This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: iuSSCyNWZ1M1ZyQwSt7/Kz8NKWbaMj1h/a8ymU1JAGw= Subject key identifier: 25:BF:9C:E7:3F:51:73:11:89:B3:35:7B:26:16:03:3C:A6:C1:19:CF Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: 0101 Signing time: Fri 05 Dec 2025 03:08:21 +0000 Manifest this update: Fri 05 Dec 2025 03:08:21 +0000 Manifest next update: Fri 12 Dec 2025 03:08:21 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: 6hjpzfyibNoRUAHYNp30lqFVN5kkLNb+Nqg+DtcM9fY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Dec 5 03:08:21 2025 GMT Not After : Dec 12 03:08:21 2025 GMT Subject: CN=69324ca5-77f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:d1:e6:22:74:46:a6:d3:ec:fc:4b:a9:7f: 75:b7:19:9b:6d:5a:80:8c:7c:79:fc:92:f5:55:6b: 3e:7a:35:ab:cc:e8:23:15:ff:fd:69:71:50:7a:22: d0:a6:77:5c:bc:e9:9b:97:df:70:b0:6c:76:52:90: 99:95:a1:eb:5f:ea:2e:86:d0:47:01:7b:36:3c:01: a3:af:0d:46:27:76:6b:04:3b:4a:b4:92:eb:03:8a: 10:a3:5b:49:19:1a:51:c8:ae:f8:dc:58:09:35:ac: 8f:68:6b:6d:11:c6:22:01:0f:71:c0:1f:dd:a1:ad: 59:4d:b1:45:35:a5:2e:50:93:c4:ef:77:ab:cd:06: 75:b7:b1:69:ef:04:44:d6:e2:b6:50:79:e6:a2:ba: b3:84:96:9f:dd:83:b2:43:9b:28:46:24:f5:39:02: d2:fd:59:49:64:2f:c9:64:8a:3c:23:b6:07:fd:17: 96:29:24:45:60:74:01:3d:10:ee:5e:a1:0b:39:f8: 7a:19:06:18:5b:3b:91:ac:96:59:a0:ca:78:f5:67: 28:20:cf:4b:77:02:e3:24:7a:75:68:e2:28:4d:32: 05:32:0d:4c:10:b0:54:2a:94:aa:91:a3:97:5b:72: 63:43:e3:f3:cd:00:67:2d:ad:b7:af:a1:cb:7c:c5: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BF:9C:E7:3F:51:73:11:89:B3:35:7B:26:16:03:3C:A6:C1:19:CF X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:bf:1d:0c:bf:f4:75:95:4f:8f:ce:91:71:a1:e2:8c:7f:92: a6:00:70:79:6b:ed:a5:eb:38:91:4b:7c:26:4e:ea:ec:79:c9: de:4a:0c:b0:a0:a1:b9:19:5f:4b:f4:9d:ed:2a:cd:14:be:4f: 3b:88:58:a9:a6:16:14:d2:ba:a6:a7:56:55:c4:86:3f:14:16: c1:e6:af:b4:39:43:21:ad:76:7a:22:b9:cb:c1:79:c1:5f:c3: ea:00:d9:59:2c:7f:a7:89:20:4b:fc:ef:47:98:f5:25:60:d0: ba:67:de:c5:cf:9d:8c:f5:4a:b4:c3:a1:af:f6:20:8d:fb:4f: 44:9c:a3:01:be:44:87:29:f1:e3:10:84:4e:f3:fb:8b:30:11: fc:0e:cd:80:a3:0d:58:a3:63:31:a3:35:16:15:c0:e9:a5:3e: 65:74:cc:4a:9f:3c:a0:fa:18:36:bf:7e:70:3b:11:ae:45:e6: ad:d5:f8:50:50:fb:8c:02:33:33:b4:d2:d7:5a:88:9c:2f:5c: fd:ca:66:64:9b:11:60:2e:29:9d:58:4f:53:8d:24:f3:7b:9e: 0d:f9:4b:76:8f:53:30:fd:50:35:a7:e3:7c:54:c4:5c:4f:82: 7f:5c:64:3c:db:67:2b:ea:62:24:14:97:d1:c3:16:b7:83:86: 23:e8:66:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjUxMjA1MDMwODIxWhcNMjUxMjEyMDMwODIxWjAYMRYwFAYD VQQDEw02OTMyNGNhNS03N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGPR5iJ0RqbT7PxLqX91txmbbVqAjHx5/JL1VWs+ejWrzOgjFf/9aXFQeiLQ pndcvOmbl99wsGx2UpCZlaHrX+ouhtBHAXs2PAGjrw1GJ3ZrBDtKtJLrA4oQo1tJ GRpRyK743FgJNayPaGttEcYiAQ9xwB/doa1ZTbFFNaUuUJPE73erzQZ1t7Fp7wRE 1uK2UHnmorqzhJaf3YOyQ5soRiT1OQLS/VlJZC/JZIo8I7YH/ReWKSRFYHQBPRDu XqELOfh6GQYYWzuRrJZZoMp49WcoIM9LdwLjJHp1aOIoTTIFMg1MELBUKpSqkaOX W3JjQ+PzzQBnLa23r6HLfMXcOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCW/nOc/ UXMRibM1eyYWAzymwRnPMB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApvx0Mv/R1lU+PzpFxoeKMf5KmAHB5a+2l6ziRS3wmTursecneSgyw oKG5GV9L9J3tKs0Uvk87iFipphYU0rqmp1ZVxIY/FBbB5q+0OUMhrXZ6IrnLwXnB X8PqANlZLH+niSBL/O9HmPUlYNC6Z97Fz52M9Uq0w6Gv9iCN+09EnKMBvkSHKfHj EIRO8/uLMBH8Ds2Aow1Yo2MxozUWFcDppT5ldMxKnzyg+hg2v35wOxGuReat1fhQ UPuMAjMztNLXWoicL1z9ymZkmxFgLimdWE9TjSTze54N+Ut2j1Mw/VA1p+N8VMRc T4J/XGQ822cr6mIkFJfRwxa3g4Yj6GYT -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:41 2025 by rpki-client