This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: YLuamEXObSzGLJIYeFw762o1Lu1SmUea9kRbsff5qq0= Subject key identifier: FC:3F:CE:1C:70:6A:16:82:CC:5D:69:A5:C0:29:17:FB:60:88:39:6A Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: EC Signing time: Fri 05 Dec 2025 03:22:58 +0000 Manifest this update: Fri 05 Dec 2025 03:22:58 +0000 Manifest next update: Fri 12 Dec 2025 03:22:58 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: gwDOEgAl0pJbOK80S7dWO+hOc5VtDsf3XJvqilrOKMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Dec 5 03:22:58 2025 GMT Not After : Dec 12 03:22:58 2025 GMT Subject: CN=69325012-33e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:4a:37:93:e9:d5:d1:3a:02:78:cd:29:b9: 2e:6b:98:eb:50:43:99:c5:35:ec:07:ce:af:18:3f: 18:5a:1b:72:72:38:de:a9:81:f1:77:b2:1a:7e:68: c8:ec:3c:b8:49:51:86:23:aa:df:5c:11:9f:53:8b: 0a:dc:ef:b9:78:cc:d8:d6:64:bf:53:de:8a:78:0a: b2:fc:42:0c:61:e1:0f:03:da:3d:38:5e:c3:56:86: 33:c1:c2:18:24:9c:59:d5:48:34:56:8c:3d:13:ab: 5a:78:6e:ed:ab:0c:12:a7:1d:5f:10:5c:8f:05:5a: 09:8b:2f:9b:3a:49:8c:c9:4c:4f:f0:c5:83:9a:03: cd:72:8c:44:90:5c:96:ab:6e:fa:9b:81:0b:a5:8c: c6:ec:c2:a7:41:c8:67:0a:48:1f:58:48:20:fa:06: 9b:85:db:a4:2a:3d:77:0f:02:fe:d8:04:1f:81:33: 61:21:d8:e9:6a:5d:3e:1c:a7:41:d4:a3:a6:60:29: ad:f6:78:ac:c5:ed:24:59:b7:09:11:5c:3e:0a:dc: b7:18:5d:f1:75:11:e1:d1:80:93:e6:a3:00:b9:2d: 98:3b:c8:aa:7c:98:13:c2:23:a1:ff:5d:d3:64:c5: 06:98:ae:ef:45:32:1e:ae:4f:c4:78:a7:68:b7:d4: ad:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3F:CE:1C:70:6A:16:82:CC:5D:69:A5:C0:29:17:FB:60:88:39:6A X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0d:24:ec:1a:65:83:3b:ae:01:5f:b9:35:a8:69:a9:85:a7: 54:74:0e:0d:bd:e2:82:e7:5a:9b:97:fb:59:06:7b:1e:b9:cf: 86:c8:69:07:32:37:40:fe:1c:53:b0:61:54:cb:50:bb:f1:8a: 78:96:18:94:e8:fc:41:52:8d:0c:6d:af:45:97:cd:4c:50:b0: 02:c7:e8:b8:83:2e:62:dc:d1:63:7d:fd:ba:f7:9f:27:87:a0: 33:74:6e:b3:dd:eb:62:7d:58:0b:9d:96:12:35:77:ed:d0:0f: 4c:f9:24:e9:19:8f:25:bc:91:ca:f0:39:99:21:cb:49:b8:1b: 22:74:2f:00:8c:b0:fd:4a:f3:7f:45:07:de:1c:78:37:d1:e8: 71:43:db:f8:16:4b:42:c0:1f:3c:76:e5:a1:84:e5:bd:d8:20: af:a6:6a:6b:36:66:c9:20:b8:5b:91:82:70:b7:ab:bd:44:59: c3:38:bf:4e:5f:c1:0d:31:95:8d:ba:1f:a1:9c:f1:da:f6:d5: 5f:6b:07:ea:e2:64:77:77:d0:c1:4b:9e:4c:b6:f5:42:c8:9f: 56:a2:66:0d:d1:e7:dd:02:6f:38:8a:c9:d3:5d:da:30:86:50: 88:aa:c2:fe:83:dd:96:55:bf:49:16:e3:7d:3b:13:e9:81:d6: 3e:bf:a2:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjUxMjA1MDMyMjU4WhcNMjUxMjEyMDMyMjU4WjAYMRYwFAYD VQQDEw02OTMyNTAxMi0zM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKVKN5Pp1dE6AnjNKbkua5jrUEOZxTXsB86vGD8YWhtycjjeqYHxd7IafmjI 7Dy4SVGGI6rfXBGfU4sK3O+5eMzY1mS/U96KeAqy/EIMYeEPA9o9OF7DVoYzwcIY JJxZ1Ug0Vow9E6taeG7tqwwSpx1fEFyPBVoJiy+bOkmMyUxP8MWDmgPNcoxEkFyW q276m4ELpYzG7MKnQchnCkgfWEgg+gabhdukKj13DwL+2AQfgTNhIdjpal0+HKdB 1KOmYCmt9nisxe0kWbcJEVw+Cty3GF3xdRHh0YCT5qMAuS2YO8iqfJgTwiOh/13T ZMUGmK7vRTIerk/EeKdot9StGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw/zhxw ahaCzF1ppcApF/tgiDlqMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3DSTsGmWDO64BX7k1qGmphadUdA4NveKC51qbl/tZBnseuc+GyGkH MjdA/hxTsGFUy1C78Yp4lhiU6PxBUo0Mba9Fl81MULACx+i4gy5i3NFjff26958n h6AzdG6z3etifVgLnZYSNXft0A9M+STpGY8lvJHK8DmZIctJuBsidC8AjLD9SvN/ RQfeHHg30ehxQ9v4FktCwB88duWhhOW92CCvpmprNmbJILhbkYJwt6u9RFnDOL9O X8ENMZWNuh+hnPHa9tVfawfq4mR3d9DBS55MtvVCyJ9WomYN0efdAm84isnTXdow hlCIqsL+g92WVb9JFuN9OxPpgdY+v6IS -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:02 2025 by rpki-client