This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json) Hash identifier: b8/ikFKSq7kC6BZA2Fc2PRBdQ7Xz69MfPBEbFVK5nWU= Subject key identifier: 86:13:94:D5:A1:AD:DC:F5:6A:8F:BA:44:57:21:E9:A6:96:F8:6A:31 Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft Manifest number: 58 Signing time: Fri 05 Dec 2025 05:03:12 +0000 Manifest this update: Fri 05 Dec 2025 05:03:11 +0000 Manifest next update: Fri 12 Dec 2025 05:03:11 +0000 Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: cZprYnupxGpzkVDfAcDtmtBvI8FCvUI7LbFVBrACimo=) 2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: Dtb6Fb2JpEd/Zi2+qi9cOHLUquodmN8UKkbWls/zEtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Validity Not Before: Dec 5 05:03:11 2025 GMT Not After : Dec 12 05:03:11 2025 GMT Subject: CN=69326790-017d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:28:c6:00:be:39:b4:54:46:aa:f9:05:56: df:87:7e:58:89:df:f1:5f:d6:f5:32:65:3c:34:62: db:8b:55:cf:42:4e:9a:24:b8:39:6c:ea:70:2b:d1: 7f:1d:89:e5:5f:12:9d:c7:d5:4a:a1:b0:ed:07:13: aa:cc:73:31:fa:e6:2c:7d:ed:33:e4:d3:51:7d:60: 3f:30:80:9a:dc:31:aa:1a:eb:f7:b2:21:9d:95:af: cc:05:cf:e2:54:2f:e9:41:d0:e1:c3:1b:dd:cc:cf: c5:0f:d6:42:f6:3b:62:01:4f:bd:43:d8:a6:2b:00: d7:e1:df:bd:c7:1f:21:21:f6:a3:39:1f:75:d7:09: 6d:12:6c:48:ab:14:f8:27:43:91:4e:c3:53:7b:83: fd:fa:59:f3:53:97:90:bb:64:61:14:40:19:cb:c3: ce:0a:05:c6:43:5d:a1:d2:ba:9e:69:65:77:0d:c3: b4:1a:15:ff:a3:d2:a0:46:b9:d3:6a:74:86:ea:c4: 1e:82:13:ed:91:b7:46:b4:01:dc:e9:73:ca:c0:6a: aa:3f:fd:43:b9:42:d2:ca:ce:4e:40:17:19:06:ac: 78:a2:51:6d:1c:11:11:74:98:9b:7d:e1:ab:b3:55: c5:9a:1c:ce:72:4f:d8:78:38:8a:61:f3:dd:de:a9: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:94:D5:A1:AD:DC:F5:6A:8F:BA:44:57:21:E9:A6:96:F8:6A:31 X509v3 Authority Key Identifier: keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c0:3e:ed:1b:48:2a:6f:3b:45:35:35:66:d7:f4:9f:f8:bc: 18:06:a6:63:22:01:37:ae:0d:8a:f5:01:f0:d4:8d:5a:f1:54: ab:e4:34:f2:05:3a:78:91:49:f5:a5:3b:6b:be:e8:96:ba:fe: fe:11:83:39:26:3e:d5:38:e5:2e:ff:24:f3:ba:ef:6a:18:04: e4:e4:92:ab:cd:8d:29:6e:b6:0e:49:c7:a4:b2:ac:c5:f9:d1: cf:3f:10:0e:a2:bb:39:2b:51:c1:c7:8f:31:6c:29:58:8b:cf: 2d:ce:99:7a:05:c1:27:c9:51:e0:09:ce:6b:55:67:df:ec:c3: c3:44:35:5d:4c:a2:8d:38:ca:53:c5:3d:94:c1:c5:5b:3d:8b: 3e:ec:29:36:1a:da:1b:32:2f:69:fa:66:d1:d3:cf:59:11:6b: 71:57:d8:31:b2:6c:79:02:f4:91:1a:cb:01:7e:07:e1:4b:cf: 22:8f:ce:d2:f7:e7:5b:ca:c0:af:bf:08:e6:4f:8d:03:6c:a5: 5e:19:1d:0f:48:a2:60:e2:be:44:5a:80:d9:1a:e0:49:d0:8c: d5:eb:13:a2:fd:b4:13:2e:bf:a0:90:a8:a3:70:0f:fa:e4:1c: 49:92:ad:a7:70:15:e9:0f:85:a3:fd:78:e2:8a:2f:be:cb:f6: d3:86:fb:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNEU3RkVBNzFBNDQ3QTZBMTYxNzlDMjY5N0VCRUU1NTUx OTlEQjA5ODAeFw0yNTEyMDUwNTAzMTFaFw0yNTEyMTIwNTAzMTFaMBgxFjAUBgNV BAMTDTY5MzI2NzkwLTAxN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAFyjGAL45tFRGqvkFVt+HfliJ3/Ff1vUyZTw0YtuLVc9CTpokuDls6nAr0X8d ieVfEp3H1UqhsO0HE6rMczH65ix97TPk01F9YD8wgJrcMaoa6/eyIZ2Vr8wFz+JU L+lB0OHDG93Mz8UP1kL2O2IBT71D2KYrANfh373HHyEh9qM5H3XXCW0SbEirFPgn Q5FOw1N7g/36WfNTl5C7ZGEUQBnLw84KBcZDXaHSup5pZXcNw7QaFf+j0qBGudNq dIbqxB6CE+2Rt0a0Adzpc8rAaqo//UO5QtLKzk5AFxkGrHiiUW0cERF0mJt94auz VcWaHM5yT9h4OIph893eqR9NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhhOU1aGt 3PVqj7pEVyHpppb4ajEwHwYDVR0jBBgwFoAUTn/qcaRHpqFhecJpfr7lVRmdsJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzhCMjE5MDlDNEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFGaGVjSnBmcjdsVlJtZHNK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG5fcWNhUkhwcUZoZWNKcGZyN2xWUm1kc0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzhCMjE5MDlDNEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFG aGVjSnBmcjdsVlJtZHNKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTAPu0bSCpvO0U1NWbX9J/4vBgGpmMiATeuDYr1AfDUjVrxVKvkNPIF OniRSfWlO2u+6Ja6/v4RgzkmPtU45S7/JPO672oYBOTkkqvNjSlutg5Jx6SyrMX5 0c8/EA6iuzkrUcHHjzFsKViLzy3OmXoFwSfJUeAJzmtVZ9/sw8NENV1Moo04ylPF PZTBxVs9iz7sKTYa2hsyL2n6ZtHTz1kRa3FX2DGybHkC9JEaywF+B+FLzyKPztL3 51vKwK+/COZPjQNspV4ZHQ9IomDivkRagNka4EnQjNXrE6L9tBMuv6CQqKNwD/rk HEmSradwFekPhaP9eOKKL77L9tOG+9w= -----END CERTIFICATE-----Generated at Sat Dec 6 12:19:11 2025 by rpki-client