This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json) Hash identifier: RcPpSjfv8b+LjjDyXAERdD2vCp6IGQgBtJhFHC1idO8= Subject key identifier: 02:B8:C5:C2:2E:49:E7:7C:EA:28:F9:BB:5B:F8:B5:55:04:73:66:3E Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft Manifest number: E1 Signing time: Sun 21 Dec 2025 04:38:00 +0000 Manifest this update: Sun 21 Dec 2025 04:38:00 +0000 Manifest next update: Sun 28 Dec 2025 04:38:00 +0000 Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: mlpmNYI+doSTAhUXsYKxpsf2bKBE430FgLWQBtHn/VY=) 2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: +1YVoYAarcTcq9CjGoyqxTV7x6G+Zf3EIQipKgeUN5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Validity Not Before: Dec 21 04:38:00 2025 GMT Not After : Dec 28 04:38:00 2025 GMT Subject: CN=694779a8-01d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:95:c6:c3:5a:d5:26:f7:a7:ae:2a:2c:46: da:00:93:9d:3f:0b:e6:b1:60:0e:73:7f:dd:91:41: 0c:df:fc:85:42:35:89:16:57:48:46:8d:51:a2:a9: 82:6c:bf:23:76:37:55:67:d9:cf:93:cd:f8:33:d6: fa:fb:05:e7:54:34:ea:b5:75:80:da:dc:92:73:cf: d6:6a:27:0a:9c:4c:d4:4e:8c:c2:16:62:ba:05:38: a2:30:d0:f8:19:db:c8:13:60:1c:42:f7:aa:6d:3a: f2:0e:3b:2e:52:4b:36:1d:8f:8b:a8:27:9b:4e:f2: fc:85:dc:e5:1d:e2:4f:d1:de:12:56:64:9e:c5:5e: e1:33:bc:05:4e:f6:2c:0f:4c:65:b6:48:c1:10:c4: a3:bc:87:12:5e:8b:2d:c9:9a:0d:45:6f:b5:81:95: bf:54:53:41:78:fd:e0:1c:92:29:fd:00:6f:51:0b: 8c:9a:b4:5f:27:ea:ac:70:41:0f:cb:96:d4:cb:e3: df:e3:43:2a:a3:8a:5a:6a:5f:09:d8:1d:78:81:18: ab:d7:fb:80:ce:9e:a5:41:cf:80:e7:e2:91:0b:18: ea:ac:19:bb:4f:a6:40:44:f0:e5:6e:02:b9:f1:25: 27:7a:86:97:a1:ea:92:2c:da:4c:ab:dd:08:42:c3: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:C5:C2:2E:49:E7:7C:EA:28:F9:BB:5B:F8:B5:55:04:73:66:3E X509v3 Authority Key Identifier: keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:df:33:cd:6f:1f:de:c1:95:8c:1f:a1:55:04:78:77:19:bf: 7b:6c:a0:31:d8:27:4b:d5:5b:cb:4d:71:eb:81:8f:78:cc:43: 6c:3f:9d:51:27:e4:78:2c:d5:83:93:3d:96:be:e4:7c:52:43: 42:64:28:f9:7e:11:c8:29:84:a4:d8:95:64:dd:8c:49:00:b0: a2:46:6d:e5:c9:d8:d2:50:13:1b:c2:40:d5:f9:1c:d7:1c:55: 82:8d:cc:06:12:64:77:e4:c1:4a:f2:b2:e3:e5:a7:94:2b:b2: 9a:fe:6b:f6:d5:04:96:6b:0b:8e:7a:53:2c:2b:9d:4e:2b:29: ea:2c:e6:8e:4e:91:9c:4f:56:16:93:44:04:e8:b3:5b:bb:8d: da:bc:64:33:f4:d6:01:8c:2a:10:ba:33:a1:59:d5:16:31:4d: 80:1d:f6:eb:54:e3:39:7d:e4:25:5e:a4:3c:38:96:65:42:55: 42:b4:ba:d9:6b:47:fd:75:3a:9c:28:be:0b:18:14:9a:92:e9: a0:e2:b8:73:fe:e4:c7:57:29:e2:16:aa:a0:31:03:d8:d3:b7: 8b:f3:ad:1a:19:0a:67:21:e8:cd:25:85:f5:4f:a7:68:e1:af: a0:3e:e1:8c:66:f4:a3:db:57:b2:11:29:3c:57:15:c8:44:50: 65:aa:57:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKEI1RDk1NTk3N0FEQTQ2ODNBQzVCNTlDMjU4MThCNDQz ODFDMjRGRTYwHhcNMjUxMjIxMDQzODAwWhcNMjUxMjI4MDQzODAwWjAYMRYwFAYD VQQDDA02OTQ3NzlhOC0wMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjEaVxsNa1Sb3p64qLEbaAJOdPwvmsWAOc3/dkUEM3/yFQjWJFldIRo1RoqmC bL8jdjdVZ9nPk834M9b6+wXnVDTqtXWA2tySc8/WaicKnEzUTozCFmK6BTiiMND4 GdvIE2AcQveqbTryDjsuUks2HY+LqCebTvL8hdzlHeJP0d4SVmSexV7hM7wFTvYs D0xltkjBEMSjvIcSXostyZoNRW+1gZW/VFNBeP3gHJIp/QBvUQuMmrRfJ+qscEEP y5bUy+Pf40Mqo4paal8J2B14gRir1/uAzp6lQc+A5+KRCxjqrBm7T6ZARPDlbgK5 8SUneoaXoeqSLNpMq90IQsNkrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK4xcIu Sed86ij5u1v4tVUEc2Y+MB8GA1UdIwQYMBaAFLXZVZd62kaDrFtZwlgYtEOBwk/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy85QTU4QzM4QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJvT3NXMW5DV0JpMFE0SENU LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1QtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy85QTU4QzM4QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJv T3NXMW5DV0JpMFE0SENULVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA73zPNbx/ewZWMH6FVBHh3Gb97bKAx2CdL1VvLTXHrgY94zENsP51R J+R4LNWDkz2WvuR8UkNCZCj5fhHIKYSk2JVk3YxJALCiRm3lydjSUBMbwkDV+RzX HFWCjcwGEmR35MFK8rLj5aeUK7Ka/mv21QSWawuOelMsK51OKynqLOaOTpGcT1YW k0QE6LNbu43avGQz9NYBjCoQujOhWdUWMU2AHfbrVOM5feQlXqQ8OJZlQlVCtLrZ a0f9dTqcKL4LGBSakumg4rhz/uTHVyniFqqgMQPY07eL860aGQpnIejNJYX1T6do 4a+gPuGMZvSj21eyESk8VxXIRFBlqldr -----END CERTIFICATE-----Generated at Mon Dec 22 13:00:11 2025 by rpki-client