This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: xfh2WIWzhFdnOsB+DskfUTHrYHGasBVYD75pp4n52NU= Subject key identifier: 2A:DF:27:B8:6D:A0:EC:B5:4B:5E:0A:5A:95:39:5A:0C:4F:9F:5A:CC Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 06A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 06A1 Signing time: Thu 04 Dec 2025 20:58:40 +0000 Manifest this update: Thu 04 Dec 2025 20:58:39 +0000 Manifest next update: Thu 11 Dec 2025 20:58:39 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: QyevWh7lD0feF7hlT9jz+p0at/Udb1vTdwj9cf0P3sM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Dec 4 20:58:39 2025 GMT Not After : Dec 11 20:58:39 2025 GMT Subject: CN=6931f600-e269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:12:3c:3f:bd:25:97:74:bf:fe:2a:6e:4b: 6b:41:17:94:a2:c6:f5:1e:dc:59:a5:bc:a5:14:68: f0:69:07:ec:56:09:fb:65:63:ad:a2:9c:be:18:f5: 00:53:85:74:1b:22:92:45:e6:21:1f:a3:13:da:a4: 7d:03:72:e4:bb:b0:f5:5e:15:56:93:50:e2:27:2b: 83:23:82:2a:8e:6d:e6:bb:58:cf:4d:e5:62:9f:6e: 28:61:b7:96:04:f6:95:a2:b0:a7:a0:64:f6:fe:43: 3d:a1:ac:b7:6d:c7:44:dc:73:3a:b6:e4:f6:fc:2e: eb:de:08:b7:cf:37:1c:bd:39:1f:39:b2:12:53:b9: 1a:78:c8:9b:2c:c3:08:56:e6:6c:d0:48:c1:14:59: 80:28:a2:e5:1f:9e:e1:71:87:52:5a:9b:38:85:05: b4:5b:cc:27:80:d3:23:00:1c:bc:65:16:61:c3:71: 24:19:d4:80:25:b0:6c:e1:a7:9b:f3:36:40:db:c2: 76:55:2a:43:43:0b:cc:2d:fa:41:86:75:4d:9c:f4: 47:fb:e3:74:58:6d:7f:b8:dc:c1:28:e1:a8:5b:17: dd:72:4a:cf:09:54:b2:49:b2:62:67:17:74:8a:2a: 39:6d:6f:fa:e9:1a:9d:c0:a9:8e:c1:d6:3c:f7:44: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DF:27:B8:6D:A0:EC:B5:4B:5E:0A:5A:95:39:5A:0C:4F:9F:5A:CC X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2b:71:81:ef:cb:f7:eb:0c:54:7b:84:70:f1:57:df:63:c3: d8:27:35:14:e6:d6:c5:4d:d1:5c:1a:08:3f:84:b3:b3:c6:95: 2f:ba:74:55:25:b9:d8:ed:f1:14:d1:23:aa:38:e4:ba:ec:b8: 9e:4b:c2:9f:b0:f1:43:f9:92:43:fa:11:28:0b:e8:c3:39:0e: 96:a9:df:78:27:45:bb:45:71:cd:c5:37:0e:1d:f7:21:69:ba: 1e:1c:67:85:99:e5:8b:f7:a0:71:ad:5f:92:dd:53:dc:0e:8e: 79:06:ba:7a:e9:d5:ab:6a:64:ab:a3:b3:92:39:e4:bc:03:16: 1d:7e:b7:eb:84:cb:c4:5e:1d:32:b0:78:0e:a1:d9:0a:f2:42: 89:b3:e8:42:d1:e3:30:a9:12:89:1d:fc:0e:0b:83:69:58:92: fa:51:48:09:43:98:36:c0:2b:34:d6:5c:9e:8c:4a:9e:c0:ac: 97:59:5a:29:af:ff:6b:e5:05:50:5d:d7:68:9f:d8:ff:70:f1: 8f:04:dd:81:05:56:15:72:c5:49:36:b9:94:31:ed:67:37:1b: a6:e3:37:50:06:2c:53:90:56:2e:58:bb:06:4d:9c:6b:a3:53: ca:50:f2:40:d0:cb:90:7c:70:61:80:a2:36:f3:f4:cf:e1:6c: b0:1b:0c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUxMjA0MjA1ODM5WhcNMjUxMjExMjA1ODM5WjAYMRYwFAYD VQQDEw02OTMxZjYwMC1lMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSwSPD+9JZd0v/4qbktrQReUosb1HtxZpbylFGjwaQfsVgn7ZWOtopy+GPUA U4V0GyKSReYhH6MT2qR9A3Lku7D1XhVWk1DiJyuDI4Iqjm3mu1jPTeVin24oYbeW BPaVorCnoGT2/kM9oay3bcdE3HM6tuT2/C7r3gi3zzccvTkfObISU7kaeMibLMMI VuZs0EjBFFmAKKLlH57hcYdSWps4hQW0W8wngNMjABy8ZRZhw3EkGdSAJbBs4aeb 8zZA28J2VSpDQwvMLfpBhnVNnPRH++N0WG1/uNzBKOGoWxfdckrPCVSySbJiZxd0 iio5bW/66RqdwKmOwdY890Ry0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrfJ7ht oOy1S14KWpU5WgxPn1rMMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVK3GB78v36wxUe4Rw8VffY8PYJzUU5tbFTdFcGgg/hLOzxpUvunRV JbnY7fEU0SOqOOS67LieS8KfsPFD+ZJD+hEoC+jDOQ6Wqd94J0W7RXHNxTcOHfch aboeHGeFmeWL96BxrV+S3VPcDo55Brp66dWramSro7OSOeS8AxYdfrfrhMvEXh0y sHgOodkK8kKJs+hC0eMwqRKJHfwOC4NpWJL6UUgJQ5g2wCs01lyejEqewKyXWVop r/9r5QVQXddon9j/cPGPBN2BBVYVcsVJNrmUMe1nNxum4zdQBixTkFYuWLsGTZxr o1PKUPJA0MuQfHBhgKI28/TP4WywGwy6 -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:46 2025 by rpki-client