This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier: bndGQRZKawZozo1ucdu3EujNwvk4I8vFl7R+a9MhEj0=
Subject key identifier: CC:9B:F5:17:76:B0:BD:D4:5F:B5:33:41:48:0C:42:6C:83:A6:90:68
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial: 0834
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number: 0830
Signing time: Thu 04 Dec 2025 19:52:24 +0000
Manifest this update: Thu 04 Dec 2025 19:52:24 +0000
Manifest next update: Thu 11 Dec 2025 19:52:24 +0000
Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: Pq8ByuKRslvXAFKHhofew32oYyxZotCqju+092nIHSU=)
2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: /F/gYX/L863YX0w0vTOKFM1DOvBiDwzCSuLCvUmNqSk=)
3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: CJo3Y0RDZ6WOA9pdaOgsipKbuYOBA79WFUuGjeqh4aQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Validity
Not Before: Dec 4 19:52:24 2025 GMT
Not After : Dec 11 19:52:24 2025 GMT
Subject: CN=6931e678-9bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:a3:37:3f:ef:a7:dc:d5:d3:29:bf:49:93:
ae:a7:c1:b3:fc:48:bc:78:2d:de:bb:77:38:d7:8e:
bf:f0:75:c9:91:6f:b2:44:d7:24:3e:3c:7f:26:8d:
f2:e3:87:66:7d:d5:96:00:d2:f8:a4:bb:44:5f:26:
73:c4:42:87:20:53:68:c7:28:cf:ed:5a:a9:97:7d:
09:00:54:bf:3e:3d:f6:33:13:0a:e3:3d:a0:84:2d:
92:20:26:be:3a:c3:43:8b:8a:11:fb:d9:a4:cf:f2:
2b:7c:88:72:a9:c4:8e:51:82:e8:73:d6:89:83:56:
13:e3:8c:69:8e:43:c6:d7:0d:80:23:31:d8:70:d8:
e8:4b:60:ca:34:a0:b4:2c:70:65:28:42:4e:2d:b8:
83:45:3f:97:01:8a:71:bf:59:92:98:99:a6:5d:99:
2e:35:98:ee:26:36:a0:a8:90:5c:82:b0:bf:2e:c3:
7f:00:3a:3b:9b:a8:39:d1:1a:eb:21:10:7f:48:9e:
ac:47:d8:9e:cc:1d:c5:86:f3:33:a7:a2:b5:57:6b:
b1:0f:aa:13:28:b2:31:39:d4:85:5d:60:4d:9c:6a:
0d:4e:c3:47:73:86:3b:32:9f:f2:85:18:4c:8e:a2:
00:3f:13:cb:cb:af:c2:81:5f:74:c7:ba:68:00:20:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:F5:17:76:B0:BD:D4:5F:B5:33:41:48:0C:42:6C:83:A6:90:68
X509v3 Authority Key Identifier:
keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:50:41:cc:ed:b2:ce:83:68:96:52:c7:a7:b7:55:16:14:89:
f2:97:b5:fe:7f:1d:d2:5d:33:4e:52:b9:5d:50:7a:52:0f:62:
06:8c:bc:2a:e0:0c:1b:ea:8c:1e:4b:f8:5f:36:ee:ff:88:61:
6e:67:5c:bd:5a:72:d7:ce:ad:81:d0:07:bb:c4:b1:5c:c2:fb:
57:c2:d6:be:12:05:b3:b7:2b:89:8b:43:f8:bb:47:fa:4b:5a:
c3:71:60:b3:09:76:eb:3c:a8:4d:9a:17:ca:2a:e2:ba:b3:2c:
67:71:51:d0:8d:f2:99:ff:0b:82:60:7c:b6:6c:8c:24:d2:a2:
58:63:11:b1:7a:3c:e9:de:dc:18:5c:f7:23:f5:45:f6:d8:a5:
36:08:f9:73:c3:24:47:ef:31:3e:36:28:be:50:c5:8d:8c:96:
e3:7d:28:f7:be:13:d9:c3:3a:d6:31:1f:cb:41:44:56:3f:29:
b1:7b:ae:cf:08:bc:b0:b0:37:b6:df:d9:ea:57:b0:fe:f7:3c:
bf:6a:c2:5f:97:b2:ba:83:30:c7:9a:a5:65:0f:57:94:05:e0:
89:7a:8c:8d:04:85:15:f2:84:32:2e:a8:78:f9:2a:94:2c:dc:
c0:64:3d:b2:a1:97:d9:cd:de:53:32:83:48:ed:47:14:29:23:
79:5c:5e:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0
OTFDMkIzMzQwHhcNMjUxMjA0MTk1MjI0WhcNMjUxMjExMTk1MjI0WjAYMRYwFAYD
VQQDEw02OTMxZTY3OC05YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCCjNz/vp9zV0ym/SZOup8Gz/Ei8eC3eu3c4146/8HXJkW+yRNckPjx/Jo3y
44dmfdWWANL4pLtEXyZzxEKHIFNoxyjP7Vqpl30JAFS/Pj32MxMK4z2ghC2SICa+
OsNDi4oR+9mkz/IrfIhyqcSOUYLoc9aJg1YT44xpjkPG1w2AIzHYcNjoS2DKNKC0
LHBlKEJOLbiDRT+XAYpxv1mSmJmmXZkuNZjuJjagqJBcgrC/LsN/ADo7m6g50Rrr
IRB/SJ6sR9iezB3FhvMzp6K1V2uxD6oTKLIxOdSFXWBNnGoNTsNHc4Y7Mp/yhRhM
jqIAPxPLy6/CgV90x7poACBncwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyb9Rd2
sL3UX7UzQUgMQmyDppBoMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw
QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy
dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeUEHM7bLOg2iWUsent1UWFInyl7X+fx3SXTNOUrldUHpSD2IGjLwq
4Awb6oweS/hfNu7/iGFuZ1y9WnLXzq2B0Ae7xLFcwvtXwta+EgWztyuJi0P4u0f6
S1rDcWCzCXbrPKhNmhfKKuK6syxncVHQjfKZ/wuCYHy2bIwk0qJYYxGxejzp3twY
XPcj9UX22KU2CPlzwyRH7zE+Nii+UMWNjJbjfSj3vhPZwzrWMR/LQURWPymxe67P
CLywsDe239nqV7D+9zy/asJfl7K6gzDHmqVlD1eUBeCJeoyNBIUV8oQyLqh4+SqU
LNzAZD2yoZfZzd5TMoNI7UcUKSN5XF7Q
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:30 2025 by rpki-client