This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json) Hash identifier: OGoBz4t1MW7J4WOHDq7XRSV61CLKJoKmtob/LSwc2II= Subject key identifier: 72:A7:E9:F5:8D:70:4F:C0:A2:2C:66:D5:DA:D3:36:A7:1B:BA:C5:7D Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Certificate serial: 12FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft Manifest number: 12F5 Signing time: Sat 06 Dec 2025 16:34:31 +0000 Manifest this update: Sat 06 Dec 2025 16:34:30 +0000 Manifest next update: Sat 13 Dec 2025 16:34:30 +0000 Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: uTDkXXw/i3K/ddKLagT7ouhM0iDYgj0pc3So7Y7hOb0=) 2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: OXXzoi8LLX55gX/DfWbkzrbLh+Han7QgMUGkYSwbpGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4861 (0x12fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Validity Not Before: Dec 6 16:34:30 2025 GMT Not After : Dec 13 16:34:30 2025 GMT Subject: CN=69345b16-ca52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:43:7d:2e:5c:79:1d:c0:8b:5b:e4:bb:d9: a3:9d:59:47:12:19:fa:af:25:22:b2:00:0e:aa:1a: 79:cb:d9:a7:35:ad:4d:d6:2d:e1:07:78:9a:51:95: 4b:c4:c9:d0:36:2f:55:c7:32:32:df:f2:19:86:54: f5:a7:44:98:b9:5a:0b:cd:c2:57:ca:dd:1c:be:9d: a9:3f:7d:54:f8:01:61:67:11:9c:7f:20:4f:46:d9: 09:df:f6:b3:94:d7:7c:87:f3:61:7e:c4:b6:01:af: a6:f4:d7:9c:7d:3c:95:c3:c0:9e:be:78:da:3f:10: 34:86:1c:68:9d:b1:5d:f9:a6:f7:06:b4:f1:8b:24: 06:ec:92:b8:4a:9e:f1:91:7e:a1:85:4a:39:c3:9a: 1e:22:a5:c8:78:01:91:2f:e2:4e:8d:c3:89:71:af: 1b:e9:ed:d5:c7:d0:0b:61:7a:80:73:cc:3a:6b:b1: d4:c0:31:f1:97:4f:26:a4:a2:00:8a:17:6a:2a:6c: 70:d0:c9:8a:c3:cf:69:7b:95:11:5e:e4:ff:c1:b5: 0d:d9:81:5d:7e:96:7b:a6:1a:1c:c8:62:c2:d3:c9: 22:96:3f:66:08:53:74:0e:8e:4f:17:45:78:af:3a: 77:94:54:29:92:b7:81:eb:9c:c5:29:f2:cf:00:ba: 00:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:E9:F5:8D:70:4F:C0:A2:2C:66:D5:DA:D3:36:A7:1B:BA:C5:7D X509v3 Authority Key Identifier: keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9a:3f:cf:52:4d:d3:af:dd:aa:e3:e4:97:98:c2:6d:b2:f8: 2b:95:a1:27:d3:d8:4d:cd:76:7e:ce:9a:bf:36:16:f1:ab:e9: 0e:f9:5d:dd:40:78:66:05:9d:17:5d:cf:60:9e:a8:ea:f3:c4: 66:fa:f3:29:67:01:9e:07:58:83:44:54:94:39:47:21:ae:63: 65:79:5a:fd:f0:1b:a5:22:ac:03:f0:20:a4:69:3c:00:b7:96: 56:f3:00:c3:f9:a5:c6:f2:cd:10:e1:55:1f:f3:d8:04:f3:93: 73:9e:99:be:87:53:58:4b:2c:64:84:8a:23:ce:9d:fd:6d:7c: f7:57:6f:a7:c8:07:0c:38:93:cf:ec:f6:a1:a4:36:ef:64:6b: 8e:13:bf:03:2f:0a:ff:f6:95:1f:e8:bd:cf:d3:7f:ac:57:a0: 18:c6:89:e6:e1:f6:27:01:04:32:03:43:60:c8:6f:f1:90:ed: 7e:c7:25:cd:73:62:b8:6c:ed:9d:93:c0:6e:56:fd:ca:8d:4d: 10:30:9d:ca:88:6d:56:72:5a:44:09:e4:97:c9:59:31:2e:1b: bf:96:7a:c3:a6:fa:60:12:5b:80:8f:91:0f:b2:18:52:11:db: 2a:47:39:2a:53:fb:33:57:74:cb:c1:68:cd:4e:dd:40:c7:84: 2f:4d:f9:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2QzcxMTAvBgNVBAUTKEI2N0MyNDVFNEIyQkVFQUQyM0MxRjA1REQzMEZGOTA3 N0Q4N0I4RTYwHhcNMjUxMjA2MTYzNDMwWhcNMjUxMjEzMTYzNDMwWjAYMRYwFAYD VQQDEw02OTM0NWIxNi1jYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGlDfS5ceR3Ai1vku9mjnVlHEhn6ryUisgAOqhp5y9mnNa1N1i3hB3iaUZVL xMnQNi9VxzIy3/IZhlT1p0SYuVoLzcJXyt0cvp2pP31U+AFhZxGcfyBPRtkJ3/az lNd8h/NhfsS2Aa+m9NecfTyVw8CevnjaPxA0hhxonbFd+ab3BrTxiyQG7JK4Sp7x kX6hhUo5w5oeIqXIeAGRL+JOjcOJca8b6e3Vx9ALYXqAc8w6a7HUwDHxl08mpKIA ihdqKmxw0MmKw89pe5URXuT/wbUN2YFdfpZ7phocyGLC08kilj9mCFN0Do5PF0V4 rzp3lFQpkreB65zFKfLPALoAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKn6fWN cE/Aoixm1drTNqcbusV9MB8GA1UdIwQYMBaAFLZ8JF5LK+6tI8HwXdMP+Qd9h7jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZDNy9DODU2RDZDNEM2 QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdxMGp3ZkJkMHdfNUIzMkh1 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rud2tYa3NyN3EwandmQmQwd181QjMySHVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZDNy9DODU2RDZDNEM2QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdx MGp3ZkJkMHdfNUIzMkh1T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfmj/PUk3Tr92q4+SXmMJtsvgrlaEn09hNzXZ+zpq/Nhbxq+kO+V3d QHhmBZ0XXc9gnqjq88Rm+vMpZwGeB1iDRFSUOUchrmNleVr98BulIqwD8CCkaTwA t5ZW8wDD+aXG8s0Q4VUf89gE85Nznpm+h1NYSyxkhIojzp39bXz3V2+nyAcMOJPP 7PahpDbvZGuOE78DLwr/9pUf6L3P03+sV6AYxonm4fYnAQQyA0NgyG/xkO1+xyXN c2K4bO2dk8BuVv3KjU0QMJ3KiG1WclpECeSXyVkxLhu/lnrDpvpgEluAj5EPshhS EdsqRzkqU/szV3TLwWjNTt1Ax4QvTfmm -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:42 2025 by rpki-client