This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: cplSAnmkdAtgrcOs6I2jv6/4Ea2pi25qkXqJ/eF3R0U= Subject key identifier: 22:ED:A1:92:7B:93:76:AE:15:5B:38:35:29:C4:82:D5:84:71:C8:8C Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: A0C3 Signing time: Sat 06 Dec 2025 14:27:54 +0000 Manifest this update: Sat 06 Dec 2025 14:27:53 +0000 Manifest next update: Sat 13 Dec 2025 14:27:53 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: BsP9KpHjJ9b7lQozGqg8xi7SUGkrjdTrB1lOreLLEZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Dec 6 14:27:53 2025 GMT Not After : Dec 13 14:27:53 2025 GMT Subject: CN=69343d69-bc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:bd:30:90:4b:4c:d7:a0:29:50:60:ed:a4: 48:63:6d:9d:72:f7:5b:1d:5d:d5:54:79:5d:ac:2c: 14:81:18:d6:67:4f:54:5e:71:ed:4c:2e:d7:90:39: 0b:55:47:2d:1a:db:ae:87:2a:3e:14:07:b8:a7:9c: 65:45:1b:2e:0b:30:ce:83:83:23:fa:a4:8e:7a:90: b0:04:dc:26:3e:95:55:09:39:47:c1:85:91:e7:49: f8:b3:2c:73:ce:8b:14:1b:12:00:ed:0d:53:9c:d9: 40:c5:5c:3c:bb:e9:0d:2f:33:84:83:f1:24:00:b4: b9:2a:b5:69:c7:8d:e2:d4:b0:27:22:1d:0a:1a:68: cf:60:b3:c8:33:e8:87:43:2c:1b:54:af:f5:86:02: f8:3d:c8:70:c6:f5:b9:cf:54:73:a7:90:57:8e:7c: 5c:db:37:e5:4b:47:93:10:bf:f5:0e:8c:43:f7:d8: 75:a2:31:92:34:1a:da:ac:2e:82:64:c1:ef:bc:b7: c5:8c:f6:21:99:04:4c:8e:6a:a3:ed:85:e9:34:e6: 11:25:53:80:ea:f1:c6:68:13:eb:ff:b6:c8:a4:77: b4:9d:f1:8b:25:cf:b2:69:77:15:9a:33:7c:85:7e: 06:da:a1:3c:12:1e:b3:8e:ad:e9:41:1c:b4:38:e0: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:ED:A1:92:7B:93:76:AE:15:5B:38:35:29:C4:82:D5:84:71:C8:8C X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3f:c4:0f:24:f4:6f:0e:5f:4d:89:db:fe:1f:42:a1:ce:5e: 69:df:5c:20:4f:09:81:eb:a3:f9:e5:55:ba:96:0b:8f:3b:53: e3:a3:a6:03:5e:c1:71:66:c5:40:a7:ba:54:f8:11:36:12:4e: 6b:c7:db:3a:b0:72:ba:a8:0c:60:45:00:50:24:c6:7b:4b:41: 6c:e6:fd:7c:ce:1f:4d:c2:39:4a:bd:c9:fe:22:5e:11:3b:ce: 56:2a:9b:ab:bf:10:5b:07:0c:66:d9:03:50:fc:7a:2c:82:05: 51:14:f3:b8:74:5d:5b:9e:d4:27:bb:ef:54:fb:af:19:5b:fd: da:4b:7c:65:28:b7:ea:32:ee:e7:f2:fb:06:de:7d:50:da:df: 4e:5f:3c:ae:98:ed:20:88:0a:82:a7:13:09:32:4d:da:86:48: 87:8e:45:3e:46:0a:72:2f:2d:f1:f2:2d:00:49:34:2e:7c:bf: db:34:79:8a:a1:45:f8:97:33:59:40:b0:ac:73:64:06:84:fe: b9:69:bc:37:bc:4f:75:93:05:b7:69:a1:3e:7d:61:ee:47:08: 24:83:10:b2:0e:85:e9:27:ab:99:c2:a8:94:18:f4:b4:db:88: b4:73:58:0b:dd:af:1f:2b:fc:0d:05:0b:c6:15:67:79:76:43: dd:24:bd:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUxMjA2MTQyNzUzWhcNMjUxMjEzMTQyNzUzWjAYMRYwFAYD VQQDEw02OTM0M2Q2OS1iYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9+9MJBLTNegKVBg7aRIY22dcvdbHV3VVHldrCwUgRjWZ09UXnHtTC7XkDkL VUctGtuuhyo+FAe4p5xlRRsuCzDOg4Mj+qSOepCwBNwmPpVVCTlHwYWR50n4syxz zosUGxIA7Q1TnNlAxVw8u+kNLzOEg/EkALS5KrVpx43i1LAnIh0KGmjPYLPIM+iH QywbVK/1hgL4PchwxvW5z1Rzp5BXjnxc2zflS0eTEL/1DoxD99h1ojGSNBrarC6C ZMHvvLfFjPYhmQRMjmqj7YXpNOYRJVOA6vHGaBPr/7bIpHe0nfGLJc+yaXcVmjN8 hX4G2qE8Eh6zjq3pQRy0OOD5zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLtoZJ7 k3auFVs4NSnEgtWEcciMMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoP8QPJPRvDl9Nidv+H0Khzl5p31wgTwmB66P55VW6lguPO1Pjo6YD XsFxZsVAp7pU+BE2Ek5rx9s6sHK6qAxgRQBQJMZ7S0Fs5v18zh9NwjlKvcn+Il4R O85WKpurvxBbBwxm2QNQ/HosggVRFPO4dF1bntQnu+9U+68ZW/3aS3xlKLfqMu7n 8vsG3n1Q2t9OXzyumO0giAqCpxMJMk3ahkiHjkU+RgpyLy3x8i0ASTQufL/bNHmK oUX4lzNZQLCsc2QGhP65abw3vE91kwW3aaE+fWHuRwgkgxCyDoXpJ6uZwqiUGPS0 24i0c1gL3a8fK/wNBQvGFWd5dkPdJL0O -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:44 2025 by rpki-client