This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: ocDA73MndQ6ZsGzCfI2FKyjGgPzjlB8jnogTfXGcPOY= Subject key identifier: D6:E8:2F:24:77:94:FC:DF:02:E5:F4:C1:56:A8:6C:8B:07:85:52:22 Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 0AF4 Signing time: Sat 06 Dec 2025 19:37:39 +0000 Manifest this update: Sat 06 Dec 2025 19:37:39 +0000 Manifest next update: Sat 13 Dec 2025 19:37:39 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: wCZcUxsGOjMvrH0MFWOUPsrYuc7gUkeg5L4I1cafGTo=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: lK+kMuCLsShhM34gwZZ5PMShxjGc2oEA6OyzV2OygRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Dec 6 19:37:39 2025 GMT Not After : Dec 13 19:37:39 2025 GMT Subject: CN=69348603-b4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:13:9e:62:03:c4:12:21:94:54:c1:fe:a4: ec:94:96:e8:9f:1d:a2:58:09:c3:f7:f3:80:13:b8: 72:fb:7c:be:ee:6f:17:04:b7:09:ee:52:1e:5e:d0: 9a:3b:24:3e:ec:c4:08:d7:c9:d0:54:79:c4:cd:ad: 79:b2:db:7a:24:b2:1f:d6:93:19:7e:32:aa:ae:b5: 32:a1:10:b7:03:38:7e:7a:4e:94:66:e3:10:05:63: ef:43:c2:51:71:8a:8f:6d:1f:b6:47:c6:9e:ed:91: b2:50:9d:e2:c8:da:52:b5:93:49:da:04:7d:6d:96: 5d:fd:f3:99:01:db:ac:e3:9a:4b:e4:d2:b3:7e:12: 0e:81:2d:8a:5a:5b:7f:d0:22:4d:c1:51:08:5f:43: 00:d9:b5:c9:d7:15:50:60:eb:bd:30:c5:72:27:5f: c6:35:0c:89:53:95:b2:2d:ff:a9:e3:4f:f5:9a:94: 9d:d9:db:e7:ba:da:f7:ad:45:d7:19:da:1c:5c:3c: 6a:85:0b:be:10:b6:aa:8b:26:27:8a:a7:53:66:4e: f3:ce:af:2d:da:f0:30:43:dc:5a:8b:44:85:2e:7c: cb:b8:48:84:6b:92:cb:76:ea:21:1e:76:8f:b4:fb: bd:18:33:ba:d6:1c:a1:eb:f4:ce:d8:20:89:f3:57: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E8:2F:24:77:94:FC:DF:02:E5:F4:C1:56:A8:6C:8B:07:85:52:22 X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:71:03:7d:f4:77:db:d9:ae:8c:92:d4:e7:ae:bf:0f:11:f1: f9:f4:fb:6b:cf:2f:d9:ae:fa:7d:91:50:33:00:5a:41:50:0d: 41:87:c0:27:a2:fd:ce:a2:f5:fb:7c:23:e6:03:9e:55:7f:c6: 77:13:16:ac:fa:e5:86:9a:f6:2e:bf:58:ee:22:20:99:6c:8a: 9c:f8:4f:b4:54:21:09:87:92:bf:ef:e3:a1:45:96:a2:82:77: ab:5c:f3:bc:82:85:06:13:e8:33:bd:87:d0:1b:f9:da:e3:a4: 7f:d3:5e:c0:71:06:72:84:a5:de:78:5d:93:81:2d:8a:8f:d7: 68:4d:3a:98:ce:e3:23:c3:26:ba:c6:e0:f5:ad:70:cf:1a:7f: 30:79:81:fb:32:5b:79:19:79:5f:70:5c:a5:bb:2b:ed:df:d4: da:8c:1c:75:38:fa:6e:98:ff:2e:a5:d7:2f:7b:44:32:63:cf: f2:5c:ff:d9:64:3b:5b:c6:65:83:bd:30:6b:40:af:df:33:f0: 2f:9f:9c:41:44:99:90:c8:93:e6:f4:e7:72:6c:c3:e2:a8:51: 29:72:d5:55:08:73:e3:23:fa:eb:2f:8f:ea:81:5e:d4:ad:78: 87:ed:f4:27:4b:a9:bf:9e:ef:34:24:28:39:d1:c8:15:eb:88: 81:13:43:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUxMjA2MTkzNzM5WhcNMjUxMjEzMTkzNzM5WjAYMRYwFAYD VQQDEw02OTM0ODYwMy1iNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kUTnmIDxBIhlFTB/qTslJbonx2iWAnD9/OAE7hy+3y+7m8XBLcJ7lIeXtCa OyQ+7MQI18nQVHnEza15stt6JLIf1pMZfjKqrrUyoRC3Azh+ek6UZuMQBWPvQ8JR cYqPbR+2R8ae7ZGyUJ3iyNpStZNJ2gR9bZZd/fOZAdus45pL5NKzfhIOgS2KWlt/ 0CJNwVEIX0MA2bXJ1xVQYOu9MMVyJ1/GNQyJU5WyLf+p40/1mpSd2dvnutr3rUXX GdocXDxqhQu+ELaqiyYniqdTZk7zzq8t2vAwQ9xai0SFLnzLuEiEa5LLduohHnaP tPu9GDO61hyh6/TO2CCJ81d3BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNboLyR3 lPzfAuX0wVaobIsHhVIiMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAscQN99Hfb2a6MktTnrr8PEfH59Ptrzy/Zrvp9kVAzAFpBUA1Bh8An ov3OovX7fCPmA55Vf8Z3Exas+uWGmvYuv1juIiCZbIqc+E+0VCEJh5K/7+OhRZai gnerXPO8goUGE+gzvYfQG/na46R/017AcQZyhKXeeF2TgS2Kj9doTTqYzuMjwya6 xuD1rXDPGn8weYH7Mlt5GXlfcFyluyvt39TajBx1OPpumP8updcve0QyY8/yXP/Z ZDtbxmWDvTBrQK/fM/Avn5xBRJmQyJPm9OdybMPiqFEpctVVCHPjI/rrL4/qgV7U rXiH7fQnS6m/nu80JCg50cgV64iBE0O6 -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:03 2025 by rpki-client