This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json)
Hash identifier: Mq3mWjE85EJLM9Xd2F/sp3jbBFYUUFFvA/Lyw7aAoUQ=
Subject key identifier: 8B:70:7C:BC:54:52:AF:1F:94:84:16:DA:72:56:07:72:A4:A6:1A:8F
Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
Manifest number: 0230
Signing time: Fri 05 Dec 2025 00:19:33 +0000
Manifest this update: Fri 05 Dec 2025 00:19:32 +0000
Manifest next update: Fri 12 Dec 2025 00:19:32 +0000
Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: 5IrhYlUp/Ifc8s8VYU2AwSH4ZgUM5327Aot4Zxw5m9w=)
2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl
rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Validity
Not Before: Dec 5 00:19:32 2025 GMT
Not After : Dec 12 00:19:32 2025 GMT
Subject: CN=69322515-d507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:60:5c:19:a3:c0:77:1b:ba:78:ee:3d:37:
05:3e:ba:7e:28:5c:17:33:90:d6:38:30:cd:b5:d8:
10:49:b5:c6:27:59:2c:7d:49:ba:88:d7:46:cd:de:
bb:cc:72:f1:6e:6e:a1:e5:af:27:43:d3:19:b1:88:
a8:a8:53:43:e6:f1:d9:03:5b:8e:95:e0:3d:ab:3c:
a9:a4:4f:3b:29:f3:0c:ea:4c:e3:7a:06:2f:09:e2:
83:92:41:1c:ef:4c:35:d9:98:b1:71:23:9d:91:85:
98:d3:e4:17:cb:1e:0f:94:e9:82:ed:a0:b6:b8:51:
ed:be:63:d2:1e:b7:c2:89:a3:76:f7:c8:ea:8a:f1:
b2:ef:97:df:62:7a:3c:a6:2b:29:66:53:2f:81:a2:
0c:3c:d3:14:ab:11:cf:a3:e0:96:0e:ad:0a:02:f8:
87:91:62:57:3b:21:2d:1d:d6:73:bb:43:38:58:36:
c8:70:ef:df:fb:eb:bc:22:46:a2:e9:0f:0d:44:ff:
d1:30:38:c5:24:ae:ff:f4:7d:f4:fa:61:cc:ba:3c:
59:db:b8:01:e4:35:ef:b1:60:02:24:f3:b8:85:82:
89:17:ac:38:49:93:21:b5:49:9a:02:73:34:60:ec:
a1:fe:2e:5e:d3:f5:f2:fc:65:75:a8:0a:fc:ab:2f:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:7C:BC:54:52:AF:1F:94:84:16:DA:72:56:07:72:A4:A6:1A:8F
X509v3 Authority Key Identifier:
keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5e:1a:95:08:97:10:f6:0e:aa:da:fc:4f:77:75:ea:e6:60:
ac:73:e9:23:f9:d3:5f:e2:90:aa:61:1e:a8:f1:92:76:e4:39:
09:4b:23:d2:67:c6:b7:90:4c:bd:b7:15:e4:73:ff:cf:e3:46:
29:21:1e:9b:ab:b5:02:dd:25:9a:7b:aa:7b:f6:73:f0:eb:37:
4d:b5:e4:cb:f3:23:13:41:c6:40:6b:d5:2b:ad:bb:bd:96:d3:
42:4c:14:12:d0:25:cb:ee:0f:34:d6:71:55:2a:50:ed:3e:ad:
61:98:c1:f3:bf:50:1a:83:52:72:01:c5:8e:74:f8:fa:f5:28:
24:5a:c1:3b:17:46:f5:c0:8b:2c:dc:77:9e:af:57:50:13:b5:
de:44:e5:c6:44:36:42:cb:3f:ac:39:85:2a:85:95:d1:c7:ab:
32:fb:4e:28:30:65:ca:08:6e:2c:82:6a:26:10:b2:87:90:db:
4c:42:6a:83:fb:f0:39:6a:94:42:5d:7d:e8:cf:fb:fd:d4:49:
2d:de:92:00:30:dd:c0:e8:68:e9:ee:c1:29:8a:0f:1f:34:68:
f3:23:9a:4d:b1:75:76:21:01:5d:c6:ce:84:20:3f:8a:e9:f6:
21:45:03:90:ec:67:54:16:c0:b2:d1:88:54:02:0f:a7:12:ae:
05:b4:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:14 2025 by rpki-client