This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: IWau+HHSvcLM3meHDMi1XkZMm8Y1ZGcGArmIiXIpUtc= Subject key identifier: 05:9B:9E:0A:91:79:49:AE:D9:37:0A:6C:70:6E:F2:E2:65:1F:9F:56 Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: 1B Signing time: Fri 05 Dec 2025 05:37:52 +0000 Manifest this update: Fri 05 Dec 2025 05:37:52 +0000 Manifest next update: Fri 12 Dec 2025 05:37:52 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: kcKV4QQhuChQD+W+hdGSEE3e8HJl3rbbX3AQ4qi3Z+Q=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: TNOMyUTzIQDmtZMNg4RAepXI8EHziIAFioU9/cJC+ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Dec 5 05:37:52 2025 GMT Not After : Dec 12 05:37:52 2025 GMT Subject: CN=69326fb0-301e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:1b:80:e4:e1:8d:17:7a:02:fa:59:79:9e: fb:ad:15:16:cb:22:17:25:f2:1a:19:fb:c7:99:a9: a8:42:1e:15:ad:b3:e9:61:93:a4:1c:c5:99:3f:76: f9:a5:b6:94:bd:ab:7d:a7:6b:1b:f0:51:c5:9c:fa: 00:77:bf:63:59:e8:6e:b1:3a:7e:9d:56:ca:92:6a: 21:3f:11:d4:5c:50:1e:0b:39:eb:93:84:a1:71:4e: 59:c4:c2:eb:f0:22:75:57:30:f7:c5:4b:81:08:81: 89:32:23:19:85:86:a4:3c:2f:11:5a:04:69:86:da: 60:6c:ee:94:d1:69:89:c0:f0:6b:31:f6:65:3d:56: fd:7e:30:ca:d4:45:bf:bc:bb:48:10:fc:af:09:ee: 91:2c:c8:24:ad:21:4f:4a:80:86:2f:6b:d6:ff:b1: 97:ea:97:b8:b5:fa:02:dc:e7:b5:51:6d:13:27:36: 15:f7:39:fd:1d:50:5e:a2:0f:3f:e7:fa:d9:2e:28: 3a:db:3e:0c:ed:7f:bd:90:ff:ba:1c:f1:0f:61:89: 1d:7d:ec:e2:0b:93:46:37:49:e2:2b:bb:eb:4e:0f: f0:c4:09:d9:82:7a:62:6e:8b:d2:99:2c:24:6c:fa: 2d:dc:b3:27:de:29:e6:88:03:f8:b9:79:3c:e3:de: 1d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:9E:0A:91:79:49:AE:D9:37:0A:6C:70:6E:F2:E2:65:1F:9F:56 X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d2:e4:a0:de:03:8a:19:3b:8d:e5:9a:c2:24:19:ef:88:0c: 88:3b:1e:d2:29:de:a2:47:ae:e2:64:5c:9f:c8:d0:10:bd:95: a6:d4:73:ec:5d:fc:4d:41:f9:f8:a2:dd:f5:39:2f:76:ee:e8: 98:21:6a:0b:26:0e:2b:03:03:e9:42:15:f8:9a:7a:78:ca:d4: f6:d6:f7:23:be:e8:01:01:ac:18:4c:11:e5:ff:26:e3:8f:e6: 17:9d:33:b5:96:1a:93:65:09:82:6f:b2:54:33:5b:03:e2:26: 33:c8:e3:0a:47:8c:82:44:90:82:4d:11:97:7a:df:92:da:dc: 7b:e7:5e:74:e3:b9:99:d0:a6:d0:ce:dd:6f:d2:75:33:fc:d0: a0:07:a8:1a:27:e4:8c:44:7d:1b:9f:85:2f:a9:dc:bf:64:29: 4e:3c:b0:3c:4f:c2:79:57:98:c9:b5:10:fe:82:db:13:2f:f5: 58:9b:7d:55:6d:11:74:70:a5:62:9d:48:4f:53:3c:5b:b2:5d: a2:06:ea:38:91:a7:ea:7b:25:ce:31:a2:01:be:9b:b7:78:f1: 20:9f:ac:4b:95:c5:68:f9:9f:9b:22:f9:a3:e1:b2:f5:6c:f6: f8:c0:a2:10:e9:80:ab:b4:f5:87:f1:09:f8:ee:91:b3:96:66: c7:8b:30:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQjY0M0ZFQjMwMzI3NDIxNDhGM0FGOUMzNTM5MzM4RDU1 NDkzNzIyODAeFw0yNTEyMDUwNTM3NTJaFw0yNTEyMTIwNTM3NTJaMBgxFjAUBgNV BAMTDTY5MzI2ZmIwLTMwMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSjhuA5OGNF3oC+ll5nvutFRbLIhcl8hoZ+8eZqahCHhWts+lhk6QcxZk/dvml tpS9q32naxvwUcWc+gB3v2NZ6G6xOn6dVsqSaiE/EdRcUB4LOeuThKFxTlnEwuvw InVXMPfFS4EIgYkyIxmFhqQ8LxFaBGmG2mBs7pTRaYnA8Gsx9mU9Vv1+MMrURb+8 u0gQ/K8J7pEsyCStIU9KgIYva9b/sZfql7i1+gLc57VRbRMnNhX3Of0dUF6iDz/n +tkuKDrbPgztf72Q/7oc8Q9hiR197OILk0Y3SeIru+tOD/DECdmCemJui9KZLCRs +i3csyfeKeaIA/i5eTzj3h3zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBZueCpF5 Sa7ZNwpscG7y4mUfn1YwHwYDVR0jBBgwFoAUtkP+swMnQhSPOvnDU5M41VSTcigw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzRGNzY5RDU4QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNp Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdGtQLXN3TW5RaFNQT3ZuRFU1TTQxVlNUY2lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzRGNzY5RDU4QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhT UE92bkRVNU00MVZTVGNpZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKPS5KDeA4oZO43lmsIkGe+IDIg7HtIp3qJHruJkXJ/I0BC9labUc+xd /E1B+fii3fU5L3bu6JghagsmDisDA+lCFfiaenjK1PbW9yO+6AEBrBhMEeX/JuOP 5hedM7WWGpNlCYJvslQzWwPiJjPI4wpHjIJEkIJNEZd635La3HvnXnTjuZnQptDO 3W/SdTP80KAHqBon5IxEfRufhS+p3L9kKU48sDxPwnlXmMm1EP6C2xMv9VibfVVt EXRwpWKdSE9TPFuyXaIG6jiRp+p7Jc4xogG+m7d48SCfrEuVxWj5n5si+aPhsvVs 9vjAohDpgKu09YfxCfjukbOWZseLMKw= -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:33 2025 by rpki-client