This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: aHFihSKTmhHzBd1dpf7g1mN3v5a8nE3FqCBsNf5jgxY= Subject key identifier: F8:3A:6C:87:81:CE:B5:80:A4:93:D9:0C:66:20:59:B0:DC:F5:91:35 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: D9 Signing time: Fri 05 Dec 2025 01:55:13 +0000 Manifest this update: Fri 05 Dec 2025 01:55:13 +0000 Manifest next update: Fri 12 Dec 2025 01:55:13 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: ye7F2NJG+H1Mgi7l+lLgobqmnnLukrBHeXpvhLoc1TU=) 2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: Z7JeySwG9fJPYkqRF+VN4KnA0lYwsDVP+8RJZI6wRpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Dec 5 01:55:13 2025 GMT Not After : Dec 12 01:55:13 2025 GMT Subject: CN=69323b81-b51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:a7:3a:53:9a:2a:4f:eb:4b:e4:8f:ec:76: 98:68:68:8b:36:d2:3e:38:b1:57:8b:0c:9d:bd:e0: e7:d5:e0:b2:ce:45:73:51:c8:f0:4c:27:b5:96:e6: 02:09:40:77:8f:22:5c:79:e3:84:3b:48:44:69:13: 23:40:55:aa:19:68:92:e9:95:fe:33:17:1c:b8:53: 29:f7:25:90:e1:d2:a3:d0:88:50:04:f2:e9:bd:e5: 32:28:3f:28:a2:ac:7b:75:b9:a3:dc:b1:22:0e:77: 5e:b5:27:40:e9:8d:4f:6f:f7:00:68:1c:38:18:ea: 84:d2:2e:26:70:80:ae:f8:7f:ff:b3:cc:50:10:18: e2:d0:7c:a0:e0:27:53:f0:6b:fd:6f:08:6b:86:11: dd:8a:4f:bb:af:5b:c6:a9:0d:ac:6b:e5:f4:6c:fb: ca:e2:c1:46:51:d5:1e:90:75:73:be:21:31:32:8c: d7:be:cc:94:a6:2f:f5:9d:4e:5e:7f:72:a1:f0:f1: 17:74:d2:00:05:1f:57:66:17:15:aa:17:82:6f:7f: f9:58:b6:5f:64:a7:3a:e2:90:41:96:81:f8:0d:d6: a8:fa:fe:3e:39:b4:36:36:02:13:f0:b4:ae:5b:98: 31:de:ee:f1:b3:aa:ad:4b:95:ac:9e:1f:01:d5:1e: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:6C:87:81:CE:B5:80:A4:93:D9:0C:66:20:59:B0:DC:F5:91:35 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3c:1d:6c:95:8b:c2:78:44:eb:96:35:96:34:39:99:63:6b: 6b:ba:f9:76:ec:3b:fa:03:b6:28:13:35:29:9e:70:d0:e3:3d: 14:94:f8:22:28:75:f6:67:15:d6:bd:34:fd:a5:78:34:75:6f: 2f:1f:fc:0d:f8:54:32:f9:80:0d:56:8b:d2:a9:7f:f0:f2:03: 6c:51:d7:a9:8d:ec:4e:52:e2:34:4a:73:3e:ca:76:23:9d:69: 84:43:4f:38:e4:5c:96:81:8d:19:48:2b:46:8f:2b:b8:28:fb: f4:87:e5:71:87:a0:28:2a:a3:a8:0a:5b:87:bb:4c:6a:e3:af: d6:8d:bf:95:71:c9:ae:01:22:77:7e:4f:f2:0b:a8:1a:d6:32: 9b:05:cd:52:f0:a9:a8:ec:49:34:b6:99:e4:bc:ea:6d:66:ad: 49:0f:9c:f7:37:2c:32:91:0c:70:f1:55:49:b9:83:5f:40:4c: 8d:0e:5e:0c:04:6c:f1:3a:6c:56:bf:d8:e6:cf:d9:15:10:66: d3:9b:48:06:a6:02:d4:f0:17:97:30:c3:5d:e6:f6:9f:e7:58: 1f:ba:97:c7:a4:b9:44:31:07:bd:84:e2:0a:f0:b5:3a:a5:55: b2:38:9f:4d:73:23:d2:f1:84:bd:eb:7c:64:fe:88:5f:e7:eb: a3:54:ae:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjUxMjA1MDE1NTEzWhcNMjUxMjEyMDE1NTEzWjAYMRYwFAYD VQQDEw02OTMyM2I4MS1iNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NqnOlOaKk/rS+SP7HaYaGiLNtI+OLFXiwydveDn1eCyzkVzUcjwTCe1luYC CUB3jyJceeOEO0hEaRMjQFWqGWiS6ZX+MxccuFMp9yWQ4dKj0IhQBPLpveUyKD8o oqx7dbmj3LEiDndetSdA6Y1Pb/cAaBw4GOqE0i4mcICu+H//s8xQEBji0Hyg4CdT 8Gv9bwhrhhHdik+7r1vGqQ2sa+X0bPvK4sFGUdUekHVzviExMozXvsyUpi/1nU5e f3Kh8PEXdNIABR9XZhcVqheCb3/5WLZfZKc64pBBloH4Ddao+v4+ObQ2NgIT8LSu W5gx3u7xs6qtS5Wsnh8B1R42UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg6bIeB zrWApJPZDGYgWbDc9ZE1MB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUPB1slYvCeETrljWWNDmZY2truvl27Dv6A7YoEzUpnnDQ4z0UlPgi KHX2ZxXWvTT9pXg0dW8vH/wN+FQy+YANVovSqX/w8gNsUdepjexOUuI0SnM+ynYj nWmEQ0845FyWgY0ZSCtGjyu4KPv0h+Vxh6AoKqOoCluHu0xq46/Wjb+VccmuASJ3 fk/yC6ga1jKbBc1S8Kmo7Ek0tpnkvOptZq1JD5z3NywykQxw8VVJuYNfQEyNDl4M BGzxOmxWv9jmz9kVEGbTm0gGpgLU8BeXMMNd5vaf51gfupfHpLlEMQe9hOIK8LU6 pVWyOJ9NcyPS8YS963xk/ohf5+ujVK5m -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:33 2025 by rpki-client