This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: y87SPllIhlAHjnIqWf+CiXIVGiu4tw+a47R0zwt/F+E= Subject key identifier: 2B:37:45:D1:F9:D8:98:25:B9:EB:C0:AE:92:A5:B6:45:9E:4F:E2:3A Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B61 Signing time: Sat 06 Dec 2025 18:28:33 +0000 Manifest this update: Sat 06 Dec 2025 18:28:32 +0000 Manifest next update: Sat 13 Dec 2025 18:28:32 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: bUQyzkcoiCzBsJDWhlCMuEFY0BHUMF8iBNKqp6dZue4=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2933 (0xb75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Dec 6 18:28:32 2025 GMT Not After : Dec 13 18:28:32 2025 GMT Subject: CN=693475d1-4d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:a2:0c:aa:5a:60:09:13:b9:6a:98:7c:64: ba:67:8b:fc:56:c1:36:e7:50:45:90:42:d7:49:e2: 97:b5:e2:15:c9:a5:d0:01:6f:0e:41:76:22:c6:6d: d6:f6:96:8d:ea:6e:e9:aa:8c:b9:f6:81:1e:af:f2: fd:d7:64:96:c9:e8:ec:fd:7d:51:2d:31:45:21:a8: 70:47:99:c2:da:fb:67:84:0c:7f:2a:27:d4:fe:8c: 10:95:75:1f:24:9c:24:48:bb:e2:ab:bd:71:4d:f6: e3:a9:ff:ea:78:f8:cb:7b:19:64:ef:d7:b6:96:bf: 34:54:f5:81:ae:66:9c:ab:43:ee:90:0f:22:79:dd: f6:50:a6:07:c2:dc:c1:6a:88:2f:c5:5a:a7:28:3c: 7d:f3:a6:de:05:bd:4d:67:c0:f2:ee:e5:28:7c:31: 75:11:c7:75:3e:1f:3a:e3:5d:8c:77:89:40:67:99: 8d:f4:76:48:0b:0a:69:2e:8a:a5:fb:1e:53:38:bb: 6e:73:eb:ae:c8:71:63:50:e8:64:6b:4f:1f:aa:5f: 37:00:d2:88:bd:75:e0:87:5d:c7:b2:50:01:2b:a9: 09:be:ee:18:bb:cc:6c:1e:c6:d7:09:a7:4e:c7:04: c9:2e:4c:6a:22:89:24:65:9d:33:32:71:83:93:07: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:45:D1:F9:D8:98:25:B9:EB:C0:AE:92:A5:B6:45:9E:4F:E2:3A X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e5:bc:ca:ba:a2:5f:24:d8:f9:41:d0:cb:03:09:ca:03:4b: ab:ef:64:c3:c1:41:e3:ec:cf:77:71:6a:29:4c:6a:34:f0:22: e9:44:b2:28:bf:99:95:d7:90:91:fb:51:21:02:0b:c5:ba:74: 8e:ca:2a:2e:7d:6e:01:c3:f1:95:c5:6b:54:21:72:9f:c8:3b: b1:96:ae:b9:2c:33:17:fd:f5:29:03:77:4b:0d:82:26:c5:ee: 87:24:96:31:9b:3e:1e:88:94:33:4a:08:ec:24:07:d9:fb:92: 72:a9:f3:6f:f0:90:7a:44:30:8d:46:2e:c2:e0:5b:51:19:44: 7a:b8:e3:af:36:b0:a4:aa:2d:e1:54:06:ea:1e:cd:50:a4:70: 48:25:f0:0b:a1:a5:f7:62:94:f7:68:53:90:17:85:a6:4a:e4: 01:ea:f2:e6:13:b7:93:2b:87:7a:c6:d1:61:80:cd:a9:b8:93: bc:c6:aa:ba:57:1c:e1:fe:9c:14:67:51:bb:ac:2d:a3:31:65: 45:cb:10:65:29:64:d0:f1:fd:8c:b5:d9:0a:90:37:56:f2:28: 6c:4c:d8:90:d5:f7:c7:43:3f:3a:9a:98:90:77:9a:80:ac:12: 3f:d8:5c:26:dd:86:bf:db:4b:a1:73:c7:a2:7f:63:bb:12:d5: a6:8d:a1:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUxMjA2MTgyODMyWhcNMjUxMjEzMTgyODMyWjAYMRYwFAYD VQQDEw02OTM0NzVkMS00ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzOiDKpaYAkTuWqYfGS6Z4v8VsE251BFkELXSeKXteIVyaXQAW8OQXYixm3W 9paN6m7pqoy59oEer/L912SWyejs/X1RLTFFIahwR5nC2vtnhAx/KifU/owQlXUf JJwkSLviq71xTfbjqf/qePjLexlk79e2lr80VPWBrmacq0PukA8ied32UKYHwtzB aogvxVqnKDx986beBb1NZ8Dy7uUofDF1Ecd1Ph86412Md4lAZ5mN9HZICwppLoql +x5TOLtuc+uuyHFjUOhka08fql83ANKIvXXgh13HslABK6kJvu4Yu8xsHsbXCadO xwTJLkxqIokkZZ0zMnGDkweBjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs3RdH5 2JgluevArpKltkWeT+I6MB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG5bzKuqJfJNj5QdDLAwnKA0ur72TDwUHj7M93cWopTGo08CLpRLIo v5mV15CR+1EhAgvFunSOyioufW4Bw/GVxWtUIXKfyDuxlq65LDMX/fUpA3dLDYIm xe6HJJYxmz4eiJQzSgjsJAfZ+5JyqfNv8JB6RDCNRi7C4FtRGUR6uOOvNrCkqi3h VAbqHs1QpHBIJfALoaX3YpT3aFOQF4WmSuQB6vLmE7eTK4d6xtFhgM2puJO8xqq6 Vxzh/pwUZ1G7rC2jMWVFyxBlKWTQ8f2MtdkKkDdW8ihsTNiQ1ffHQz86mpiQd5qA rBI/2Fwm3Ya/20uhc8eif2O7EtWmjaEv -----END CERTIFICATE-----Generated at Sun Dec 7 23:30:12 2025 by rpki-client