This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: LMGMRmKqBEZnEsRwCPWHMJDMnwdQM6uy9JNMbospLfg= Subject key identifier: E0:E8:2A:F9:D9:5A:A4:55:C8:39:2D:2E:64:34:C0:36:0E:02:36:2D Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 19EC Signing time: Sat 06 Dec 2025 17:00:54 +0000 Manifest this update: Sat 06 Dec 2025 17:00:53 +0000 Manifest next update: Sat 13 Dec 2025 17:00:53 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: IYhozPAReMCiiRlL8IeszYhhl3fK9i2K9i5077KgFCE=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Dec 6 17:00:53 2025 GMT Not After : Dec 13 17:00:53 2025 GMT Subject: CN=69346145-7ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:c6:ef:41:49:3b:c8:01:ea:a0:8f:44:7a: b0:57:cf:ca:58:40:b8:97:cb:83:3b:be:a7:98:4f: 7d:16:09:ec:e7:c7:95:b8:66:60:a9:89:cd:8f:b7: 97:34:69:95:eb:18:df:1f:41:c6:6d:0d:20:0c:c0: 8e:ed:16:8f:b0:de:b4:34:52:94:9e:a2:a1:09:59: 5e:45:54:04:15:db:f3:c3:51:d8:f7:a5:19:d3:20: 7f:9f:b6:30:8c:19:63:43:8d:aa:c0:46:3e:e3:59: 00:e0:34:1f:2b:be:54:1c:17:3a:1d:f0:8b:b8:48: 81:f2:ea:3c:d4:cd:8a:aa:a8:c2:cc:49:77:d4:d6: f9:b6:b6:12:a6:e0:d7:4c:7f:81:b0:71:5e:51:07: 2e:8b:e9:a8:02:7d:a9:2a:4f:8b:5d:2f:18:14:14: 97:48:99:d1:58:61:82:43:38:b8:9d:1d:cf:2a:c8: b4:a2:f4:c8:fa:8a:75:bf:ca:11:78:3e:33:b9:22: 32:9e:b0:f0:c7:f4:b6:0e:57:d5:5d:32:cf:18:bd: d1:e4:b6:b3:a2:6b:6d:10:1d:ee:dc:75:e7:6c:ea: e7:1e:0c:48:ce:c7:69:60:a5:30:06:7e:f2:e7:07: 17:18:dc:13:ba:6b:ac:49:75:52:c8:23:7f:fc:4b: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E8:2A:F9:D9:5A:A4:55:C8:39:2D:2E:64:34:C0:36:0E:02:36:2D X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:21:86:7e:d0:17:a1:ee:50:4f:26:51:ed:b1:45:4c:ac:79: 58:d4:6e:c8:1c:14:bd:4b:a9:36:6e:e7:e4:6f:00:68:95:e3: 34:12:62:25:76:17:47:c6:f9:2b:9e:9f:76:06:cf:37:99:49: 16:3d:10:71:02:51:34:1d:c1:36:cd:25:5c:8e:85:29:7d:f6: 5e:a6:f9:ff:ab:43:ec:45:a7:d4:2a:55:d9:f1:de:1c:f4:38: 4a:eb:06:ef:83:be:27:0b:8e:01:ca:68:2f:f3:af:fa:84:a8: 61:b6:de:36:2f:7a:e1:4a:9d:41:bb:fb:6e:68:58:fb:45:ce: 57:b2:82:0b:7c:84:31:27:39:87:af:a0:65:bb:27:ec:a4:f1: 4f:2a:29:da:56:f6:ed:3d:ba:63:ff:03:15:ad:9d:6b:92:f6: 6b:8c:a0:d4:42:db:ad:1d:a0:59:fb:8a:91:d2:2c:96:13:9d: 38:66:b0:82:e1:35:9c:bd:05:5b:51:f9:43:21:39:32:f7:81: 5d:a8:47:6c:13:3c:b8:66:0c:56:7d:71:73:50:2d:c4:12:91: f4:bb:e9:68:d2:00:4c:35:bb:b4:60:2f:aa:fc:da:ea:be:e7: ca:84:66:41:3d:4b:49:b8:d0:2f:07:70:b6:bd:db:e8:cb:c3: 7a:f3:60:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUxMjA2MTcwMDUzWhcNMjUxMjEzMTcwMDUzWjAYMRYwFAYD VQQDEw02OTM0NjE0NS03ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRDG70FJO8gB6qCPRHqwV8/KWEC4l8uDO76nmE99Fgns58eVuGZgqYnNj7eX NGmV6xjfH0HGbQ0gDMCO7RaPsN60NFKUnqKhCVleRVQEFdvzw1HY96UZ0yB/n7Yw jBljQ42qwEY+41kA4DQfK75UHBc6HfCLuEiB8uo81M2KqqjCzEl31Nb5trYSpuDX TH+BsHFeUQcui+moAn2pKk+LXS8YFBSXSJnRWGGCQzi4nR3PKsi0ovTI+op1v8oR eD4zuSIynrDwx/S2DlfVXTLPGL3R5LazomttEB3u3HXnbOrnHgxIzsdpYKUwBn7y 5wcXGNwTumusSXVSyCN//EtvMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODoKvnZ WqRVyDktLmQ0wDYOAjYtMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAIYZ+0Beh7lBPJlHtsUVMrHlY1G7IHBS9S6k2bufkbwBoleM0EmIl dhdHxvkrnp92Bs83mUkWPRBxAlE0HcE2zSVcjoUpffZepvn/q0PsRafUKlXZ8d4c 9DhK6wbvg74nC44Bymgv86/6hKhhtt42L3rhSp1Bu/tuaFj7Rc5XsoILfIQxJzmH r6BluyfspPFPKinaVvbtPbpj/wMVrZ1rkvZrjKDUQtutHaBZ+4qR0iyWE504ZrCC 4TWcvQVbUflDITky94FdqEdsEzy4ZgxWfXFzUC3EEpH0u+lo0gBMNbu0YC+q/Nrq vufKhGZBPUtJuNAvB3C2vdvoy8N682Aa -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:55 2025 by rpki-client