This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json) Hash identifier: hrYMEbzHlswHhg02eRHEvnjHMvTMJGNuH2mVmCE1pVo= Subject key identifier: E4:6D:F9:9F:B5:B9:25:AC:1E:28:73:27:35:D7:C3:A1:CD:99:CA:4A Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft Manifest number: 04 Signing time: Thu 04 Dec 2025 19:57:36 +0000 Manifest this update: Thu 04 Dec 2025 19:57:36 +0000 Manifest next update: Thu 11 Dec 2025 19:57:36 +0000 Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: G+gm4j53KB3AfueW0LCZua8IDa8UssBAEYmWj3U6Pmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Validity Not Before: Dec 4 19:57:36 2025 GMT Not After : Dec 11 19:57:36 2025 GMT Subject: CN=6931e7b0-5817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:15:53:9e:b1:11:c2:7d:78:80:21:30:3d: 92:0d:b2:84:ea:75:e5:c0:c2:13:c4:23:7f:7a:07: 4f:f5:94:57:45:f7:38:dd:41:09:a6:e7:f5:fa:c9: 28:78:4f:57:11:9b:4e:59:ac:1f:d6:d4:35:0c:aa: 95:b4:bd:30:e9:d3:bd:0f:1d:99:f1:93:b4:e6:49: d1:24:13:94:ae:25:2a:20:22:0b:5b:d3:a1:d5:86: d6:73:d1:2a:b8:45:d5:11:b5:99:7c:66:69:b1:22: 36:c9:30:69:15:0b:2f:e9:9a:dc:17:19:6c:6b:6e: d1:9c:9f:4b:7e:de:b3:57:9f:81:ab:fb:e1:2d:1b: 9a:a0:53:4a:3e:0e:8d:03:f6:0a:63:e7:91:c1:b1: 44:20:38:02:2a:16:14:58:82:14:8e:7f:ca:eb:93: 6b:de:d3:2a:2a:39:74:4d:cc:d8:b7:6e:2e:88:23: 3a:3c:ad:3b:e7:c8:d9:ad:e5:05:7b:e8:e9:7b:65: b4:e5:4c:85:a2:04:ad:83:e4:ed:d1:ec:b7:4f:33: 3f:dc:9c:d5:27:84:5c:26:21:ea:52:15:3f:81:52: 03:1d:f6:74:a5:f9:ca:18:9b:24:c2:65:6d:cf:e4: ff:b1:c5:64:0d:18:c7:4a:6c:04:0a:d0:73:9e:a0: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6D:F9:9F:B5:B9:25:AC:1E:28:73:27:35:D7:C3:A1:CD:99:CA:4A X509v3 Authority Key Identifier: keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a8:60:b6:cd:79:84:c4:62:e9:95:e9:91:cc:aa:a5:57:c3: 4e:0d:fb:89:f7:b5:d4:2f:59:7d:a7:e1:cc:3d:72:9c:92:60: 50:cd:6a:c1:b7:c6:8a:a6:d1:be:b6:35:e2:49:f9:21:bd:68: 31:80:62:41:90:71:58:c7:6e:d9:89:51:be:20:2a:27:85:36: 25:8f:94:e8:94:b4:cf:a2:8f:18:08:14:66:0d:ca:8c:00:51: b0:51:74:a1:f6:6a:91:0b:e7:fa:32:c1:ba:d5:13:70:5e:e7: 7b:55:0f:a7:20:c6:a0:ff:34:2c:4a:c1:2f:41:25:da:28:80: 5f:17:80:4e:2f:25:97:80:78:89:f0:3e:8e:1e:ec:7d:e2:da: f4:22:78:c5:ce:f1:32:95:24:8b:3c:5f:e8:0b:79:3f:0c:a6: e3:61:c3:89:88:ac:de:40:9d:74:2e:24:16:81:de:62:e2:a3: f8:e1:9f:67:b5:4b:c8:41:0b:35:55:25:cf:a5:3c:da:74:35: 26:01:9a:25:b7:28:01:6d:32:ab:90:c2:f8:db:9a:fb:17:54: 90:e3:7a:81:f1:2b:ba:1b:46:d7:73:7f:9a:9e:60:1d:cc:a1: 20:7f:1c:b9:58:31:40:7e:b3:3b:06:c9:37:f9:2f:a4:3c:e4: 74:cf:76:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTREMTExMC8GA1UEBRMoQjY5NEE4QzUyOEYwQjlBNEQ0NTNCQzQ0MjBFNTBCNTE5 RENGRDBBQjAeFw0yNTEyMDQxOTU3MzZaFw0yNTEyMTExOTU3MzZaMBgxFjAUBgNV BAMTDTY5MzFlN2IwLTU4MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFghVTnrERwn14gCEwPZINsoTqdeXAwhPEI396B0/1lFdF9zjdQQmm5/X6ySh4 T1cRm05ZrB/W1DUMqpW0vTDp070PHZnxk7TmSdEkE5SuJSogIgtb06HVhtZz0Sq4 RdURtZl8ZmmxIjbJMGkVCy/pmtwXGWxrbtGcn0t+3rNXn4Gr++EtG5qgU0o+Do0D 9gpj55HBsUQgOAIqFhRYghSOf8rrk2ve0yoqOXRNzNi3bi6IIzo8rTvnyNmt5QV7 6Ol7ZbTlTIWiBK2D5O3R7LdPMz/cnNUnhFwmIepSFT+BUgMd9nSl+coYmyTCZW3P 5P+xxWQNGMdKbAQK0HOeoFp9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5G35n7W5 JaweKHMnNdfDoc2ZykowHwYDVR0jBBgwFoAUtpSoxSjwuaTUU7xEIOULUZ3P0Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NEQxLzk1MEQ3NzAyQ0U2 RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFUVVU3eEVJT1VMVVozUDBL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHBTb3hTand1YVRVVTd4RUlPVUxVWjNQMEtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NEQxLzk1MEQ3NzAyQ0U2RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFU VVU3eEVJT1VMVVozUDBLcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKoYLbNeYTEYumV6ZHMqqVXw04N+4n3tdQvWX2n4cw9cpySYFDNasG3 xoqm0b62NeJJ+SG9aDGAYkGQcVjHbtmJUb4gKieFNiWPlOiUtM+ijxgIFGYNyowA UbBRdKH2apEL5/oywbrVE3Be53tVD6cgxqD/NCxKwS9BJdoogF8XgE4vJZeAeInw Po4e7H3i2vQieMXO8TKVJIs8X+gLeT8MpuNhw4mIrN5AnXQuJBaB3mLio/jhn2e1 S8hBCzVVJc+lPNp0NSYBmiW3KAFtMquQwvjbmvsXVJDjeoHxK7obRtdzf5qeYB3M oSB/HLlYMUB+szsGyTf5L6Q85HTPdmo= -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:11 2025 by rpki-client