This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: hzff3x2EDIPC6ZWeEgL7gliwlo4oERdg1WfCHl2c+3s= Subject key identifier: 50:37:8A:91:C9:E2:DA:71:62:FD:12:CB:B9:E8:C5:9F:7F:A1:E7:AD Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: A4 Signing time: Fri 05 Dec 2025 04:16:48 +0000 Manifest this update: Fri 05 Dec 2025 04:16:48 +0000 Manifest next update: Fri 12 Dec 2025 04:16:48 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: yA2DMdY26kcmVPPmyS7dNpqoX5T7k0ZkFhec0YXuOWI=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Dec 5 04:16:48 2025 GMT Not After : Dec 12 04:16:48 2025 GMT Subject: CN=69325cb0-8851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:0a:94:fd:44:b4:ed:f1:02:a5:3b:91:27: 1d:63:0b:09:ba:15:b4:b3:b6:65:1a:aa:aa:f3:b1: 95:e1:e9:21:32:68:78:fc:3e:3b:33:2f:63:3c:ea: 6c:74:91:b6:02:0c:46:3a:59:f1:7e:5f:6c:12:36: 2c:d6:b1:f0:a2:50:e1:28:51:95:c6:7c:c7:f9:4f: 7e:20:4f:fa:28:69:b9:c5:e4:71:dc:28:26:fe:d6: 39:b7:ce:65:4e:6f:31:73:09:c6:bc:69:e6:2a:79: 6f:a7:e2:7e:5d:67:b2:28:3d:07:77:c0:80:ad:10: 3b:dc:a1:8c:64:f5:62:3c:77:e1:fb:59:3f:3c:0e: 88:90:d2:13:a3:7b:e7:27:51:b2:ea:80:51:1d:8f: a9:5c:78:9f:39:0d:49:7f:4c:90:46:96:b2:42:d1: 1d:79:d9:50:33:b3:72:15:c2:cd:49:32:cb:6f:2a: 99:a8:82:f8:63:8a:02:a8:48:c1:bd:b7:cc:55:5e: ba:3a:f7:30:cb:84:79:33:26:72:df:f9:0f:16:b7: 35:82:11:5a:89:fd:b8:b2:b2:3c:fb:09:e6:0b:0a: ce:96:a0:8c:c9:33:23:08:07:00:7f:74:0c:37:96: 7e:02:e2:e3:d6:f0:9c:34:4a:b1:70:ba:ff:a7:cd: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:37:8A:91:C9:E2:DA:71:62:FD:12:CB:B9:E8:C5:9F:7F:A1:E7:AD X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b3:3c:9b:e9:39:57:73:f0:e5:7b:79:99:24:0c:a3:98:1a: c1:00:79:94:e7:79:70:5d:6e:18:7a:fa:a3:64:83:66:fd:f6: 21:0f:86:02:c5:1c:18:bb:2e:e9:21:1d:34:99:26:8a:b6:ae: dd:b9:6b:f8:00:c2:2b:bb:33:0e:ac:64:22:b6:4b:35:60:0e: ea:bd:39:43:82:ac:7d:c6:72:91:3c:b4:76:47:0f:08:57:6a: 89:88:c7:6f:8f:93:47:df:7f:a0:f3:34:28:a8:ce:be:6c:9b: 7a:6a:06:81:09:70:4c:9c:05:9b:b5:f7:d8:a1:e6:56:fe:0d: ad:e9:50:3d:71:6f:e8:72:ba:dc:7b:81:c9:33:f7:31:7d:ff: 6c:1b:d9:2b:9d:1f:58:1c:2a:4c:7e:45:fa:ed:0e:3a:49:78: f1:ef:f7:bc:52:53:b5:69:5c:78:1f:50:5d:ef:70:9f:85:09: f6:81:88:5e:f4:a6:93:5a:c5:0e:e8:90:98:bd:d7:4a:83:2f: 33:89:90:74:bc:86:02:9e:2c:96:2b:fb:68:21:5a:11:4b:83: 2b:ce:c7:52:09:d7:b1:3c:ea:28:c6:b6:c5:b5:eb:11:81:26: bb:84:1d:94:5f:bc:5b:ed:fc:10:9a:d8:8f:c3:20:01:45:d6: 98:dc:2e:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB N0QwOTNGQjkwHhcNMjUxMjA1MDQxNjQ4WhcNMjUxMjEyMDQxNjQ4WjAYMRYwFAYD VQQDEw02OTMyNWNiMC04ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1YKlP1EtO3xAqU7kScdYwsJuhW0s7ZlGqqq87GV4ekhMmh4/D47My9jPOps dJG2AgxGOlnxfl9sEjYs1rHwolDhKFGVxnzH+U9+IE/6KGm5xeRx3Cgm/tY5t85l Tm8xcwnGvGnmKnlvp+J+XWeyKD0Hd8CArRA73KGMZPViPHfh+1k/PA6IkNITo3vn J1Gy6oBRHY+pXHifOQ1Jf0yQRpayQtEdedlQM7NyFcLNSTLLbyqZqIL4Y4oCqEjB vbfMVV66Ovcwy4R5MyZy3/kPFrc1ghFaif24srI8+wnmCwrOlqCMyTMjCAcAf3QM N5Z+AuLj1vCcNEqxcLr/p83hNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA3ipHJ 4tpxYv0Sy7noxZ9/oeetMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5 MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl emVFX1hvOVo1a0duMEpQN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1szyb6TlXc/Dle3mZJAyjmBrBAHmU53lwXW4YevqjZINm/fYhD4YC xRwYuy7pIR00mSaKtq7duWv4AMIruzMOrGQitks1YA7qvTlDgqx9xnKRPLR2Rw8I V2qJiMdvj5NH33+g8zQoqM6+bJt6agaBCXBMnAWbtffYoeZW/g2t6VA9cW/ocrrc e4HJM/cxff9sG9krnR9YHCpMfkX67Q46SXjx7/e8UlO1aVx4H1Bd73CfhQn2gYhe 9KaTWsUO6JCYvddKgy8ziZB0vIYCniyWK/toIVoRS4MrzsdSCdexPOooxrbFtesR gSa7hB2UX7xb7fwQmtiPwyABRdaY3C4U -----END CERTIFICATE-----Generated at Sat Dec 6 22:09:58 2025 by rpki-client