This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: 0uIbqt+L5bg0+Cdg+nR/RYCbDvzHI8qSkvH/M/7GTao= Subject key identifier: 98:B0:8B:C4:85:D4:E7:56:CD:25:EC:E7:D5:AA:F7:17:56:1F:E6:CD Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 072C Signing time: Sat 06 Dec 2025 20:48:33 +0000 Manifest this update: Sat 06 Dec 2025 20:48:33 +0000 Manifest next update: Sat 13 Dec 2025 20:48:33 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: 3m1MDCybe7ASMgyt2zIhOparvbrtS5uw7DoQx+5HJMk=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: NT27Q4+crppd5YzCD9rpV43tvmiUM1bUNKwwd266KfY=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: td6YzHO0feqFZb57DHpN7KSZ6FUNeSOTB0hRY6rpjKQ=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 3IMbjiUOCfbRYN7Htz538ACGC+HZm8dI0Isqa2du++M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Dec 6 20:48:33 2025 GMT Not After : Dec 13 20:48:33 2025 GMT Subject: CN=693496a1-5b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:6b:d5:f4:55:24:d1:6b:ab:df:ea:ae:b8: 16:9b:27:96:42:fe:c0:4f:7e:89:87:c7:45:14:a8: 14:d6:12:bd:da:d0:68:2c:bd:d2:63:83:60:e7:54: 85:68:b7:c7:13:00:d1:c4:2a:4f:b8:dc:3f:1f:1d: c4:42:70:00:40:65:ae:1c:78:36:6d:3d:f5:a3:d8: b5:65:fa:72:9a:3d:99:5b:54:8c:0c:b0:e5:6b:67: 34:97:b8:f8:1e:d7:84:e9:df:d6:f7:60:8e:01:ff: f9:24:a2:f0:f5:bc:52:97:9d:5a:b5:4c:5f:0b:d2: c4:b9:d8:d5:4f:93:26:69:c8:5d:37:48:11:85:82: a0:3d:8b:07:11:b2:68:27:e0:8d:e4:0c:27:07:a3: 2f:58:08:c6:d6:ca:00:ce:f2:f4:9b:43:0a:a5:84: ac:06:d3:43:95:ce:02:58:dc:0c:70:bf:e9:77:5a: 26:06:55:ec:a8:15:48:bf:a2:2e:ec:c9:c9:1c:94: db:31:6e:d1:fc:b0:13:27:2e:10:6e:c6:ae:43:32: 3d:fe:16:97:65:e8:63:64:8a:9a:6c:0a:39:65:35: 87:26:79:77:c4:77:59:93:1c:c3:bb:fa:44:97:71: 60:e3:23:b9:75:6b:b5:0c:0b:38:ad:6a:94:c2:39: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B0:8B:C4:85:D4:E7:56:CD:25:EC:E7:D5:AA:F7:17:56:1F:E6:CD X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:54:27:ed:d3:33:06:8d:7a:26:35:f1:17:8e:d8:dd:8a:aa: 73:fc:07:91:75:8a:98:ec:f8:58:45:d3:01:99:77:d3:3d:15: e7:c7:a2:44:1e:fb:b3:32:e8:44:85:d9:e9:da:2c:cb:12:70: e3:3d:85:37:60:ce:51:71:4b:16:16:66:b3:fa:b4:bd:89:35: 37:f0:88:d9:6f:bf:1a:c9:d6:2c:52:54:07:81:98:2f:50:4f: a1:f5:12:c9:10:28:86:b0:e7:b6:9d:f9:fb:6a:3e:b0:2c:44: 07:ef:a4:8b:4c:76:15:99:d6:36:df:7d:a2:c4:23:1f:43:9b: be:ac:63:48:96:63:f8:de:42:60:8e:ee:d5:0f:c5:c5:96:dc: fc:d9:0f:e8:24:86:e3:8b:f2:87:25:27:a8:e8:3e:64:1a:65: 07:26:a7:5d:ca:95:97:6e:46:36:6b:1c:82:c2:e7:19:35:7c: 20:54:3e:98:d3:9e:f7:4d:3f:4c:81:16:da:4d:23:0c:ec:45: 7c:d5:74:da:77:fe:c7:ad:92:a2:81:95:01:da:9d:6b:e7:18: 82:ce:f6:6d:98:77:cd:35:fb:ff:68:1f:96:62:dc:be:ca:8c: bc:fe:4b:40:2b:0b:40:0d:bc:f0:39:2c:d8:34:3c:54:91:94: 83:f4:79:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUxMjA2MjA0ODMzWhcNMjUxMjEzMjA0ODMzWjAYMRYwFAYD VQQDEw02OTM0OTZhMS01YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GZr1fRVJNFrq9/qrrgWmyeWQv7AT36Jh8dFFKgU1hK92tBoLL3SY4Ng51SF aLfHEwDRxCpPuNw/Hx3EQnAAQGWuHHg2bT31o9i1Zfpymj2ZW1SMDLDla2c0l7j4 HteE6d/W92COAf/5JKLw9bxSl51atUxfC9LEudjVT5MmachdN0gRhYKgPYsHEbJo J+CN5AwnB6MvWAjG1soAzvL0m0MKpYSsBtNDlc4CWNwMcL/pd1omBlXsqBVIv6Iu 7MnJHJTbMW7R/LATJy4QbsauQzI9/haXZehjZIqabAo5ZTWHJnl3xHdZkxzDu/pE l3Fg4yO5dWu1DAs4rWqUwjl3LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiwi8SF 1OdWzSXs59Wq9xdWH+bNMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsVCft0zMGjXomNfEXjtjdiqpz/AeRdYqY7PhYRdMBmXfTPRXnx6JE HvuzMuhEhdnp2izLEnDjPYU3YM5RcUsWFmaz+rS9iTU38IjZb78aydYsUlQHgZgv UE+h9RLJECiGsOe2nfn7aj6wLEQH76SLTHYVmdY2332ixCMfQ5u+rGNIlmP43kJg ju7VD8XFltz82Q/oJIbji/KHJSeo6D5kGmUHJqddypWXbkY2axyCwucZNXwgVD6Y 0573TT9MgRbaTSMM7EV81XTad/7HrZKigZUB2p1r5xiCzvZtmHfNNfv/aB+WYty+ yoy8/ktAKwtADbzwOSzYNDxUkZSD9Hkt -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:56 2025 by rpki-client