This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: +UeYrr8Yi3NU10+D1k4g4ryAoS9ZM4zB045Scu+6ZQM= Subject key identifier: 43:9D:EF:09:DE:95:A7:C7:E2:67:BD:D6:94:84:B5:02:B3:F8:DE:C1 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 091E Signing time: Thu 04 Dec 2025 19:27:27 +0000 Manifest this update: Thu 04 Dec 2025 19:27:27 +0000 Manifest next update: Thu 11 Dec 2025 19:27:27 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: GEhhFLKFWOu1Fq1wf7BEkCzB5wg90OMDsAIYlI+BFh8=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Dec 4 19:27:27 2025 GMT Not After : Dec 11 19:27:27 2025 GMT Subject: CN=6931e09f-b9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:a9:7e:67:7d:ff:ae:38:05:c9:86:9b:c3: c8:49:b0:93:c1:c0:b6:8d:5b:d1:5e:b2:d0:21:11: 4b:f3:13:7a:2e:ed:3d:87:7a:98:56:be:48:2b:91: 03:98:a5:a6:a6:39:d1:a3:37:4f:d8:8b:42:81:5f: ca:4b:f2:f3:10:b6:01:3a:54:87:78:c3:2c:cd:3b: 7d:db:dc:51:d5:a9:41:48:18:81:f3:0e:c1:38:8f: 43:6f:26:38:be:dd:3c:a7:96:f0:0c:2f:ca:a2:49: 3b:4d:77:bb:3d:5a:dc:fd:43:a1:a8:7a:45:88:33: c1:cd:33:aa:3e:cb:21:c1:3e:3e:18:03:6c:78:22: f3:cf:5e:7f:52:67:00:bc:ef:6e:e8:aa:c4:cb:35: 43:2c:20:93:e9:08:19:e1:56:4b:5a:74:0f:9e:9e: e1:50:3c:8c:fe:03:ea:50:30:45:d5:4d:ee:1b:d9: 55:2e:b1:8f:93:ef:ab:c4:05:19:8c:08:59:c8:32: f6:75:2c:7a:ad:f8:78:9b:81:22:bc:92:e4:a8:5f: 6e:39:a1:ca:b2:3d:fb:2b:41:27:dd:18:3a:c1:95: 22:ae:b0:a1:51:71:a3:a3:68:a6:a2:67:23:e6:53: 33:02:42:05:8b:b8:85:87:fb:2a:4d:08:95:2a:b8: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9D:EF:09:DE:95:A7:C7:E2:67:BD:D6:94:84:B5:02:B3:F8:DE:C1 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8b:d4:cf:23:be:22:52:43:be:9a:fa:8b:e8:83:3e:4b:e6: 3f:b5:49:6f:f5:64:5d:ce:5d:8e:e5:6d:ad:c1:4d:30:8b:5d: b1:35:f9:f5:02:91:88:68:26:db:51:a1:d4:f0:cd:8f:e4:9c: 6e:e1:fe:f2:d1:be:04:a2:09:74:68:5f:cb:cd:89:b8:41:a5: db:9e:b5:7d:75:53:5b:4f:54:83:69:d4:b8:11:81:38:4f:8a: cf:58:de:46:31:7e:70:18:11:eb:da:f3:44:8b:ff:c6:e5:5b: 5b:0d:de:38:e7:b5:81:8e:d0:b7:6c:c2:ed:7b:76:40:8b:b1: cc:33:c3:e8:00:c5:31:7e:94:56:92:5c:00:12:e8:99:d5:c3: 72:aa:1a:0e:60:6a:81:3f:18:00:d0:69:00:4f:d0:2b:fe:04: 8c:ca:fe:20:99:c6:58:99:10:88:62:1d:d7:cf:36:1b:3f:0c: 1e:82:58:26:e5:c5:dc:4c:25:71:af:4e:56:54:96:8b:b1:04: cd:71:41:af:a6:02:b1:80:af:8e:dc:d2:44:94:9b:13:39:0c: a8:41:db:8a:c6:8b:8b:56:90:61:0d:36:12:8f:44:8a:ab:e7: 77:58:ad:d7:a6:04:e2:c2:8b:b4:1d:78:f3:6f:52:01:f6:9d: d6:0b:21:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUxMjA0MTkyNzI3WhcNMjUxMjExMTkyNzI3WjAYMRYwFAYD VQQDEw02OTMxZTA5Zi1iOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2C2pfmd9/644BcmGm8PISbCTwcC2jVvRXrLQIRFL8xN6Lu09h3qYVr5IK5ED mKWmpjnRozdP2ItCgV/KS/LzELYBOlSHeMMszTt929xR1alBSBiB8w7BOI9DbyY4 vt08p5bwDC/Kokk7TXe7PVrc/UOhqHpFiDPBzTOqPsshwT4+GANseCLzz15/UmcA vO9u6KrEyzVDLCCT6QgZ4VZLWnQPnp7hUDyM/gPqUDBF1U3uG9lVLrGPk++rxAUZ jAhZyDL2dSx6rfh4m4EivJLkqF9uOaHKsj37K0En3Rg6wZUirrChUXGjo2imomcj 5lMzAkIFi7iFh/sqTQiVKrjwRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOd7wne lafH4me91pSEtQKz+N7BMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOi9TPI74iUkO+mvqL6IM+S+Y/tUlv9WRdzl2O5W2twU0wi12xNfn1 ApGIaCbbUaHU8M2P5Jxu4f7y0b4Eogl0aF/LzYm4QaXbnrV9dVNbT1SDadS4EYE4 T4rPWN5GMX5wGBHr2vNEi//G5VtbDd4457WBjtC3bMLte3ZAi7HMM8PoAMUxfpRW klwAEuiZ1cNyqhoOYGqBPxgA0GkAT9Ar/gSMyv4gmcZYmRCIYh3XzzYbPwweglgm 5cXcTCVxr05WVJaLsQTNcUGvpgKxgK+O3NJElJsTOQyoQduKxouLVpBhDTYSj0SK q+d3WK3XpgTiwou0HXjzb1IB9p3WCyF/ -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:13 2025 by rpki-client