This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier: kcRBEM4cqfNRdVfYimMxEAI7RL6BeMQuYpq8WVqWQgU=
Subject key identifier: D5:F9:01:56:F3:3C:CC:87:F8:53:EB:74:47:39:B9:9F:7A:B0:28:A5
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial: 046B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number: 0461
Signing time: Thu 04 Dec 2025 22:39:57 +0000
Manifest this update: Thu 04 Dec 2025 22:39:57 +0000
Manifest next update: Thu 11 Dec 2025 22:39:57 +0000
Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: zs1t4LINop9f2ZH5wx8Z3TSepl0RPEMy6/hXSPqw8+o=)
2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 306xxmMO0L8F4kDhDkLe1fwHAL2pRNtzpCEiuu3Fy6g=)
3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: 09H6WJNzMO6bY1CShsLhlCFgsX+1B/xNo5NQ+Cdhlps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Validity
Not Before: Dec 4 22:39:57 2025 GMT
Not After : Dec 11 22:39:57 2025 GMT
Subject: CN=69320dbd-6d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:30:a3:a6:d7:d4:4e:10:7b:e7:2f:d2:aa:
66:92:f7:41:9c:3d:b8:51:7a:21:9d:af:b6:cb:07:
8f:bb:27:fc:10:be:8c:40:66:a5:71:c0:b4:bb:86:
13:32:9a:c0:d3:3e:ff:bc:d9:2e:be:26:0e:e8:b4:
81:bd:03:03:08:48:98:28:10:3a:0d:68:56:25:73:
33:ae:86:01:30:82:03:03:7d:d0:53:56:7e:11:a4:
e3:bb:54:29:67:3b:1b:a2:50:f1:ac:94:da:4c:23:
68:f3:00:69:fe:8a:a5:a6:a7:85:4a:25:9d:52:22:
3e:2a:9d:b2:aa:20:21:ee:ec:30:2b:6a:c4:bd:6b:
a6:4d:5c:d3:ee:ed:37:9c:31:65:db:d9:19:20:7b:
76:35:9c:66:36:63:b5:e7:47:e2:e7:24:41:56:13:
de:82:30:8a:e4:25:7a:3a:d6:6d:47:22:07:6c:a3:
a7:1c:de:70:f4:a1:e2:33:80:d7:fb:f1:31:34:2c:
c4:f6:f3:a4:c6:8e:2b:5f:cf:0d:0f:66:f7:58:63:
ec:20:0d:d6:9b:7a:5c:5a:20:ef:0b:24:7e:e5:2e:
28:a5:0a:dc:e6:60:81:14:01:3c:34:e9:d3:35:17:
7c:4b:19:bc:b1:1d:c3:03:e3:c7:bb:a7:0d:90:66:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F9:01:56:F3:3C:CC:87:F8:53:EB:74:47:39:B9:9F:7A:B0:28:A5
X509v3 Authority Key Identifier:
keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:69:0d:ca:0b:dd:e6:4c:09:77:6f:3f:95:c0:c1:37:e3:d7:
d7:a4:66:99:e3:d4:2b:50:7d:87:c2:44:4b:93:46:d2:6f:ee:
59:13:01:0b:72:43:88:e6:32:51:44:ee:03:9b:dc:01:e7:2d:
c2:48:e0:7c:65:6c:d4:78:d4:32:5c:74:59:cf:26:60:70:da:
3d:6a:04:01:cd:60:25:38:37:3a:91:36:3b:06:b0:bb:56:a7:
e1:de:3d:6e:76:b5:db:03:68:7f:08:f5:cc:87:81:b1:6d:72:
33:6d:78:04:e3:2a:6a:ba:2c:b5:7d:74:8d:e7:e4:d2:eb:19:
35:ba:8f:25:b9:a0:4a:f8:76:2b:01:0e:fc:c4:48:3c:84:a0:
c7:88:b8:b6:73:fc:d5:05:15:73:de:95:cd:71:86:62:99:01:
ec:dc:9f:ab:30:7f:12:2e:e8:bd:b3:c9:22:dc:da:f7:38:aa:
12:56:c4:a7:14:40:be:6a:7b:e7:f7:13:92:4f:22:b9:f6:96:
de:5a:b7:23:86:81:d3:7f:f0:9c:44:21:9b:a6:3d:53:2e:18:
46:d2:07:3b:8f:88:5d:da:63:66:21:14:6e:d6:9f:4a:7b:1c:
bd:c8:f9:e0:18:19:75:b7:17:6a:97:54:c5:24:21:70:94:20:
5b:fb:da:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw
MEQ2REQ3RTcwHhcNMjUxMjA0MjIzOTU3WhcNMjUxMjExMjIzOTU3WjAYMRYwFAYD
VQQDEw02OTMyMGRiZC02ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyPAwo6bX1E4Qe+cv0qpmkvdBnD24UXohna+2ywePuyf8EL6MQGalccC0u4YT
MprA0z7/vNkuviYO6LSBvQMDCEiYKBA6DWhWJXMzroYBMIIDA33QU1Z+EaTju1Qp
ZzsbolDxrJTaTCNo8wBp/oqlpqeFSiWdUiI+Kp2yqiAh7uwwK2rEvWumTVzT7u03
nDFl29kZIHt2NZxmNmO150fi5yRBVhPegjCK5CV6OtZtRyIHbKOnHN5w9KHiM4DX
+/ExNCzE9vOkxo4rX88ND2b3WGPsIA3Wm3pcWiDvCyR+5S4opQrc5mCBFAE8NOnT
NRd8Sxm8sR3DA+PHu6cNkGbMqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX5AVbz
PMyH+FPrdEc5uZ96sCilMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1
MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201
T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJaQ3KC93mTAl3bz+VwME349fXpGaZ49QrUH2HwkRLk0bSb+5ZEwEL
ckOI5jJRRO4Dm9wB5y3CSOB8ZWzUeNQyXHRZzyZgcNo9agQBzWAlODc6kTY7BrC7
Vqfh3j1udrXbA2h/CPXMh4GxbXIzbXgE4ypquiy1fXSN5+TS6xk1uo8luaBK+HYr
AQ78xEg8hKDHiLi2c/zVBRVz3pXNcYZimQHs3J+rMH8SLui9s8ki3Nr3OKoSVsSn
FEC+anvn9xOSTyK59pbeWrcjhoHTf/CcRCGbpj1TLhhG0gc7j4hd2mNmIRRu1p9K
exy9yPngGBl1txdql1TFJCFwlCBb+9oF
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:44 2025 by rpki-client