This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: PxsTDASYeQFfLk24vgU3uIC9X6JPisd9qkB3KmyCYHQ= Subject key identifier: C1:A5:77:17:11:10:EB:42:45:AD:42:11:74:4C:AF:96:00:21:0F:46 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 1942 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 1908 Signing time: Sat 06 Dec 2025 16:05:31 +0000 Manifest this update: Sat 06 Dec 2025 16:05:30 +0000 Manifest next update: Sat 13 Dec 2025 16:05:30 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: 5Qd46eiiQkwEKL293VLmVqoDabNes9aUuSOfg9iOLdk=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: sJTUAzwirYIZpl1wnA3/i/mf1sEf8bCtv90HcGqZGeI=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: pe46e+HZ1NfGBG2vvFXSNdvGZLyB5RzpC40D1ExEG+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6466 (0x1942) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Dec 6 16:05:30 2025 GMT Not After : Dec 13 16:05:30 2025 GMT Subject: CN=6934544a-7046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:45:77:fd:75:8a:ec:41:a3:bd:aa:bf:ee: c3:4f:6b:9a:a1:7f:81:8c:c2:c1:e7:dd:24:e8:97: 5a:f1:9c:d8:14:b6:09:31:a8:cb:0a:d0:ea:d1:63: b7:4b:f0:40:6c:0a:4a:da:96:5e:06:01:c5:d4:c1: 7f:1e:f3:47:44:0e:fc:9c:b0:72:24:cc:58:3f:80: 59:b7:55:70:7b:42:26:ec:57:cb:8d:a0:89:5c:06: 17:b9:24:69:b0:d6:2b:19:b1:43:44:8c:5a:02:6b: 21:58:ed:7e:bd:68:6e:ab:c1:e8:cc:f6:13:f7:e3: 41:1c:1f:66:de:fa:14:e9:9f:cd:62:77:be:b8:b7: 20:8b:ea:f6:f5:ad:98:17:4f:a5:df:e9:46:7f:9b: 7f:8c:7b:73:2e:bb:66:2f:9c:b9:e4:51:dd:b1:2a: d2:bc:2d:8d:03:7b:0d:23:aa:6a:95:51:7b:76:78: b6:c9:cb:36:93:ef:3a:8f:ea:d2:e4:c4:a0:7c:a4: c5:d8:b0:90:56:5c:ff:c4:88:30:38:3a:91:99:95: f5:1a:38:53:1e:f4:4b:fa:67:2e:53:c2:37:18:c6: 3a:3c:d3:8c:e2:25:06:7c:07:4e:5c:44:83:bd:a2: 4f:5c:d0:06:02:04:68:7c:77:29:ee:1a:45:76:66: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A5:77:17:11:10:EB:42:45:AD:42:11:74:4C:AF:96:00:21:0F:46 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:dd:b5:2e:17:06:8d:18:bb:28:09:ea:15:63:bf:05:ab:17: 8f:62:c9:ca:eb:36:b9:95:14:e6:a0:22:ab:0a:65:85:d3:1d: 9a:7b:90:09:7d:1e:c6:c5:e1:71:7c:fe:8f:58:ac:45:dd:36: 55:d1:a5:37:9d:3f:8c:f9:d4:89:c1:fd:e4:e0:42:a7:c9:51: 25:c4:ce:57:3e:01:c6:3a:69:a7:73:4c:b3:c8:cb:8f:c4:f6: e9:09:3f:66:97:01:56:77:a0:36:3a:cf:f6:b3:d4:ee:a4:5a: a5:55:ed:43:d3:67:a3:1d:1a:ff:58:81:ca:f5:f6:ec:7d:98: cb:22:95:aa:85:ce:6d:dc:a8:4f:32:d9:42:7a:5b:78:49:24: 98:6f:31:d3:a2:71:e6:6d:56:23:d9:a1:b4:ff:57:a5:3b:4c: 1d:a7:17:f3:c2:56:2d:3a:4d:ca:86:45:4f:e0:60:26:6d:6b: dd:fe:47:9f:41:0e:0e:17:2d:b4:dc:37:48:ad:a6:73:05:bc: 02:d4:ae:0f:99:a3:e1:5b:bf:68:84:c0:f6:bb:c6:01:9b:0e: ea:fd:0b:ea:b0:18:4a:a2:07:6c:c1:3d:ab:21:03:d2:82:e3: 76:0a:52:56:87:83:56:97:d5:61:44:e5:45:e6:db:c2:f0:08: d2:c9:cd:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUxMjA2MTYwNTMwWhcNMjUxMjEzMTYwNTMwWjAYMRYwFAYD VQQDEw02OTM0NTQ0YS03MDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq9Fd/11iuxBo72qv+7DT2uaoX+BjMLB590k6Jda8ZzYFLYJMajLCtDq0WO3 S/BAbApK2pZeBgHF1MF/HvNHRA78nLByJMxYP4BZt1Vwe0Im7FfLjaCJXAYXuSRp sNYrGbFDRIxaAmshWO1+vWhuq8HozPYT9+NBHB9m3voU6Z/NYne+uLcgi+r29a2Y F0+l3+lGf5t/jHtzLrtmL5y55FHdsSrSvC2NA3sNI6pqlVF7dni2ycs2k+86j+rS 5MSgfKTF2LCQVlz/xIgwODqRmZX1GjhTHvRL+mcuU8I3GMY6PNOM4iUGfAdOXESD vaJPXNAGAgRofHcp7hpFdmZ8oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGldxcR EOtCRa1CEXRMr5YAIQ9GMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa3bUuFwaNGLsoCeoVY78FqxePYsnK6za5lRTmoCKrCmWF0x2ae5AJ fR7GxeFxfP6PWKxF3TZV0aU3nT+M+dSJwf3k4EKnyVElxM5XPgHGOmmnc0yzyMuP xPbpCT9mlwFWd6A2Os/2s9TupFqlVe1D02ejHRr/WIHK9fbsfZjLIpWqhc5t3KhP MtlCelt4SSSYbzHTonHmbVYj2aG0/1elO0wdpxfzwlYtOk3KhkVP4GAmbWvd/kef QQ4OFy203DdIraZzBbwC1K4PmaPhW79ohMD2u8YBmw7q/QvqsBhKogdswT2rIQPS guN2ClJWh4NWl9VhROVF5tvC8AjSyc2q -----END CERTIFICATE-----Generated at Sun Dec 7 02:56:59 2025 by rpki-client