This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: HXad/IEmuDuTMsl3IkSlGZSe2ww6vo5ZI9PUglFL50A= Subject key identifier: 22:91:8A:68:03:E4:F5:2D:E7:A6:B3:0E:9E:26:B0:DC:CC:9B:E8:31 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D4B Signing time: Sat 06 Dec 2025 17:24:51 +0000 Manifest this update: Sat 06 Dec 2025 17:24:51 +0000 Manifest next update: Sat 13 Dec 2025 17:24:51 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: Q5EUuubX2YtE5KucuyD9dKMqGZcwWtUA6IxqknqJJM4=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: aG9Ky47AV0GPRw+yhEkTWuhgTxt+050Je5yrrl9/SOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3404 (0xd4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Dec 6 17:24:51 2025 GMT Not After : Dec 13 17:24:51 2025 GMT Subject: CN=693466e3-6c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:76:0e:0f:00:46:80:64:8b:9b:6f:b1:1f: ae:a3:82:bb:36:e3:10:e7:a5:6e:2a:6f:11:5c:86: b9:7f:c8:e7:bd:1e:ae:9f:f1:38:1e:77:cf:9f:06: 2d:03:85:4a:25:02:f9:63:30:63:0a:49:31:de:04: b2:b1:0e:5d:4e:40:73:3c:f6:7b:4a:5d:03:87:33: 67:a7:ab:dd:26:ae:94:27:9e:d3:c5:99:fe:dc:81: 1f:6b:56:5b:b3:3a:2e:b5:07:50:6c:a4:ce:c1:86: 0d:c1:d4:02:f4:29:bf:f2:96:94:23:6c:37:fa:20: 93:27:64:be:cb:65:91:70:fc:56:6c:ae:05:69:1f: fd:35:63:10:7a:c3:5e:eb:6d:2d:72:c0:9f:48:65: 12:d6:68:ee:b0:8a:3d:62:35:e3:7f:8a:7a:77:52: 79:e7:3b:16:90:af:ce:48:b6:7e:bd:d4:54:d6:ba: b0:0d:63:3a:2f:dd:48:ef:84:9b:39:6d:c4:24:3c: da:ae:ff:91:ba:94:e8:df:74:e5:f4:be:49:96:65: 37:b0:50:98:3d:c0:91:4c:55:40:6d:cb:8a:80:2b: 3d:46:c0:ba:ba:12:3c:6e:af:a6:30:48:79:1f:b7: 02:9b:66:a6:de:39:38:3a:6d:4a:ba:13:8c:4d:5d: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:91:8A:68:03:E4:F5:2D:E7:A6:B3:0E:9E:26:B0:DC:CC:9B:E8:31 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:86:a1:4b:60:61:22:a1:86:22:b1:32:13:70:d3:86:24:a4: 16:29:f1:5d:1f:8b:0a:e3:3c:bc:ab:69:7a:55:f7:94:88:da: 90:89:fd:5d:3d:c2:96:59:17:5c:2d:05:dc:8b:22:1b:50:c6: 9c:97:a0:be:91:ca:0a:94:54:f8:11:48:a7:56:cf:ba:97:ac: 40:a4:3c:e8:62:cd:5e:07:56:4c:bd:5b:1e:08:dc:72:9d:0b: e6:45:26:1c:37:8c:08:41:3f:f0:83:87:86:76:07:b7:db:4d: df:c7:48:ce:b3:aa:1a:ba:73:14:93:2f:ae:82:2f:06:bd:52: df:35:e6:41:94:9a:e2:db:7f:a6:56:cf:11:e8:4e:52:7f:f7: f5:b7:5d:7b:03:08:c4:d1:5d:08:20:ac:dd:15:2b:4c:3c:d8: 9c:00:5d:b5:d5:54:ef:5e:ea:e9:d6:d1:1f:5e:93:0f:d0:5a: 4e:eb:4b:d1:49:3c:de:79:32:85:e8:e5:a7:7c:f0:82:89:e2: 5f:fb:27:f0:6f:b9:f9:3f:a1:34:00:3a:42:36:d7:bf:9e:a2: 24:4a:88:f8:1c:0d:d9:b1:c7:49:58:ff:bf:0d:de:17:fa:4c: bf:4b:66:01:d6:9e:3a:fd:79:5f:49:ce:2b:de:7f:1e:d0:91: 9b:70:78:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUxMjA2MTcyNDUxWhcNMjUxMjEzMTcyNDUxWjAYMRYwFAYD VQQDEw02OTM0NjZlMy02YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/t2Dg8ARoBki5tvsR+uo4K7NuMQ56VuKm8RXIa5f8jnvR6un/E4HnfPnwYt A4VKJQL5YzBjCkkx3gSysQ5dTkBzPPZ7Sl0DhzNnp6vdJq6UJ57TxZn+3IEfa1Zb szoutQdQbKTOwYYNwdQC9Cm/8paUI2w3+iCTJ2S+y2WRcPxWbK4FaR/9NWMQesNe 620tcsCfSGUS1mjusIo9YjXjf4p6d1J55zsWkK/OSLZ+vdRU1rqwDWM6L91I74Sb OW3EJDzarv+RupTo33Tl9L5JlmU3sFCYPcCRTFVAbcuKgCs9RsC6uhI8bq+mMEh5 H7cCm2am3jk4Om1KuhOMTV0/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKRimgD 5PUt56azDp4msNzMm+gxMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIhqFLYGEioYYisTITcNOGJKQWKfFdH4sK4zy8q2l6VfeUiNqQif1d PcKWWRdcLQXciyIbUMacl6C+kcoKlFT4EUinVs+6l6xApDzoYs1eB1ZMvVseCNxy nQvmRSYcN4wIQT/wg4eGdge3203fx0jOs6oaunMUky+ugi8GvVLfNeZBlJri23+m Vs8R6E5Sf/f1t117AwjE0V0IIKzdFStMPNicAF211VTvXurp1tEfXpMP0FpO60vR STzeeTKF6OWnfPCCieJf+yfwb7n5P6E0ADpCNte/nqIkSoj4HA3ZscdJWP+/Dd4X +ky/S2YB1p46/XlfSc4r3n8e0JGbcHh+ -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:28 2025 by rpki-client