This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: t+lIC3SQX6PbfD1T3D9I421UacYkn+PliSA/PlpSIcw= Subject key identifier: 99:2E:A8:60:9C:74:9D:E5:87:09:5C:24:6E:4B:32:3F:02:C7:8F:72 Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: 0127 Signing time: Fri 19 Dec 2025 03:49:35 +0000 Manifest this update: Fri 19 Dec 2025 03:49:34 +0000 Manifest next update: Fri 26 Dec 2025 03:49:34 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: GndJVuHxsd6LNo2XMbgV5l4HolvZR2eBxKRzwcml8c0=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: DqAscZot5tvFIRSwhun0FkboyMxWikjQ2XKpTFYg9ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Dec 19 03:49:34 2025 GMT Not After : Dec 26 03:49:34 2025 GMT Subject: CN=6944cb4f-d000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:a7:8b:08:ab:d4:fa:51:1b:e9:a9:ad:47: 14:62:33:5c:b9:46:9b:9e:ea:0c:b1:65:ea:c0:5e: c8:2b:76:f7:ca:db:8a:1b:ab:21:5c:09:db:2a:1d: 7a:a5:9f:d0:b3:76:f8:7b:75:f9:58:e0:2d:e2:a6: cb:d4:c5:e5:42:13:4c:e7:72:7b:2f:37:30:54:33: ca:37:89:17:91:84:8a:e2:95:20:f9:00:01:66:16: 5d:85:57:01:0b:18:84:23:25:0b:b6:3f:e9:a0:94: 18:6b:ff:c2:34:9d:d3:05:70:4d:6d:02:29:75:70: 84:78:57:91:81:23:64:33:a9:97:4f:1c:a4:44:b3: 9a:ff:6f:20:0f:02:b5:fb:3e:89:26:cc:89:88:3f: 80:d7:19:53:e5:99:d0:d3:6e:b3:99:81:b7:0e:d7: 30:1e:53:72:a6:ef:c8:4d:ef:f0:45:b0:75:16:f4: d1:1b:5f:1c:f5:67:3d:c2:74:24:fc:93:ee:cd:13: 98:5a:77:e9:2c:9c:fa:d1:09:39:4c:4b:63:ca:b1: f8:f0:1b:04:ae:aa:65:40:63:a4:b1:e0:1b:d2:83: 35:e5:7a:f5:2b:a8:5b:56:65:4a:69:e9:fc:5f:d2: b7:fc:bf:6a:0b:9f:68:ed:4a:1f:78:5e:9d:e5:f8: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2E:A8:60:9C:74:9D:E5:87:09:5C:24:6E:4B:32:3F:02:C7:8F:72 X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:41:74:4c:eb:dd:4e:a9:9b:c0:8f:de:1b:1d:7c:08:2b:72: 02:79:f4:fb:92:3b:4d:d3:b5:e7:3a:67:4d:1b:e5:cb:8a:b9: d8:b5:2b:db:43:94:5f:c0:e7:5b:54:93:7d:61:43:82:ca:ac: 9c:c8:40:bd:3b:81:fc:35:a3:13:bf:11:70:2f:b5:78:c9:40: 20:1e:2c:26:ad:bf:f7:07:01:7f:1b:61:77:31:11:fe:90:c1: d8:0c:b4:4a:9d:67:ca:ee:3a:04:bd:48:30:a5:4e:42:35:e6: d1:0f:8c:3d:6a:65:ca:ac:73:32:5b:fe:0c:ee:f8:1f:07:7a: 78:26:0f:60:c7:4c:a9:fa:45:68:cd:50:3d:c3:ef:f7:50:75: 85:ca:3c:72:b7:bd:6c:90:26:dc:9b:17:7c:a8:af:3f:17:ad: 3a:c5:46:92:16:eb:e8:85:08:0f:05:dc:cd:e0:96:4f:f4:4a: c1:93:2b:0f:42:82:ee:41:8b:b8:7e:14:f8:ab:6f:02:86:1d: 6f:79:3e:99:b8:98:fd:28:f9:0e:e2:f3:9f:39:cf:cb:e6:53: 46:49:a0:06:2e:58:24:99:40:f6:fa:72:d8:31:e0:1f:97:16: b8:e9:09:38:3e:c2:a3:7f:ab:c2:d3:c6:80:c2:0a:35:df:c3: 93:13:55:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjUxMjE5MDM0OTM0WhcNMjUxMjI2MDM0OTM0WjAYMRYwFAYD VQQDDA02OTQ0Y2I0Zi1kMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW2niwir1PpRG+mprUcUYjNcuUabnuoMsWXqwF7IK3b3ytuKG6shXAnbKh16 pZ/Qs3b4e3X5WOAt4qbL1MXlQhNM53J7LzcwVDPKN4kXkYSK4pUg+QABZhZdhVcB CxiEIyULtj/poJQYa//CNJ3TBXBNbQIpdXCEeFeRgSNkM6mXTxykRLOa/28gDwK1 +z6JJsyJiD+A1xlT5ZnQ026zmYG3DtcwHlNypu/ITe/wRbB1FvTRG18c9Wc9wnQk /JPuzROYWnfpLJz60Qk5TEtjyrH48BsErqplQGOkseAb0oM15Xr1K6hbVmVKaen8 X9K3/L9qC59o7UofeF6d5fiGLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkuqGCc dJ3lhwlcJG5LMj8Cx49yMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOQXRM691OqZvAj94bHXwIK3ICefT7kjtN07XnOmdNG+XLirnYtSvb Q5RfwOdbVJN9YUOCyqycyEC9O4H8NaMTvxFwL7V4yUAgHiwmrb/3BwF/G2F3MRH+ kMHYDLRKnWfK7joEvUgwpU5CNebRD4w9amXKrHMyW/4M7vgfB3p4Jg9gx0yp+kVo zVA9w+/3UHWFyjxyt71skCbcmxd8qK8/F606xUaSFuvohQgPBdzN4JZP9ErBkysP QoLuQYu4fhT4q28Chh1veT6ZuJj9KPkO4vOfOc/L5lNGSaAGLlgkmUD2+nLYMeAf lxa46Qk4PsKjf6vC08aAwgo138OTE1XS -----END CERTIFICATE-----Generated at Fri Dec 19 12:03:53 2025 by rpki-client