad:71:1f:57:e8:2f:bb:3b:26:21:11:0c:
a3:97:7a:4c:71:81:75:ac:50:4c:d9:ef:88:0a:cf:77:0a:c5:
c1:16:86:81:6a:fa:10:3a:3d:cc:20:0c:9b:9a:3b:eb:0d:89:
d5:e9:f8:fe:21:ab:01:91:bf:89:20:6c:1e:95:41:b4:00:26:
9b:b1:3d:5e:28:8f:c1:47:66:fb:1c:69:b8:d2:2d:b5:4c:1b:
50:18:b6:43:29:68:9f:c1:12:09:42:04:19:c7:92:e7:8d:3a:
3c:9c:25:39:35:d2:71:8d:1e:c9:11:96:ba:27:74:52:98:ad:
e4:25:c0:3e:90:5b:fc:01:d5:cd:bb:99:8c:b5:df:43:67:be:
93:48:ba:9d:94:b5:aa:0d:dd:35:91:bd:4b:1e:62:ac:4e:7b:
e4:77:33:71:04:db:a7:61:9c:04:55:62:2c:67:e9:d7:96:a6:
f0:c4:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:13:36 2025 by rpki-client