This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft File: tkuBBCq0EWB9hgdv78nllia7iBY.mft (raw, json) Hash identifier: tLBDBiYjG4pbbrO0x9QqvryVIIqycQ9ZgZhnagBkyLI= Subject key identifier: 62:70:07:E0:9F:A2:13:B0:93:2F:8D:DF:81:71:E1:F9:D9:C6:9F:95 Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 Certificate issuer: /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft Manifest number: 31 Signing time: Fri 05 Dec 2025 05:28:32 +0000 Manifest this update: Fri 05 Dec 2025 05:28:32 +0000 Manifest next update: Fri 12 Dec 2025 05:28:32 +0000 Files and hashes: 1: tkuBBCq0EWB9hgdv78nllia7iBY.crl (hash: JNDRE2d8bX7eZsTw82vSBJxS9sO3JvwVm6orzDjrMwo=) 2: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (hash: 49rBi75NWLedbZFV/zCs/LhYwYBaC9SkJOjaSAzVrHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Validity Not Before: Dec 5 05:28:32 2025 GMT Not After : Dec 12 05:28:32 2025 GMT Subject: CN=69326d80-7c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:fd:7e:7a:33:5e:d8:5b:61:71:5a:a6:f0: 07:9f:8c:6b:90:a2:84:9c:e7:c4:b6:8d:df:ca:e6: 87:16:d6:f9:a2:9e:38:3d:d0:fc:4a:0a:f0:d1:3c: d6:de:a2:d9:a9:5e:eb:f6:5f:dc:26:ba:9a:64:c3: d5:28:81:f3:b4:89:59:a9:08:d4:bf:10:69:87:91: ee:cd:60:9d:21:a5:98:4b:55:a6:7d:f3:d4:2b:76: d1:32:86:10:96:92:2b:2f:bd:43:5e:e0:c8:4f:05: 2b:11:df:77:fa:09:c6:ce:15:6d:e7:2c:4c:bb:de: 26:a5:27:10:c8:c7:e2:0e:37:49:28:c6:a0:97:28: 68:f9:65:81:d6:ac:99:35:58:e4:88:e4:8d:a6:91: fb:12:0d:9e:42:8f:57:57:2a:4a:ac:b9:dc:9b:ce: c8:96:80:16:d7:72:82:22:e5:cf:f6:de:d6:b0:91: 2f:1a:15:3e:1a:b0:9c:72:19:c8:cd:5c:c0:26:df: fb:00:45:1e:0f:5b:68:b8:f3:5f:af:24:53:53:33: 74:90:3e:b6:fa:a7:7c:43:50:f9:e7:fc:75:60:f8: 86:ad:4d:07:19:91:e6:08:21:1a:c3:3c:da:a1:2d: e5:c9:a0:43:cc:35:34:93:5a:67:d8:44:58:a6:f0: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:07:E0:9F:A2:13:B0:93:2F:8D:DF:81:71:E1:F9:D9:C6:9F:95 X509v3 Authority Key Identifier: keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b4:56:89:6c:83:6f:b4:43:19:9d:51:1b:24:4e:19:ac:e0: 4e:d6:ae:30:3d:2e:7f:fd:c2:75:a7:fd:13:d3:ce:0f:9d:7c: 12:4d:d2:8c:ee:d1:56:61:c1:96:c0:b9:31:7d:03:d0:18:8a: 85:d0:4f:58:65:46:e5:24:4f:a5:91:1e:e5:4a:f8:dd:ac:53: 7d:57:a9:87:eb:b3:bf:e1:e0:ce:b9:af:44:ec:68:0f:b8:cb: f7:97:35:c6:b2:7b:65:a5:ab:c4:71:02:90:33:a0:88:5f:43: 06:2f:b2:f8:29:b2:45:2b:e2:a5:53:22:77:67:1e:21:e0:b5: 13:f5:63:96:9e:c1:25:b1:b4:da:d5:4e:75:c9:35:27:51:2f: 17:cb:52:98:e0:e6:64:bd:eb:7d:69:8a:15:3a:ec:63:cb:43: 7c:6a:eb:38:8c:aa:5e:2a:9b:f7:62:42:38:31:e2:6d:0b:f8: cf:2f:1d:f6:55:fd:aa:96:9e:f3:e0:67:6a:f9:61:8d:f9:76: 6c:61:f0:25:ae:8e:af:3e:4c:06:41:4f:70:f8:b1:e3:15:d9: 1b:e3:4f:b8:4b:6c:b5:7d:12:0e:09:a9:5f:3b:74:4d:5d:79: 03:c2:dc:14:dd:21:ab:3b:a0:84:a0:da:f1:a3:76:03:47:f1: 11:b0:42:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzAzNzExMC8GA1UEBRMoQjY0QjgxMDQyQUI0MTE2MDdEODYwNzZGRUZDOUU1OTYy NkJCODgxNjAeFw0yNTEyMDUwNTI4MzJaFw0yNTEyMTIwNTI4MzJaMBgxFjAUBgNV BAMTDTY5MzI2ZDgwLTdjNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ0/1+ejNe2FthcVqm8AefjGuQooSc58S2jd/K5ocW1vminjg90PxKCvDRPNbe otmpXuv2X9wmuppkw9UogfO0iVmpCNS/EGmHke7NYJ0hpZhLVaZ989QrdtEyhhCW kisvvUNe4MhPBSsR33f6CcbOFW3nLEy73ialJxDIx+ION0koxqCXKGj5ZYHWrJk1 WOSI5I2mkfsSDZ5Cj1dXKkqsudybzsiWgBbXcoIi5c/23tawkS8aFT4asJxyGcjN XMAm3/sARR4PW2i481+vJFNTM3SQPrb6p3xDUPnn/HVg+IatTQcZkeYIIRrDPNqh LeXJoEPMNTSTWmfYRFim8ENfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYnAH4J+i E7CTL43fgXHh+dnGn5UwHwYDVR0jBBgwFoAUtkuBBCq0EWB9hgdv78nllia7iBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMDM3LzhCOERFMjdFOEVE QzExRjA5ODgwQzQ3OEM0RjlBRTAyL3RrdUJCQ3EwRVdCOWhnZHY3OG5sbGlhN2lC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGt1QkJDcTBFV0I5aGdkdjc4bmxsaWE3aUJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz MDM3LzhCOERFMjdFOEVEQzExRjA5ODgwQzQ3OEM0RjlBRTAyL3RrdUJCQ3EwRVdC OWhnZHY3OG5sbGlhN2lCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALq0Volsg2+0QxmdURskThms4E7WrjA9Ln/9wnWn/RPTzg+dfBJN0ozu 0VZhwZbAuTF9A9AYioXQT1hlRuUkT6WRHuVK+N2sU31XqYfrs7/h4M65r0TsaA+4 y/eXNcaye2Wlq8RxApAzoIhfQwYvsvgpskUr4qVTIndnHiHgtRP1Y5aewSWxtNrV TnXJNSdRLxfLUpjg5mS9631pihU67GPLQ3xq6ziMql4qm/diQjgx4m0L+M8vHfZV /aqWnvPgZ2r5YY35dmxh8CWujq8+TAZBT3D4seMV2RvjT7hLbLV9Eg4JqV87dE1d eQPC3BTdIas7oISg2vGjdgNH8RGwQpA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:47 2025 by rpki-client