This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft File: tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft (raw, json) Hash identifier: rO210Nx+wR9ZaE5uXHFHDLdlAxK6Tjl8WFWOhulV8ws= Subject key identifier: 88:84:94:C0:7D:37:6F:47:CC:75:6C:64:50:19:29:79:E4:77:0E:7C Authority key identifier: B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 Certificate issuer: /CN=A91758EC/serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft Manifest number: 48 Signing time: Fri 05 Dec 2025 05:14:06 +0000 Manifest this update: Fri 05 Dec 2025 05:14:05 +0000 Manifest next update: Fri 12 Dec 2025 05:14:05 +0000 Files and hashes: 1: tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl (hash: AkWqQxtw19Lrpsz/q2FQCWLBd5QHTLHUSINJOsKg3MM=) 2: F8160AD86E1C11F0A9381E85C4F9AE02.roa (hash: C6WLz8pg0rqM3qeZ+YC0BJ8jpvArrDDfO+jGLc5bHSQ=) 3: F88DC2766E1C11F0A9381E85C4F9AE02.roa (hash: i6WXTIBGM94y1QaV3vi+ZNcgxl/9nWzNVLRTa2F/avU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758EC, serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Validity Not Before: Dec 5 05:14:05 2025 GMT Not After : Dec 12 05:14:05 2025 GMT Subject: CN=69326a1d-3e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:9b:d2:47:db:e5:07:88:a3:58:c2:6a:9e: 52:d1:8f:19:5a:0d:d4:0e:fb:6e:08:42:ab:d1:75: 81:ae:48:02:eb:d5:82:9b:02:43:01:07:fe:82:f4: 7f:ee:28:19:46:d8:41:ac:e8:7e:cb:7a:80:8a:c6: de:29:3e:27:37:ba:f4:13:59:b8:5e:d5:e2:c8:eb: ab:f7:e6:5a:37:93:38:73:b1:ca:39:07:f4:86:00: 41:11:65:8b:47:fa:19:14:27:1d:e4:92:e4:75:e5: b5:ad:22:0f:ad:7c:33:1e:fa:ed:fc:1a:ed:2d:0c: 2a:81:4c:39:fe:6d:82:9e:9e:25:d8:58:63:f7:5c: f2:b6:c6:d2:0b:62:03:2f:d3:fc:26:40:97:71:a0: 8f:9c:a2:6c:fe:49:01:1a:c3:67:0e:83:ab:38:72: c1:22:79:ba:c3:72:67:c6:6e:4c:de:f0:a7:a0:33: dd:9e:98:27:47:16:fc:ab:0b:ce:a5:9e:3b:b9:e9: 52:ff:0b:57:9c:0f:d0:c3:ff:88:f6:62:08:87:19: 01:e7:b6:d1:b2:bd:9c:fc:4a:9d:c5:c0:48:e0:e0: fe:1f:3b:af:5e:96:ee:fc:9b:77:4c:bb:eb:78:6b: 7a:f1:fe:7a:e1:74:65:0f:62:07:03:0a:12:7e:84: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:84:94:C0:7D:37:6F:47:CC:75:6C:64:50:19:29:79:E4:77:0E:7C X509v3 Authority Key Identifier: keyid:B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bc:1c:c1:44:c6:8e:c4:52:9c:64:18:00:8f:ea:9d:6b:07: 00:f7:22:b5:d7:d7:79:73:96:08:1a:11:55:c4:f3:4c:ea:9a: 61:1c:54:02:bb:fb:15:b3:04:13:5d:63:d2:ec:88:0a:78:43: d4:cf:c7:f2:62:f3:76:6d:90:24:09:3f:47:92:cd:da:cf:59: d8:f2:e6:d2:cd:85:fd:76:ca:77:86:f7:0e:b1:95:40:a5:bd: 6c:88:f7:c0:f8:1a:b2:28:12:10:85:78:68:15:af:3e:ca:e9: af:01:c4:11:e4:8f:60:88:59:bc:f1:70:4a:32:34:13:a0:ae: d1:a4:4c:da:48:5f:51:75:2d:09:4e:32:c2:19:de:5d:e2:0f: 4f:d0:8e:6f:22:10:3a:28:3a:48:d5:9a:87:a7:3c:a3:35:5a: 50:e3:7b:52:56:bc:55:4c:e8:0f:2f:66:67:68:61:25:a3:e1: 1a:3a:11:ae:01:56:d7:39:59:7a:eb:ce:96:a6:d5:bb:ba:7b: db:ff:7c:d8:50:c5:1b:d7:0f:4a:3c:5c:42:27:d3:62:bc:bc: 75:c0:37:f2:22:e2:dd:42:e8:0d:0c:9c:ed:d4:ff:ec:84:5e: ba:a5:3f:f5:bb:00:7a:3a:b7:c3:8d:d1:05:a1:83:19:e2:ed: 24:82:8c:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NThFQzExMC8GA1UEBRMoQjZGQjA3RTAzOERFRjA2QzgyMEJDNkNEMjAzNTE0NTU0 RDY0M0Q2ODAeFw0yNTEyMDUwNTE0MDVaFw0yNTEyMTIwNTE0MDVaMBgxFjAUBgNV BAMTDTY5MzI2YTFkLTNlNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjZpvSR9vlB4ijWMJqnlLRjxlaDdQO+24IQqvRdYGuSALr1YKbAkMBB/6C9H/u KBlG2EGs6H7LeoCKxt4pPic3uvQTWbhe1eLI66v35lo3kzhzsco5B/SGAEERZYtH +hkUJx3kkuR15bWtIg+tfDMe+u38Gu0tDCqBTDn+bYKeniXYWGP3XPK2xtILYgMv 0/wmQJdxoI+comz+SQEaw2cOg6s4csEiebrDcmfGbkze8KegM92emCdHFvyrC86l nju56VL/C1ecD9DD/4j2YgiHGQHnttGyvZz8Sp3FwEjg4P4fO69elu78m3dMu+t4 a3rx/nrhdGUPYgcDChJ+hI6HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiISUwH03 b0fMdWxkUBkpeeR3DnwwHwYDVR0jBBgwFoAUtvsH4Dje8GyCC8bNIDUUVU1kPWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OEVDLzc0RDM1ODQwNjYz MDExRjBCOURDNEU2NEM0RjlBRTAyL3R2c0g0RGplOEd5Q0M4Yk5JRFVVVlUxa1BX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHZzSDREamU4R3lDQzhiTklEVVVWVTFrUFdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OEVDLzc0RDM1ODQwNjYzMDExRjBCOURDNEU2NEM0RjlBRTAyL3R2c0g0RGplOEd5 Q0M4Yk5JRFVVVlUxa1BXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABC8HMFExo7EUpxkGACP6p1rBwD3IrXX13lzlggaEVXE80zqmmEcVAK7 +xWzBBNdY9LsiAp4Q9TPx/Ji83ZtkCQJP0eSzdrPWdjy5tLNhf12yneG9w6xlUCl vWyI98D4GrIoEhCFeGgVrz7K6a8BxBHkj2CIWbzxcEoyNBOgrtGkTNpIX1F1LQlO MsIZ3l3iD0/Qjm8iEDooOkjVmoenPKM1WlDje1JWvFVM6A8vZmdoYSWj4Ro6Ea4B Vtc5WXrrzpam1bu6e9v/fNhQxRvXD0o8XEIn02K8vHXAN/Ii4t1C6A0MnO3U/+yE XrqlP/W7AHo6t8ON0QWhgxni7SSCjN0= -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:33 2025 by rpki-client