This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: YaRbi7SDyEpwHAr9lGWsAT3q847LpD3jA7vH4ZNahGo= Subject key identifier: 41:5B:BD:94:80:89:06:C8:89:F7:77:FD:28:D5:E3:C6:4C:0F:15:00 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 01D1 Signing time: Fri 05 Dec 2025 01:04:50 +0000 Manifest this update: Fri 05 Dec 2025 01:04:49 +0000 Manifest next update: Fri 12 Dec 2025 01:04:49 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: pOksa4eJ1X7wJ+wmM40xwKBtigbBSfInjuoS+vOnKQA=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Dec 5 01:04:49 2025 GMT Not After : Dec 12 01:04:49 2025 GMT Subject: CN=69322fb1-60bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5c:18:1a:eb:6a:08:33:98:4b:bd:01:3c:a1: f3:ac:39:4a:7c:df:f5:2f:c6:1f:25:ec:83:e2:11: af:e6:66:ff:63:9a:8d:26:f0:0c:17:49:ee:0b:13: 73:56:f2:54:b2:19:6e:c0:98:4b:40:cf:20:f6:83: 0f:34:e6:d4:cc:81:8e:de:3d:1d:7c:f7:31:bd:47: 34:5c:65:fd:82:78:d2:74:50:33:fe:62:ce:70:bd: 81:66:b5:2f:3f:c2:28:55:9f:cf:a6:5b:b8:0c:98: 5d:0f:38:c2:5e:a2:08:e6:12:41:14:93:01:df:01: 0c:b0:f6:73:b2:f6:fc:88:df:41:6c:f3:2a:2e:fa: 5e:1f:d3:a5:dd:55:c6:b4:f5:a8:a4:17:e4:50:fe: 31:eb:42:4e:3a:c0:2f:8f:96:3d:f7:36:2e:a7:51: 54:c9:f4:34:09:30:bb:62:a8:2b:13:9b:b6:9b:31: 1d:5b:51:01:6b:80:88:34:9c:e1:f8:da:63:8f:7f: 5a:84:20:52:a5:31:1f:37:b3:95:0f:fd:b2:9f:6d: 1c:77:79:f5:78:06:27:6d:0a:ea:bc:f5:cb:b7:82: 1b:3c:d5:86:fa:56:b6:c6:6e:c0:64:7b:55:b0:93: 72:2d:76:64:a6:c0:61:e7:2b:9d:44:ab:5f:ce:6f: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5B:BD:94:80:89:06:C8:89:F7:77:FD:28:D5:E3:C6:4C:0F:15:00 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6b:59:c2:35:e2:ea:f0:1f:9a:19:93:08:17:a3:3d:5e:a7: ff:1d:99:1a:fa:d4:77:97:2a:b4:42:2c:6d:9d:ec:ef:bb:f0: 15:82:c8:8c:53:d1:e0:91:d2:67:a9:54:71:57:91:00:11:2b: 9b:33:53:3a:cb:94:9a:25:a1:54:3c:7f:68:85:33:95:74:81: 68:bc:a2:5e:59:ec:42:46:71:ec:19:a2:c7:6b:3c:e9:cf:fc: 52:eb:ec:f6:be:43:f6:cb:b0:0f:1d:cb:e2:5a:c1:8e:fb:7e: 62:46:a6:5b:54:41:61:2d:41:09:19:bb:1e:7d:36:a0:b2:53: 6b:56:1d:37:8e:c9:a1:0a:e3:ac:76:74:05:88:72:c4:87:f2: ae:f3:29:84:a6:5c:2e:84:6b:eb:12:38:cf:a6:b7:a9:f5:df: bc:bc:e0:d1:b4:de:a1:61:53:0e:b5:54:8a:46:cb:c1:d7:07: 06:2a:cc:a6:bf:1d:ad:5e:05:f9:85:e5:9f:40:d2:c2:49:28: 74:df:b3:ea:94:bc:2d:fc:da:61:02:16:0b:6c:03:6e:59:c4: 2a:c9:9e:a0:38:64:34:d1:58:11:84:ec:af:d5:fa:9c:2e:f1: d9:0e:a2:b3:d6:ad:49:f4:13:33:c5:6f:5b:0f:e0:f6:42:0c: ca:2b:a4:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUxMjA1MDEwNDQ5WhcNMjUxMjEyMDEwNDQ5WjAYMRYwFAYD VQQDEw02OTMyMmZiMS02MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VwYGutqCDOYS70BPKHzrDlKfN/1L8YfJeyD4hGv5mb/Y5qNJvAMF0nuCxNz VvJUshluwJhLQM8g9oMPNObUzIGO3j0dfPcxvUc0XGX9gnjSdFAz/mLOcL2BZrUv P8IoVZ/Pplu4DJhdDzjCXqII5hJBFJMB3wEMsPZzsvb8iN9BbPMqLvpeH9Ol3VXG tPWopBfkUP4x60JOOsAvj5Y99zYup1FUyfQ0CTC7YqgrE5u2mzEdW1EBa4CINJzh +Npjj39ahCBSpTEfN7OVD/2yn20cd3n1eAYnbQrqvPXLt4IbPNWG+la2xm7AZHtV sJNyLXZkpsBh5yudRKtfzm8kbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFbvZSA iQbIifd3/SjV48ZMDxUAMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOa1nCNeLq8B+aGZMIF6M9Xqf/HZka+tR3lyq0Qixtnezvu/AVgsiM U9HgkdJnqVRxV5EAESubM1M6y5SaJaFUPH9ohTOVdIFovKJeWexCRnHsGaLHazzp z/xS6+z2vkP2y7APHcviWsGO+35iRqZbVEFhLUEJGbsefTagslNrVh03jsmhCuOs dnQFiHLEh/Ku8ymEplwuhGvrEjjPprep9d+8vODRtN6hYVMOtVSKRsvB1wcGKsym vx2tXgX5heWfQNLCSSh037PqlLwt/NphAhYLbANuWcQqyZ6gOGQ00VgRhOyv1fqc LvHZDqKz1q1J9BMzxW9bD+D2QgzKK6Q+ -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:23 2025 by rpki-client