This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: IW+1nEkY2saLD3MG8CtLzEjTnkNCGg/QiHcvUQ+QfuY= Subject key identifier: 8D:8E:CE:5D:1F:39:B9:81:53:60:65:D8:AE:38:B5:2B:A1:D0:81:C7 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 0206 Signing time: Sun 21 Dec 2025 01:37:03 +0000 Manifest this update: Sun 21 Dec 2025 01:37:02 +0000 Manifest next update: Sun 28 Dec 2025 01:37:02 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: BuGmxU6PbEV1bfXL2EAFjKYALOI+ke1d87xoES0JO90=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: l6zkRAHkzlG2p+kMMFQU/QFFwk47WGSalo955oGvUKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Dec 21 01:37:02 2025 GMT Not After : Dec 28 01:37:02 2025 GMT Subject: CN=69474f3e-2e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7f:a9:a8:1d:8e:ff:3b:20:68:1d:ad:a0:63: 21:bf:3f:b5:41:1d:f1:76:d0:98:bb:b3:23:72:aa: f8:13:ec:bd:37:66:0a:05:0c:f6:27:ff:9b:ed:ae: 0d:17:d6:40:94:a0:d8:42:e6:e9:d5:33:e7:e8:9d: ed:72:ba:9b:5e:5d:66:71:8c:2f:c4:64:a8:bc:99: cc:fc:13:94:c5:28:26:4a:8b:e4:90:81:3a:0c:ef: f0:bf:65:6e:41:a9:c8:8b:4d:ac:77:fa:43:81:5c: 1c:d4:35:65:d9:d1:2b:80:9a:6f:85:c4:62:b5:ed: 0f:c8:e2:bc:e7:43:ff:cb:91:cb:14:e8:53:ab:21: 0e:e1:64:2e:68:d0:ce:2f:a1:d1:7a:29:37:34:be: 9e:b7:7c:fb:8c:bc:84:d4:61:0a:4a:3b:dc:fd:aa: 29:71:79:8d:73:d1:bb:42:92:d2:07:7e:68:c3:3b: 35:2a:17:5c:1b:20:e8:19:cf:d1:48:44:ca:79:4c: 09:e0:dd:8b:8f:ef:77:85:e5:2d:1f:e2:48:98:a7: b6:d8:e9:bc:40:a1:e5:77:7a:54:9e:9b:ce:e8:de: ac:a4:ed:2e:fd:65:b8:fe:dd:71:36:29:b1:69:f7: cb:8b:a0:ba:62:8c:de:c3:fb:8f:d7:28:06:1a:18: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8E:CE:5D:1F:39:B9:81:53:60:65:D8:AE:38:B5:2B:A1:D0:81:C7 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c4:72:d6:ef:1e:e6:f2:83:ef:03:fa:53:10:df:f7:a1:a5: 63:d6:73:e4:10:4d:9d:19:81:76:42:d9:b6:56:41:04:aa:ad: 8e:23:4b:f1:71:0f:28:53:e5:ed:81:cc:81:1d:20:94:08:2b: 30:80:f3:77:78:1b:cb:9b:e7:0d:57:18:a3:cd:62:39:d0:fc: 3b:a7:34:cb:3a:33:c0:89:36:07:33:47:77:4f:fe:70:3c:8d: 69:09:8b:ea:ed:45:be:9f:ee:ab:37:1f:eb:4a:a2:19:e1:4d: a5:7c:24:d8:6b:f0:40:88:5d:7a:94:94:73:bf:89:18:a3:d4: b0:c0:ed:34:19:08:94:55:cb:41:17:15:4f:e9:65:a1:e9:3f: 9a:5e:11:e2:72:0e:3f:fd:45:0b:a9:f8:87:be:ed:ca:53:8b: e7:51:6f:9c:e5:f9:11:ee:43:fc:17:ef:89:76:2b:8b:83:8e: 08:81:85:56:41:bb:d8:75:e2:53:41:e1:88:6d:28:ff:de:cc: 28:ab:53:7e:45:3b:0d:d5:23:48:57:ba:4d:03:f1:fa:33:25: 15:4b:80:2f:45:38:af:02:49:c3:26:38:f7:35:a8:7a:c4:ae: c4:21:2d:a9:1c:30:fd:3e:ca:d4:7f:3d:6c:4f:4d:be:1d:88: df:89:a7:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUxMjIxMDEzNzAyWhcNMjUxMjI4MDEzNzAyWjAYMRYwFAYD VQQDDA02OTQ3NGYzZS0yZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+H+pqB2O/zsgaB2toGMhvz+1QR3xdtCYu7Mjcqr4E+y9N2YKBQz2J/+b7a4N F9ZAlKDYQubp1TPn6J3tcrqbXl1mcYwvxGSovJnM/BOUxSgmSovkkIE6DO/wv2Vu QanIi02sd/pDgVwc1DVl2dErgJpvhcRite0PyOK850P/y5HLFOhTqyEO4WQuaNDO L6HReik3NL6et3z7jLyE1GEKSjvc/aopcXmNc9G7QpLSB35owzs1KhdcGyDoGc/R SETKeUwJ4N2Lj+93heUtH+JImKe22Om8QKHld3pUnpvO6N6spO0u/WW4/t1xNimx affLi6C6Yozew/uP1ygGGhgJXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2Ozl0f ObmBU2Bl2K44tSuh0IHHMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMxHLW7x7m8oPvA/pTEN/3oaVj1nPkEE2dGYF2Qtm2VkEEqq2OI0vx cQ8oU+XtgcyBHSCUCCswgPN3eBvLm+cNVxijzWI50Pw7pzTLOjPAiTYHM0d3T/5w PI1pCYvq7UW+n+6rNx/rSqIZ4U2lfCTYa/BAiF16lJRzv4kYo9SwwO00GQiUVctB FxVP6WWh6T+aXhHicg4//UULqfiHvu3KU4vnUW+c5fkR7kP8F++JdiuLg44IgYVW QbvYdeJTQeGIbSj/3swoq1N+RTsN1SNIV7pNA/H6MyUVS4AvRTivAknDJjj3Nah6 xK7EIS2pHDD9PsrUfz1sT02+HYjfiacl -----END CERTIFICATE-----Generated at Mon Dec 22 16:03:03 2025 by rpki-client