This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File: Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier: v9lszGbzxcZvyt8mhhfuq7qiJA9F5VWUtSg/WRC/kbo=
Subject key identifier: 34:0E:CA:AA:D5:87:8D:82:DF:22:F8:87:7F:77:5A:23:D0:BC:A0:92
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number: 6F
Signing time: Fri 05 Dec 2025 04:47:05 +0000
Manifest this update: Fri 05 Dec 2025 04:47:04 +0000
Manifest next update: Fri 12 Dec 2025 04:47:04 +0000
Files and hashes: 1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: sqBWydP0k1DDLKXSMA0rOCacxAtumfhs5Ba6FrHu9Lg=)
2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Validity
Not Before: Dec 5 04:47:04 2025 GMT
Not After : Dec 12 04:47:04 2025 GMT
Subject: CN=693263c8-7e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:d3:57:a1:99:67:e7:82:c4:45:6b:2f:55:
6c:78:31:33:f5:54:92:39:88:e3:29:b7:91:d9:97:
14:b7:c0:07:41:7a:18:82:14:9e:41:47:be:f6:48:
d8:dc:b0:44:31:2d:0c:19:1d:de:2d:38:af:14:2d:
83:bc:d7:02:6a:3b:61:2b:63:55:a5:30:78:28:72:
fa:8e:83:36:5e:de:5d:8e:59:81:06:df:34:04:d0:
03:82:41:f5:27:13:05:66:ae:dd:43:e8:96:51:b5:
0f:77:85:22:69:c5:11:0b:f3:1e:fb:ee:69:ba:29:
f3:95:fe:b6:12:aa:d5:a8:99:aa:9c:9e:b7:b6:43:
06:cf:8a:1f:d3:2d:cb:f4:f8:d1:88:90:06:e4:44:
fd:95:ec:37:69:d1:7e:e6:76:7b:88:28:b6:27:0e:
ae:01:54:b2:aa:0e:9b:8c:94:9b:30:fe:a8:e7:5f:
87:4a:66:71:12:e2:1d:56:45:b2:89:1c:d9:55:c3:
8a:47:6d:87:0d:86:07:d2:90:a5:20:15:a1:eb:0e:
4a:ad:2b:24:9c:77:7f:b0:7a:7f:42:f7:c9:e5:aa:
1a:f0:3d:28:92:c1:a7:42:41:3e:38:0a:9a:95:81:
3f:85:cf:d6:d5:e5:c7:3f:b3:26:d1:85:d5:20:89:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:CA:AA:D5:87:8D:82:DF:22:F8:87:7F:77:5A:23:D0:BC:A0:92
X509v3 Authority Key Identifier:
keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:55:fa:4b:b2:f0:90:b5:77:03:95:90:1e:ad:84:ca:ce:be:
29:38:05:0b:43:b1:34:5f:25:ba:78:63:90:e9:9e:d7:0f:b9:
24:5d:b1:6a:ca:23:03:1f:b7:ea:1d:95:91:ef:0d:c9:b5:87:
09:f1:31:9c:81:a0:a6:22:c2:cd:72:75:2e:d0:dd:86:11:e7:
85:ef:b2:4a:7b:f8:43:3f:89:ae:40:33:ef:88:ac:9b:cb:f3:
aa:23:35:97:c2:0b:16:b1:1d:93:c4:fc:71:f2:70:ad:30:98:
f9:6c:ca:b2:28:55:5d:7b:c2:c2:35:e7:6f:9c:bc:b8:f2:df:
1c:18:8c:e8:2a:bc:e3:16:4f:39:cd:1b:2d:79:de:4b:82:0f:
3b:b2:f7:1f:56:25:1d:98:ad:3d:7b:a7:5a:3d:e2:29:ac:31:
16:9d:8c:99:18:33:64:e9:21:65:94:bc:c6:0e:88:5c:f1:0d:
3a:49:fb:63:af:e1:b9:eb:a2:3d:df:46:ae:30:ed:55:c9:7e:
6e:db:cb:3f:c9:61:66:03:83:34:d2:45:91:47:32:32:88:40:
b1:cc:21:9f:c8:1e:16:7a:a6:14:92:89:11:aa:e1:91:2a:43:
e2:9f:2d:ab:a8:2e:f2:39:1e:db:63:31:fe:e7:f6:ab:d7:b5:
42:f7:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:31:35 2025 by rpki-client