This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft File: tGgNFzsLuF80uLi77cMmOXlY2O4.mft (raw, json) Hash identifier: Gpsk+kCKJkjypDXdVvzBRkRakL0y28E7vUvdtu/q2hE= Subject key identifier: 43:68:29:97:10:56:8B:29:5B:CA:25:68:EF:34:3F:16:A8:A8:A0:03 Authority key identifier: B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE Certificate issuer: /CN=A913F474/serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft Manifest number: 19 Signing time: Fri 05 Dec 2025 05:40:23 +0000 Manifest this update: Fri 05 Dec 2025 05:40:23 +0000 Manifest next update: Fri 12 Dec 2025 05:40:22 +0000 Files and hashes: 1: tGgNFzsLuF80uLi77cMmOXlY2O4.crl (hash: NYIri8pgqnCVoWnBspmfw6lk+J33fCaG24lAsT4bJj4=) 2: F265F888AE6C11F0B33E1454C4F9AE02.roa (hash: PwkeWMT2PFnmytpJenwW/pPPAGqdRGXyqS8HBrt6Ivw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F474, serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Validity Not Before: Dec 5 05:40:23 2025 GMT Not After : Dec 12 05:40:22 2025 GMT Subject: CN=69327047-f966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:3f:ea:23:c1:95:dc:96:93:77:aa:bc:c5: a9:12:04:2d:88:d2:31:ff:40:1d:8e:fb:46:c5:15: c0:50:09:9a:54:c4:9a:15:22:fe:8c:55:db:19:ca: 71:64:5c:5e:98:16:1e:86:31:f2:72:57:a1:27:02: 84:33:96:f7:bf:43:ee:36:5a:8e:d9:47:66:a1:8e: 31:75:0d:05:56:0b:43:c6:ea:43:26:34:40:43:c1: 61:e4:7c:cd:5f:68:25:fe:f7:cc:93:18:f4:f1:53: 75:1f:2e:88:10:e9:31:cc:56:4c:e7:d6:91:65:e9: ae:fd:8f:73:35:56:3e:a3:63:bb:cb:e5:77:70:b6: f1:2d:59:d6:27:d2:ad:22:e8:12:26:4b:2d:82:5b: 32:fe:93:5a:e0:08:2d:3b:f0:af:79:96:85:f0:d3: c6:f2:40:d1:1d:8a:df:8f:30:7e:a8:a0:81:ff:da: 3b:6c:3a:98:8a:78:77:c5:9a:8d:a2:84:6f:d7:cb: d8:d2:05:39:0b:2f:2d:55:4b:7d:35:8b:2e:b8:26: ca:25:ba:cc:37:e4:83:ee:c3:8c:e4:9c:c3:54:9e: bf:8f:1f:56:29:bf:b6:9a:c0:b2:18:e5:d8:44:04: ea:dc:93:6a:2b:7c:92:a2:99:c3:ce:5e:86:3d:a0: 9a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:68:29:97:10:56:8B:29:5B:CA:25:68:EF:34:3F:16:A8:A8:A0:03 X509v3 Authority Key Identifier: keyid:B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:76:cb:e9:54:12:97:49:25:f0:0c:3f:57:2c:ad:bb:a9: aa:f5:ef:0c:6e:80:a8:bd:a5:6c:a4:6c:a7:35:05:4f:29:ae: 16:cb:2a:72:c1:9b:04:c4:cb:50:4b:64:fb:b2:9b:a7:b1:37: 32:98:80:39:b9:7a:13:96:dc:9a:0c:09:79:29:66:87:5a:48: dc:bb:6a:e7:b8:58:73:3f:12:6f:03:b4:a6:7f:1b:b5:64:03: a5:94:5d:71:a1:dc:8a:99:9c:31:96:14:1f:0c:93:6b:d4:bf: 6a:ef:4e:dc:bc:ec:df:65:e9:e8:b2:b0:49:24:7a:c2:66:76: 21:fb:19:a5:5d:22:ae:8b:b5:9e:b2:c6:cb:96:c0:7f:4d:07: 6b:02:4c:2d:6c:1f:1b:ac:29:63:77:03:97:ab:e1:d7:b2:e1: 2b:74:e9:3c:c3:61:f0:5c:fc:3e:3c:ff:61:57:68:d9:25:ca: 84:ca:eb:12:8d:1d:5f:ff:ae:90:6d:54:b9:f9:6b:a0:7b:e8: 75:b6:67:05:64:f2:b6:23:0b:b9:29:52:a9:eb:8c:4c:6b:2a: ee:10:cb:97:24:99:8a:7d:21:07:94:13:6d:8a:06:0c:a9:31: 67:d8:d9:74:bd:96:d6:fa:19:c6:c5:fc:57:b8:5f:7a:9f:9e: 92:61:88:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjQ3NDExMC8GA1UEBRMoQjQ2ODBEMTczQjBCQjg1RjM0QjhCOEJCRURDMzI2Mzk3 OTU4RDhFRTAeFw0yNTEyMDUwNTQwMjNaFw0yNTEyMTIwNTQwMjJaMBgxFjAUBgNV BAMTDTY5MzI3MDQ3LWY5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8qj/qI8GV3JaTd6q8xakSBC2I0jH/QB2O+0bFFcBQCZpUxJoVIv6MVdsZynFk XF6YFh6GMfJyV6EnAoQzlve/Q+42Wo7ZR2ahjjF1DQVWC0PG6kMmNEBDwWHkfM1f aCX+98yTGPTxU3UfLogQ6THMVkzn1pFl6a79j3M1Vj6jY7vL5XdwtvEtWdYn0q0i 6BImSy2CWzL+k1rgCC078K95loXw08byQNEdit+PMH6ooIH/2jtsOpiKeHfFmo2i hG/Xy9jSBTkLLy1VS301iy64Jsolusw35IPuw4zknMNUnr+PH1Ypv7aawLIY5dhE BOrck2orfJKimcPOXoY9oJqBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ2gplxBW iylbyiVo7zQ/FqiooAMwHwYDVR0jBBgwFoAUtGgNFzsLuF80uLi77cMmOXlY2O4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGNDc0LzEzRDZCNEZFQUU2 QzExRjA4Nzk0QkI1MkM0RjlBRTAyL3RHZ05GenNMdUY4MHVMaTc3Y01tT1hsWTJP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEdnTkZ6c0x1RjgwdUxpNzdjTW1PWGxZMk80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG NDc0LzEzRDZCNEZFQUU2QzExRjA4Nzk0QkI1MkM0RjlBRTAyL3RHZ05GenNMdUY4 MHVMaTc3Y01tT1hsWTJPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABnJdsvpVBKXSSXwDD9XLK27qar17wxugKi9pWykbKc1BU8prhbLKnLB mwTEy1BLZPuym6exNzKYgDm5ehOW3JoMCXkpZodaSNy7aue4WHM/Em8DtKZ/G7Vk A6WUXXGh3IqZnDGWFB8Mk2vUv2rvTty87N9l6eiysEkkesJmdiH7GaVdIq6LtZ6y xsuWwH9NB2sCTC1sHxusKWN3A5er4dey4St06TzDYfBc/D48/2FXaNklyoTK6xKN HV//rpBtVLn5a6B76HW2ZwVk8rYjC7kpUqnrjExrKu4Qy5ckmYp9IQeUE22KBgyp MWfY2XS9ltb6GcbF/Fe4X3qfnpJhiLg= -----END CERTIFICATE-----Generated at Sat Dec 6 23:29:31 2025 by rpki-client