This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: kDtfTOBjrPFFXp+H3OqAanmf5DCWrbXuegL6bzVV4lM= Subject key identifier: EA:A2:5D:D7:1A:88:3D:20:AE:1F:BC:48:39:D2:F2:9B:5B:1F:96:39 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 05C6 Signing time: Sat 06 Dec 2025 21:54:13 +0000 Manifest this update: Sat 06 Dec 2025 21:54:12 +0000 Manifest next update: Sat 13 Dec 2025 21:54:12 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: nSs2/EDtaW369A6rO6EtXCxU+CcY/dx3COq/oKqybLg=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Dec 6 21:54:12 2025 GMT Not After : Dec 13 21:54:12 2025 GMT Subject: CN=6934a605-c989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:02:59:aa:fd:aa:ab:34:c6:f3:d6:c0:0c: 65:fc:b6:30:fb:5b:d2:09:45:9c:f4:77:30:20:45: 22:72:be:ec:f3:98:f9:ca:d3:e9:3d:a2:59:dc:63: 49:d5:b8:3f:16:91:69:76:5f:b7:b2:ed:ce:e4:9c: 0a:ee:f2:e4:05:ba:83:1b:3c:6d:d5:e7:50:fa:42: df:60:d8:6c:a9:82:12:43:03:c5:a9:f1:c1:98:c3: 2a:f4:f3:7f:e2:80:5f:8e:f1:64:70:20:d1:29:8b: b6:bb:98:d6:e9:7e:7a:60:38:b3:c2:47:39:7c:d4: e5:f8:84:d7:a6:ff:c9:c2:d1:18:f7:b7:ff:4f:49: c7:26:9e:02:18:b3:ac:44:8d:27:df:73:8a:df:fe: 8f:1a:c8:b0:a4:00:97:4c:53:77:be:5a:af:a6:fc: 43:ea:d0:fb:01:27:81:9e:3e:27:e9:ed:92:f9:f7: bf:ad:66:8d:16:97:c4:a8:8c:0a:55:fd:0b:4b:51: 5d:9a:56:08:25:76:62:e1:2f:c8:b2:df:79:99:5d: 32:9f:ed:67:45:43:6a:c6:e8:62:da:1e:66:fc:2f: 49:8b:46:35:db:44:18:8f:bd:52:5a:85:12:29:65: d1:7d:c9:1b:79:b7:74:8b:33:32:62:5b:14:35:cc: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A2:5D:D7:1A:88:3D:20:AE:1F:BC:48:39:D2:F2:9B:5B:1F:96:39 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:95:11:b9:9a:26:06:5f:db:5e:85:7c:bb:bf:72:7a:59: 30:05:07:21:c0:fb:e0:0a:c8:d9:bc:3d:f1:c2:1c:61:00:7a: 84:03:ae:21:d7:cf:f4:fe:28:4a:33:de:7e:88:0d:0e:14:af: 31:b8:b0:be:f2:b4:d7:64:2d:db:1d:ed:5c:96:52:5b:1a:77: 50:d8:9a:c7:2e:74:2a:b1:8c:5d:ff:8f:8d:88:ec:62:5f:b2: 6c:30:4e:27:f0:2f:4c:ca:df:d5:6e:b4:85:2c:68:ce:ce:06: 43:8a:b6:c9:76:df:92:8b:52:82:8d:0c:00:68:83:4e:f1:7a: 6c:37:31:c8:55:f0:22:40:ae:c0:30:87:29:be:28:eb:4e:e7: 03:1c:a5:9a:d3:a9:b9:78:ac:ef:37:e2:62:34:fe:ed:ca:99: 37:ba:3b:83:ef:fa:6e:a2:3a:32:2b:87:33:02:57:e5:66:f5: 0e:4f:f0:69:b7:16:25:0f:fe:98:1f:ef:a0:38:83:80:a2:1e: 76:7a:df:07:ae:92:50:71:cc:cd:e9:c8:5e:8a:ff:9d:a5:27: db:92:3d:d2:6c:af:6f:66:21:48:d5:c4:a5:7d:8a:ce:53:5b: 66:c6:7a:32:52:7f:d7:d7:30:bb:29:3b:b7:34:08:fd:8c:8b: db:5d:57:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUxMjA2MjE1NDEyWhcNMjUxMjEzMjE1NDEyWjAYMRYwFAYD VQQDEw02OTM0YTYwNS1jOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY0CWar9qqs0xvPWwAxl/LYw+1vSCUWc9HcwIEUicr7s85j5ytPpPaJZ3GNJ 1bg/FpFpdl+3su3O5JwK7vLkBbqDGzxt1edQ+kLfYNhsqYISQwPFqfHBmMMq9PN/ 4oBfjvFkcCDRKYu2u5jW6X56YDizwkc5fNTl+ITXpv/JwtEY97f/T0nHJp4CGLOs RI0n33OK3/6PGsiwpACXTFN3vlqvpvxD6tD7ASeBnj4n6e2S+fe/rWaNFpfEqIwK Vf0LS1FdmlYIJXZi4S/Ist95mV0yn+1nRUNqxuhi2h5m/C9Ji0Y120QYj71SWoUS KWXRfckbebd0izMyYlsUNcymhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqiXdca iD0grh+8SDnS8ptbH5Y5MB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOrZURuZomBl/bXoV8u79yelkwBQchwPvgCsjZvD3xwhxhAHqEA64h 18/0/ihKM95+iA0OFK8xuLC+8rTXZC3bHe1cllJbGndQ2JrHLnQqsYxd/4+NiOxi X7JsME4n8C9Myt/VbrSFLGjOzgZDirbJdt+Si1KCjQwAaINO8XpsNzHIVfAiQK7A MIcpvijrTucDHKWa06m5eKzvN+JiNP7typk3ujuD7/puojoyK4czAlflZvUOT/Bp txYlD/6YH++gOIOAoh52et8HrpJQcczN6cheiv+dpSfbkj3SbK9vZiFI1cSlfYrO U1tmxnoyUn/X1zC7KTu3NAj9jIvbXVfT -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:49 2025 by rpki-client