This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: YhVCifAxtLfiLQdILwRipgqSDpmGoAr5amKq7mtZrrQ= Subject key identifier: B3:88:13:7D:11:12:36:E3:92:F3:74:6B:89:63:90:D4:20:F4:DF:7B Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A71 Signing time: Sat 06 Dec 2025 18:50:57 +0000 Manifest this update: Sat 06 Dec 2025 18:50:57 +0000 Manifest next update: Sat 13 Dec 2025 18:50:57 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: Jnw0JIUF+nQBRiV3UyWxbkbFMWgdsE8+t+zAn6RS+ZA=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: ojzFvMsiRonOZ+xCsta/hhoUMpbqKKfUmVfepQYjpIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2681 (0xa79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Dec 6 18:50:57 2025 GMT Not After : Dec 13 18:50:57 2025 GMT Subject: CN=69347b11-319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:56:fb:0a:e0:5b:92:a2:d3:23:1f:73:a5: ec:59:9c:89:d2:f2:7f:33:90:81:43:a8:cf:d9:d4: f3:d0:e4:28:6c:f4:2a:02:92:d5:70:a0:55:ef:2d: 5c:29:70:f8:bb:52:5d:90:4c:5b:28:f2:23:57:56: a7:5b:2b:67:64:a4:c3:73:5f:cf:5b:aa:50:76:88: f8:2e:73:9f:df:78:d8:a5:a8:b1:69:e5:50:a0:f2: 4e:11:9c:b5:6c:83:82:eb:43:86:e1:40:d3:c8:7f: 3b:e6:f5:ab:42:15:1f:67:67:87:84:d9:e1:11:8e: ac:7c:78:5c:6a:3c:3f:a4:6e:ab:2b:f2:29:a6:57: f9:34:60:f9:6b:4c:a1:d0:e1:be:ca:a9:8d:75:5c: a3:cc:99:f8:10:10:64:fe:b8:7c:c2:9a:f6:d0:b6: c7:8e:6d:c0:f0:b2:11:c6:1b:a2:7e:6e:bb:59:9f: 48:b5:e0:45:4a:7b:04:e0:42:5e:8b:8d:b9:70:10: 58:c6:5b:3e:3e:85:da:80:37:3a:c3:fb:d9:8f:a5: 35:09:e8:c9:2a:e7:54:d7:22:42:c1:56:a3:61:c5: 28:64:63:36:8d:5b:ee:01:5a:7f:cd:bb:4c:77:82: 68:7c:79:21:3e:36:5b:93:69:f8:e7:a2:bb:e7:b6: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:13:7D:11:12:36:E3:92:F3:74:6B:89:63:90:D4:20:F4:DF:7B X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2b:d9:c9:2c:4a:73:9e:92:bf:32:b4:06:c1:86:e6:51:be: 83:d2:1d:32:1e:06:66:21:0f:27:18:08:71:8c:07:7b:59:47: aa:f2:8d:32:07:37:fa:69:3c:db:52:c3:bb:87:4f:19:51:ed: 92:4f:60:16:7e:90:b3:36:47:6d:60:cd:1c:30:f8:7e:6e:38: c7:c7:5a:db:27:79:4e:95:b9:5c:ca:0b:2d:1c:d4:30:8e:a2: 9e:f8:6e:11:f3:35:0f:f5:44:f5:04:06:7e:22:27:db:ad:f0: 09:66:fd:17:22:19:48:bb:b8:81:51:02:8a:7b:a3:fc:0c:8e: c5:12:b5:80:fa:0d:f5:00:a9:cb:89:66:7b:63:12:f2:3a:b5: 42:cd:7c:f0:96:c9:9b:41:8a:24:13:66:cc:e5:49:43:73:5c: e4:f4:92:af:f3:3d:a4:79:8c:ba:a3:f9:48:5d:d7:bc:0c:6b: c1:3b:df:87:d3:bb:68:6a:b1:45:14:63:6f:cf:df:d6:19:a0: d1:36:ce:79:bd:bf:50:4f:00:cc:29:c2:19:0f:e4:c5:e3:01: 7d:36:6b:dd:f1:eb:c9:0f:28:cb:c1:dd:78:5b:08:94:0f:8f: dd:44:25:2d:36:ef:3b:03:57:61:c7:bb:49:3f:8e:28:d3:81: e4:e3:8e:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUxMjA2MTg1MDU3WhcNMjUxMjEzMTg1MDU3WjAYMRYwFAYD VQQDEw02OTM0N2IxMS0zMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuW5W+wrgW5Ki0yMfc6XsWZyJ0vJ/M5CBQ6jP2dTz0OQobPQqApLVcKBV7y1c KXD4u1JdkExbKPIjV1anWytnZKTDc1/PW6pQdoj4LnOf33jYpaixaeVQoPJOEZy1 bIOC60OG4UDTyH875vWrQhUfZ2eHhNnhEY6sfHhcajw/pG6rK/Ipplf5NGD5a0yh 0OG+yqmNdVyjzJn4EBBk/rh8wpr20LbHjm3A8LIRxhuifm67WZ9IteBFSnsE4EJe i425cBBYxls+PoXagDc6w/vZj6U1CejJKudU1yJCwVajYcUoZGM2jVvuAVp/zbtM d4JofHkhPjZbk2n456K757ZMxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOIE30R EjbjkvN0a4ljkNQg9N97MB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApK9nJLEpznpK/MrQGwYbmUb6D0h0yHgZmIQ8nGAhxjAd7WUeq8o0y Bzf6aTzbUsO7h08ZUe2ST2AWfpCzNkdtYM0cMPh+bjjHx1rbJ3lOlblcygstHNQw jqKe+G4R8zUP9UT1BAZ+IifbrfAJZv0XIhlIu7iBUQKKe6P8DI7FErWA+g31AKnL iWZ7YxLyOrVCzXzwlsmbQYokE2bM5UlDc1zk9JKv8z2keYy6o/lIXde8DGvBO9+H 07toarFFFGNvz9/WGaDRNs55vb9QTwDMKcIZD+TF4wF9Nmvd8evJDyjLwd14WwiU D4/dRCUtNu87A1dhx7tJP44o04Hk445j -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:14 2025 by rpki-client