This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: OrdvTim3TrUGjswCc9NUGpmj5O7GuSJWC1g/ZzAI1SE= Subject key identifier: DB:F1:21:9E:3D:27:F8:FD:9E:20:C6:FF:FC:6D:5A:C7:19:B1:35:37 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C3F Signing time: Sat 06 Dec 2025 18:03:24 +0000 Manifest this update: Sat 06 Dec 2025 18:03:23 +0000 Manifest next update: Sat 13 Dec 2025 18:03:23 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: 5oWuFEhumOrhkei8aRbfgMfoJ6wU2Tvp3L+qtDybbQg=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nfqNeR+bbEfavJF+ova8yLO5QWoKeC1GYyFqfwg0csE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Dec 6 18:03:23 2025 GMT Not After : Dec 13 18:03:23 2025 GMT Subject: CN=69346fec-6277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:48:3f:cd:f4:79:b9:ba:f2:a4:db:0e:db: 40:2f:80:e1:e3:35:c7:aa:4c:53:51:38:5f:5b:61: 4c:5d:b3:6b:a8:b4:0c:e0:52:19:3a:33:67:56:e7: 7e:45:8b:2d:43:af:8b:6a:a2:76:db:28:7f:11:b1: bb:00:9f:e1:58:c2:0c:81:4b:f5:39:38:e0:73:bf: db:05:b9:cc:60:bf:d0:ff:8f:77:cc:d5:3a:ee:8b: ac:e3:f3:0c:83:51:5c:ac:70:8f:b6:d8:9c:b8:8d: 52:75:cd:1a:bd:af:6d:ad:34:f2:0a:d7:b9:0e:ed: 33:fb:00:bc:a0:62:ba:f8:5c:11:fa:fc:df:8d:12: 9e:29:f9:7a:d2:93:91:41:e4:e4:2b:3a:b5:65:7d: 8e:ee:bb:5e:57:18:ae:8d:12:eb:d4:49:38:ef:22: 86:a6:e1:7b:f3:15:5a:02:24:e6:9d:ac:a1:0a:9a: 05:a2:18:e8:6b:f1:18:51:a7:9a:05:94:1a:d1:83: 67:28:3f:ec:e5:5f:56:12:07:3f:d9:17:7c:d1:53: d9:13:73:e2:42:10:eb:e3:37:37:9c:74:05:b4:e5: 52:cd:7d:75:ec:f7:5e:e3:80:6d:70:b2:32:42:7b: cd:37:20:6a:aa:8e:4b:b7:74:19:af:4a:77:37:0e: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:21:9E:3D:27:F8:FD:9E:20:C6:FF:FC:6D:5A:C7:19:B1:35:37 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f8:f0:7c:94:39:9b:61:60:20:29:0e:cc:63:eb:02:df:f1: 06:95:ff:89:e6:b4:96:fb:e0:bb:eb:8c:63:46:ba:f3:34:b9: a1:a4:a4:92:9e:fd:ad:db:08:4d:7d:9a:eb:15:ed:a6:3e:f9: 17:36:51:bb:c2:82:4a:8a:36:e0:20:93:37:49:46:77:85:1a: 2b:10:5d:62:a7:82:6a:5d:be:73:97:43:45:fa:0a:0e:84:bf: a2:8b:bb:69:1e:a5:e6:f8:9f:46:bd:e6:32:4b:01:d6:0d:7d: 72:2c:08:6d:17:a3:ba:3a:b0:f9:c4:2e:81:98:f6:6e:fd:4d: 45:3e:fd:95:96:b3:6c:ac:fe:41:09:48:b9:b2:84:48:9f:c8: c6:da:0b:a4:5d:64:a4:4f:56:9f:2c:b1:d4:d6:10:43:76:cb: 68:14:13:74:7a:6f:88:8c:0b:f6:50:2e:82:30:b9:a4:65:ef: 1f:5a:ee:22:fb:fa:3b:35:16:bd:a1:ef:ba:bc:13:bd:ab:dd: 1b:b0:11:bc:94:a0:5b:72:15:b4:de:ea:74:0c:90:de:33:ac: ba:7e:e4:cf:08:a0:15:3e:d9:f3:17:ac:65:80:a9:4f:34:1d: b2:24:df:e7:14:99:fe:23:d7:cc:db:14:bb:80:f3:47:5f:b6: 96:66:7e:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUxMjA2MTgwMzIzWhcNMjUxMjEzMTgwMzIzWjAYMRYwFAYD VQQDEw02OTM0NmZlYy02Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvRIP830ebm68qTbDttAL4Dh4zXHqkxTUThfW2FMXbNrqLQM4FIZOjNnVud+ RYstQ6+LaqJ22yh/EbG7AJ/hWMIMgUv1OTjgc7/bBbnMYL/Q/493zNU67ous4/MM g1FcrHCPtticuI1Sdc0ava9trTTyCte5Du0z+wC8oGK6+FwR+vzfjRKeKfl60pOR QeTkKzq1ZX2O7rteVxiujRLr1Ek47yKGpuF78xVaAiTmnayhCpoFohjoa/EYUaea BZQa0YNnKD/s5V9WEgc/2Rd80VPZE3PiQhDr4zc3nHQFtOVSzX117Pde44BtcLIy QnvNNyBqqo5Lt3QZr0p3Nw5YzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvxIZ49 J/j9niDG//xtWscZsTU3MB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK+PB8lDmbYWAgKQ7MY+sC3/EGlf+J5rSW++C764xjRrrzNLmhpKSS nv2t2whNfZrrFe2mPvkXNlG7woJKijbgIJM3SUZ3hRorEF1ip4JqXb5zl0NF+goO hL+ii7tpHqXm+J9GveYySwHWDX1yLAhtF6O6OrD5xC6BmPZu/U1FPv2VlrNsrP5B CUi5soRIn8jG2gukXWSkT1afLLHU1hBDdstoFBN0em+IjAv2UC6CMLmkZe8fWu4i +/o7NRa9oe+6vBO9q90bsBG8lKBbchW03up0DJDeM6y6fuTPCKAVPtnzF6xlgKlP NB2yJN/nFJn+I9fM2xS7gPNHX7aWZn4Y -----END CERTIFICATE-----Generated at Sun Dec 7 12:59:23 2025 by rpki-client