This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
File: TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json)
Hash identifier: 1EwGKGYlMQVdTQ0+bpN+aVYh+qwBLuALKd/fxH3kLPg=
Subject key identifier: F9:B5:2D:65:7E:76:A9:29:55:04:FB:0B:CB:40:54:10:4C:6F:E0:6B
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Certificate issuer: /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
Manifest number: CB
Signing time: Fri 05 Dec 2025 03:51:29 +0000
Manifest this update: Fri 05 Dec 2025 03:51:29 +0000
Manifest next update: Fri 12 Dec 2025 03:51:29 +0000
Files and hashes: 1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: BEqIOn8TeWDCZdkV1M650SJQS1FNlDp9dHb3ZtHiHX0=)
2: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (hash: m6Ln5a7ZSeIX81Tm2886H7n9SlKXj8hnsIcbsYsTN7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Validity
Not Before: Dec 5 03:51:29 2025 GMT
Not After : Dec 12 03:51:29 2025 GMT
Subject: CN=693256c1-859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:08:fe:2b:3d:91:95:74:9b:35:00:a5:e3:
1f:10:40:4a:1f:83:f5:ef:ce:a5:56:73:2e:bd:63:
8e:3a:f8:32:99:c1:01:1d:f7:8d:fe:74:59:99:0a:
c3:0e:6b:49:30:b3:dd:70:6b:4e:2c:cf:4a:e1:28:
79:ef:5f:b1:cf:21:e6:e3:88:ab:81:ec:05:a9:a9:
2f:08:f0:f8:ec:da:f8:d0:4c:ee:83:78:6e:6d:89:
06:4e:92:74:98:de:88:93:36:a5:d1:18:59:32:7d:
01:46:7f:f7:5a:3c:72:34:2d:68:61:0c:6b:c2:c0:
40:16:90:77:59:ea:02:e0:64:5e:40:12:b8:7e:8b:
b5:fc:c4:1b:e7:b6:9f:84:b7:d1:ce:8c:96:8d:d4:
82:6e:aa:b4:4d:12:fb:a7:83:42:27:51:b8:57:31:
62:d9:be:f3:9d:54:47:bd:ea:3d:00:3d:ca:f3:8d:
73:b8:49:b3:d6:ae:c3:5b:9a:a1:75:b4:50:39:c1:
5d:e9:cb:05:e2:de:a5:b5:b9:ee:2f:eb:68:6e:f4:
b9:97:80:de:da:4b:b9:b7:66:d1:0f:8a:8f:c1:7e:
9c:63:20:51:c4:4d:fb:61:0a:f7:d2:9d:18:22:4d:
69:3e:e0:06:4e:2a:00:92:62:3b:23:6f:c2:80:a9:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:2D:65:7E:76:A9:29:55:04:FB:0B:CB:40:54:10:4C:6F:E0:6B
X509v3 Authority Key Identifier:
keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:9f:e0:8f:ff:43:35:b1:4b:7d:f1:aa:ed:1f:78:91:00:
47:ab:34:b0:10:b0:2b:3c:a4:80:5d:37:ad:3f:03:f1:9d:c9:
81:90:51:6a:ec:8f:84:0e:8a:5e:ba:38:9d:68:eb:e9:f4:1e:
d5:3b:59:ed:0b:d5:da:a0:df:e1:71:6a:6e:e7:0a:d4:b0:5a:
29:8c:7a:94:3a:cf:73:e9:f0:9a:9b:a1:f2:e2:ed:aa:82:00:
b3:42:5c:0e:d0:01:ac:08:b8:43:a7:ee:11:a4:9f:6d:e2:aa:
5f:0c:9b:68:9b:50:08:bb:d4:01:35:0e:06:3a:bc:9f:55:91:
a5:61:ec:e5:80:ae:85:d1:a1:ec:a0:ee:18:37:f4:2c:e6:85:
ee:aa:51:2e:77:2d:3c:0d:b5:6e:1e:01:ff:81:92:c4:81:c7:
d1:f1:6e:5c:58:42:ff:10:06:54:c4:ec:68:52:71:7e:13:2a:
63:ce:1e:7b:cd:f8:30:22:d2:01:38:42:31:36:b5:6a:02:af:
32:3c:92:c5:42:d6:80:6c:ab:08:b8:2a:51:b3:ee:2a:0b:de:
68:9e:51:be:b6:e8:cd:b4:f0:52:a4:1a:8a:0d:74:38:d6:35:
0e:e4:c7:67:3a:21:69:78:b6:6c:42:d8:48:f8:9a:ed:58:36:
b9:8c:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:03:56 2025 by rpki-client