This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json) Hash identifier: Uy4sRMjhpcwKtlcKgeReTiyvapEVT75EkBAGwkAPJUs= Subject key identifier: B2:0A:37:66:60:57:9A:00:00:13:1E:9A:87:55:F6:B1:6F:73:3D:EC Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Certificate serial: 29B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft Manifest number: 29A4 Signing time: Sat 06 Dec 2025 15:22:35 +0000 Manifest this update: Sat 06 Dec 2025 15:22:34 +0000 Manifest next update: Sat 13 Dec 2025 15:22:34 +0000 Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: fHF7Lg1yj7ucLhkwyoBT2RthcpyM7AE4OgzDQhgv1ww=) 2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: XWmzI2yeMf3apt5DHsKgv60jONcTAI6E+TZgl5OMpW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10681 (0x29b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Validity Not Before: Dec 6 15:22:34 2025 GMT Not After : Dec 13 15:22:34 2025 GMT Subject: CN=69344a3a-9d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:08:de:55:7f:8b:92:29:44:7c:62:40:d9:ae: 5c:1b:13:b5:04:78:9e:b7:53:df:b1:fd:eb:7b:a1: 2d:7b:8f:25:e3:74:d5:00:64:aa:b6:18:9c:a0:f0: bd:4c:81:81:8c:75:17:26:2a:af:60:b4:29:8c:e6: 4e:1e:79:88:20:b8:90:9a:8c:f0:ab:b5:ea:b0:93: 5e:be:dc:7e:98:c7:32:b5:7b:13:7c:4f:f6:ef:58: 05:b4:4b:ca:eb:47:9b:b5:38:ed:cf:d0:ad:d3:25: b6:e8:d9:d8:eb:24:bd:50:65:23:87:43:19:58:99: 09:9b:23:18:4d:68:99:6b:53:4b:ea:a0:37:21:24: 81:d8:3d:42:20:52:3f:0f:9f:72:b3:cf:39:80:be: 49:a8:4f:c1:06:10:6d:d0:19:88:8b:7a:a7:0e:6f: f2:9b:a3:88:73:b7:08:5d:76:79:e3:dd:70:1a:42: e9:ec:db:ba:0b:da:ec:6e:0f:1d:29:94:b6:69:40: 3e:70:94:24:2a:ff:3f:7a:c3:2d:8d:85:9a:24:64: 9e:6b:21:56:98:eb:26:49:4b:f1:dc:ab:fb:bf:88: 37:a4:c1:40:63:eb:38:f8:98:5e:64:34:40:ba:d8: ea:ab:f7:38:97:6b:90:eb:8e:d0:48:5d:c8:5d:76: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0A:37:66:60:57:9A:00:00:13:1E:9A:87:55:F6:B1:6F:73:3D:EC X509v3 Authority Key Identifier: keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:45:1e:18:92:7b:17:c8:87:84:02:b0:85:57:7c:59:a6:41: 86:e7:dc:36:e3:16:c9:98:da:c0:c5:87:75:7e:0c:fb:be:bf: 9d:6a:1d:73:bc:db:b2:51:ef:c3:1b:8e:b5:e5:3c:20:2c:7e: 84:3e:3d:df:1d:e3:24:35:df:51:eb:65:01:4c:29:b6:71:f1: 5f:0b:22:d5:3f:ca:06:1c:ed:b0:0d:e3:fc:b6:41:17:fd:06: 34:cc:e3:db:99:29:71:46:e1:fc:9f:a9:4c:c6:30:e6:00:63: 94:d4:17:e5:c9:f1:86:27:b1:4b:d6:ae:67:84:24:9a:c1:43: 76:92:3c:db:6c:33:50:69:09:fd:4c:92:b6:13:b6:cf:6f:3b: b8:63:3e:98:a0:39:20:3b:1c:0f:1e:a4:7b:a9:57:4a:7c:3b: e7:1c:0b:05:3a:23:b6:bd:1c:c4:55:ec:ab:09:c6:a2:e7:e8: 7d:42:1a:d6:d2:0b:fa:dc:73:3c:d3:5c:9f:c0:b9:0a:8c:e8: ed:bc:77:85:60:c6:04:e6:2a:36:38:79:db:1e:18:73:a7:be: b4:6d:79:e1:51:cf:4f:4b:89:c2:59:1c:61:32:eb:ab:e0:e2: 5a:5f:06:6e:ba:e1:37:8d:7f:35:df:41:7d:d6:dc:3f:d6:e1: ce:dc:ec:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD NzA4QjRBQzUwHhcNMjUxMjA2MTUyMjM0WhcNMjUxMjEzMTUyMjM0WjAYMRYwFAYD VQQDEw02OTM0NGEzYS05ZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwjeVX+LkilEfGJA2a5cGxO1BHiet1Pfsf3re6Ete48l43TVAGSqthicoPC9 TIGBjHUXJiqvYLQpjOZOHnmIILiQmozwq7XqsJNevtx+mMcytXsTfE/271gFtEvK 60ebtTjtz9Ct0yW26NnY6yS9UGUjh0MZWJkJmyMYTWiZa1NL6qA3ISSB2D1CIFI/ D59ys885gL5JqE/BBhBt0BmIi3qnDm/ym6OIc7cIXXZ5491wGkLp7Nu6C9rsbg8d KZS2aUA+cJQkKv8/esMtjYWaJGSeayFWmOsmSUvx3Kv7v4g3pMFAY+s4+JheZDRA utjqq/c4l2uQ647QSF3IXXae5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIKN2Zg V5oAABMemodV9rFvcz3sMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4 QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxNy80NDVFRTA5NDU4QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJ Zjdhd3dvdmdGa1hIQ0xTc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVRR4YknsXyIeEArCFV3xZpkGG59w24xbJmNrAxYd1fgz7vr+dah1z vNuyUe/DG4615TwgLH6EPj3fHeMkNd9R62UBTCm2cfFfCyLVP8oGHO2wDeP8tkEX /QY0zOPbmSlxRuH8n6lMxjDmAGOU1BflyfGGJ7FL1q5nhCSawUN2kjzbbDNQaQn9 TJK2E7bPbzu4Yz6YoDkgOxwPHqR7qVdKfDvnHAsFOiO2vRzEVeyrCcai5+h9QhrW 0gv63HM801yfwLkKjOjtvHeFYMYE5io2OHnbHhhzp760bXnhUc9PS4nCWRxhMuur 4OJaXwZuuuE3jX8130F91tw/1uHO3OxD -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:41 2025 by rpki-client