This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json) Hash identifier: RUQ5aHdjf/cJ/kQalO5oHpwgumyKfa2Aujju1GjR8Zk= Subject key identifier: 99:67:7A:73:6D:D3:28:C3:66:18:33:41:E3:9B:54:68:0E:12:12:8A Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft Manifest number: 4A Signing time: Fri 05 Dec 2025 05:12:42 +0000 Manifest this update: Fri 05 Dec 2025 05:12:42 +0000 Manifest next update: Fri 12 Dec 2025 05:12:42 +0000 Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: hLSD8rxjCyerwRGYmTjRnKsj/JvfuDRP87JMhtDgBHU=) 2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: n1d9JBQkYzZszHXWzHvHiVJmG5oLenIhoEtEgvVSpN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Validity Not Before: Dec 5 05:12:42 2025 GMT Not After : Dec 12 05:12:42 2025 GMT Subject: CN=693269ca-b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:88:1e:8c:61:c1:84:48:61:c0:66:4a:98: dc:79:fd:00:d2:39:92:9d:3a:59:9e:d5:e3:1f:36: d3:60:06:d4:2a:71:55:84:9f:a7:d5:b7:fe:89:ea: 8c:71:8a:f0:94:38:ea:0b:ab:d5:34:ca:0c:5e:51: 0e:32:7d:73:c5:b7:32:af:b7:9b:67:eb:66:ae:d7: 4b:eb:98:f7:4e:2f:6e:b1:bb:20:5e:79:29:b1:07: 99:5d:93:b1:22:fd:8b:c3:45:4c:b2:c3:2a:7c:57: 69:fc:0b:54:60:54:08:5b:9b:a1:99:16:a7:3b:b1: 75:f6:7d:23:0c:e3:c3:6a:13:25:8c:59:35:9a:b5: 89:a8:d7:10:36:dd:a6:53:92:c0:f0:3b:f2:2f:4b: 1e:4c:07:9a:46:f1:e2:11:ba:e6:f4:b8:6b:ca:24: 49:63:f8:4a:3c:88:5c:b2:75:bc:29:ab:bc:cf:97: d3:af:5e:43:ad:e8:fc:94:de:e7:d7:8e:95:18:0f: 32:b1:2e:76:ae:37:c6:17:0b:9d:3c:34:49:83:90: 00:b1:dd:3e:13:2d:40:26:18:03:67:ba:14:8b:d3: 09:62:de:e9:bd:64:75:44:e8:0d:c4:ad:df:8d:84: a0:3b:ea:7f:4c:f8:8a:52:9d:54:ab:69:fd:d9:b5: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:7A:73:6D:D3:28:C3:66:18:33:41:E3:9B:54:68:0E:12:12:8A X509v3 Authority Key Identifier: keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:04:ac:09:f2:75:ca:e9:f0:80:39:68:84:d7:bc:e9:82:69: bf:03:cd:a2:04:44:4e:44:8c:c3:77:0d:2c:95:b6:f1:ab:45: d2:11:68:4d:1b:d0:1f:e4:e4:46:7d:a3:83:c1:3a:1b:e9:be: ce:ba:19:21:00:b5:e1:65:e1:90:fe:ac:4a:93:a5:85:84:3f: 3a:da:f5:99:ad:db:e7:9b:27:0b:14:3b:b1:f3:5c:71:b9:cc: 65:c4:52:bd:37:2c:6b:2b:bc:42:e6:b7:99:5b:f3:35:ac:eb: 30:8a:8c:15:1e:9e:fc:7c:ba:7a:27:af:4b:3d:cb:fc:c5:27: ec:25:ae:31:a7:49:d2:c6:81:78:35:4d:20:9e:f6:f7:3d:da: df:78:6e:24:12:cc:87:7f:d1:87:80:87:23:fa:21:77:a2:43: 5b:c2:d6:85:58:ee:5b:cc:0b:d3:5f:73:e1:43:f0:ee:ef:57: 81:da:20:38:64:41:fb:5f:f1:04:8e:63:69:43:b2:b9:ec:42: 9f:de:7c:a7:a4:e5:3e:60:ba:ee:67:83:ff:17:3e:04:e5:cf: b2:6d:90:aa:92:33:dd:28:95:60:1b:28:e2:ab:26:f5:12:a7: fc:7f:cc:2b:dd:9c:43:06:05:15:ac:97:f8:65:e7:9e:75:8d: fa:e7:4b:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoNEQ4RjU4MEM4RjU3NTk0NjdEQjhFQTBGMDhDMzExQTk2 RDNCM0ZCQjAeFw0yNTEyMDUwNTEyNDJaFw0yNTEyMTIwNTEyNDJaMBgxFjAUBgNV BAMTDTY5MzI2OWNhLWI3MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqyIgejGHBhEhhwGZKmNx5/QDSOZKdOlme1eMfNtNgBtQqcVWEn6fVt/6J6oxx ivCUOOoLq9U0ygxeUQ4yfXPFtzKvt5tn62au10vrmPdOL26xuyBeeSmxB5ldk7Ei /YvDRUyywyp8V2n8C1RgVAhbm6GZFqc7sXX2fSMM48NqEyWMWTWatYmo1xA23aZT ksDwO/IvSx5MB5pG8eIRuub0uGvKJElj+Eo8iFyydbwpq7zPl9OvXkOt6PyU3ufX jpUYDzKxLnauN8YXC508NEmDkACx3T4TLUAmGANnuhSL0wli3um9ZHVE6A3Erd+N hKA76n9M+IpSnVSraf3ZtXTLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmWd6c23T KMNmGDNB45tUaA4SEoowHwYDVR0jBBgwFoAUTY9YDI9XWUZ9uOoPCMMRqW07P7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzVCQjA3NDNDNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1VaOXVPb1BDTU1ScVcwN1A3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFk5WURJOVhXVVo5dU9vUENNTVJxVzA3UDdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzVCQjA3NDNDNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1Va OXVPb1BDTU1ScVcwN1A3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8ErAnydcrp8IA5aITXvOmCab8DzaIERE5EjMN3DSyVtvGrRdIRaE0b 0B/k5EZ9o4PBOhvpvs66GSEAteFl4ZD+rEqTpYWEPzra9Zmt2+ebJwsUO7HzXHG5 zGXEUr03LGsrvELmt5lb8zWs6zCKjBUenvx8unonr0s9y/zFJ+wlrjGnSdLGgXg1 TSCe9vc92t94biQSzId/0YeAhyP6IXeiQ1vC1oVY7lvMC9Nfc+FD8O7vV4HaIDhk Qftf8QSOY2lDsrnsQp/efKek5T5guu5ng/8XPgTlz7JtkKqSM90olWAbKOKrJvUS p/x/zCvdnEMGBRWsl/hl5551jfrnSxk= -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:50 2025 by rpki-client