This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File: TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier: cT/qKZiLZT84MsH/OGmOmHYjBXCYSpSbv2j4Vs6ocJE=
Subject key identifier: F0:53:FC:E0:5A:E5:D9:BB:13:5F:A5:C7:D8:AD:57:35:56:A6:E1:3D
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number: 0496
Signing time: Thu 04 Dec 2025 22:33:00 +0000
Manifest this update: Thu 04 Dec 2025 22:33:00 +0000
Manifest next update: Thu 11 Dec 2025 22:33:00 +0000
Files and hashes: 1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: Qhc7VDrB0M+4rRPszqFTbBHtnhLL7J9HaYCRpc1cnQA=)
2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: RiGNiFnNAoJRKUyYrUN1wLZV9I9idQnh7FmtgNq/Suc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Validity
Not Before: Dec 4 22:33:00 2025 GMT
Not After : Dec 11 22:33:00 2025 GMT
Subject: CN=69320c1c-2fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:a0:af:69:5f:0c:f9:1d:64:72:77:1c:8b:
4d:96:21:0d:fc:03:5a:d4:c3:e8:5e:e0:68:0b:f8:
c6:a3:bf:45:39:0f:2c:84:9d:bd:96:47:b4:85:dc:
36:4a:08:d8:1f:16:44:6d:34:42:58:75:e8:e6:a5:
36:24:dd:d3:a2:44:81:c0:99:6f:b0:d3:58:5b:27:
2c:d9:91:17:9a:26:1c:9e:e5:86:ee:a1:44:88:99:
ac:a5:e7:a1:8d:39:0e:84:fa:f2:8d:11:18:b7:c9:
33:73:d1:23:c4:f7:63:af:8e:f2:c3:7d:8e:b7:57:
21:44:7c:3c:d4:70:13:9b:7f:7f:a0:d3:10:86:8f:
62:73:4a:2d:34:f0:e5:80:9e:b0:b1:b5:cf:ec:e5:
fa:58:9c:7e:6e:f2:25:85:f6:32:d5:08:7d:25:6c:
0a:e5:3b:77:f1:e8:fe:3d:95:d2:54:85:c8:94:f4:
83:4a:22:c9:ff:03:1c:e8:36:da:fa:00:90:9a:38:
f1:b9:43:b3:2e:b2:bf:b4:9f:c3:31:a5:7e:67:ad:
9f:89:48:16:32:fe:58:65:b5:64:b6:7d:94:81:bf:
40:17:b7:3c:8b:63:48:0d:f4:da:ab:bc:b5:6c:bc:
c3:c6:38:d9:8b:5d:b7:35:68:bd:2b:ee:46:4f:45:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:53:FC:E0:5A:E5:D9:BB:13:5F:A5:C7:D8:AD:57:35:56:A6:E1:3D
X509v3 Authority Key Identifier:
keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:e0:f4:15:a0:9c:ed:16:91:75:bb:bd:9d:aa:34:13:82:
b2:4e:a1:57:0e:d5:66:fc:5d:11:33:f0:4d:a7:69:63:77:af:
6a:21:d9:64:ab:be:fa:f6:51:d5:d0:f5:03:95:75:8c:94:eb:
d8:d4:31:85:22:84:a8:a3:92:d0:b4:63:93:0b:cd:84:47:80:
ca:8f:03:ce:53:30:b0:ca:f0:ba:b2:c8:f3:39:22:61:4a:c5:
f8:5e:d5:e6:e8:a8:ae:cc:93:fa:dd:c8:e8:36:4a:36:a6:9c:
4c:4b:85:36:84:1d:66:cb:31:72:3d:95:63:82:92:40:5c:46:
5d:e8:1a:88:5a:85:23:21:f7:12:51:76:21:fe:95:82:e5:1c:
8c:d8:ff:ef:0f:bd:4a:79:eb:9d:52:5a:0a:77:d3:22:b8:42:
45:76:7e:53:a8:ad:c9:f3:ed:17:dd:e0:7e:14:44:59:34:d6:
45:19:28:e9:53:97:87:ff:02:f8:3c:50:e7:13:df:a2:b4:6b:
f4:ea:66:f3:78:dd:b7:21:fc:31:c6:9c:41:31:b8:89:64:9b:
72:7a:74:fa:66:dc:dc:51:df:b9:79:5a:95:76:9f:0b:14:d6:
3b:c0:dd:a3:fc:99:44:40:58:62:a3:61:8b:36:f5:02:48:20:
7d:3c:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:48 2025 by rpki-client