This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: OoAaeaaQQRi89d0Si7jLwIftaMW40nDIDTCMLAN3NyQ= Subject key identifier: 2D:16:DC:AB:23:6A:4D:E5:EE:E6:E9:EB:10:5A:96:6A:D5:33:DD:79 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 283B Signing time: Sat 06 Dec 2025 15:23:02 +0000 Manifest this update: Sat 06 Dec 2025 15:23:01 +0000 Manifest next update: Sat 13 Dec 2025 15:23:01 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: RE7DUjHcXA1Rjo2853vKJzLhO09xyjK4OVVKWIK6DZU=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: fl8kEHK67RQKryz0U9mrmcAk8nUhjCtO9JFUbRGLeN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10322 (0x2852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Dec 6 15:23:01 2025 GMT Not After : Dec 13 15:23:01 2025 GMT Subject: CN=69344a56-595e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:e8:8f:79:d2:9b:2b:d7:46:ea:d0:52:79: 1c:a9:f0:aa:bb:82:b9:e0:d0:f5:ec:f4:10:8e:4c: 20:59:c5:38:f1:f0:52:ea:cc:38:71:13:03:49:a6: c4:49:15:ca:10:cc:9e:b9:07:5a:e6:4b:23:67:34: 66:b4:6f:d5:7d:b8:8e:4f:79:ab:72:59:7e:73:e2: 93:06:43:d6:e6:b7:cc:69:95:89:b9:c3:0f:71:9d: 7c:20:7c:4d:6a:c5:af:c9:3d:ca:9b:72:7e:4d:70: 59:a6:13:20:a6:84:88:3f:08:58:78:1a:08:3f:f0: bf:1a:70:b7:99:75:7e:0e:2f:cb:bf:ef:9f:7d:fa: 9f:b4:1f:07:35:e0:c8:dd:c2:e9:93:85:67:09:84: f6:1f:b1:b1:81:4f:c6:a9:76:06:3c:bf:cc:9c:cb: 33:79:00:cc:92:ce:27:2f:62:0c:c0:45:c3:3d:e0: 57:3d:a0:7a:4e:f1:69:13:1d:f4:25:37:63:c5:15: 5c:60:16:c6:3a:fc:91:0f:d1:e1:aa:02:7d:bc:ff: 0e:ed:5f:21:70:0f:82:7f:ba:17:b0:90:55:15:08: e1:f3:63:8f:37:82:26:24:f7:ee:fe:bf:a9:2d:a5: 10:b4:c6:1c:2a:32:dd:1d:47:eb:aa:21:bf:57:54: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:16:DC:AB:23:6A:4D:E5:EE:E6:E9:EB:10:5A:96:6A:D5:33:DD:79 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a3:44:aa:4e:be:65:db:62:90:8d:07:da:f1:a8:48:92:1d: 71:a3:d5:72:fb:19:9d:3f:ad:b3:34:8f:9b:ca:fd:93:4f:39: 85:83:d4:d5:61:e3:23:a6:08:65:b4:10:8d:72:96:e1:0c:06: d0:90:ca:e6:ca:21:73:c4:b6:03:30:c5:f5:32:5c:30:5d:b9: 44:77:1d:4d:92:42:fa:d3:1a:52:01:90:32:5a:93:b8:16:e0: 60:08:69:f2:3e:cd:74:0e:4c:7e:13:5f:ab:5c:df:02:15:b2: b9:1d:ab:c2:34:8e:5d:58:16:d7:a7:fb:19:0b:fa:67:f3:ca: 14:81:1f:5f:39:fc:52:67:21:9f:ad:02:63:04:cc:7c:53:81: f0:12:dd:78:1a:e3:df:b0:4e:a4:48:f4:f9:4e:2f:8c:38:d4: 3e:92:61:32:7e:6e:44:24:79:14:08:ad:5c:83:d7:2e:42:0e: 2d:fc:e6:07:57:e9:df:46:c3:12:4a:72:10:df:a4:4e:ce:47: 3d:cc:af:fd:2f:b7:ce:7a:65:2f:88:8e:e9:6e:05:e9:f8:db: bc:73:14:13:3e:94:99:1e:a5:4a:0a:86:d4:9b:df:f0:07:7d: af:fc:51:9a:df:fb:17:96:26:6e:6b:d6:ad:96:eb:22:f5:28: c4:59:20:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUxMjA2MTUyMzAxWhcNMjUxMjEzMTUyMzAxWjAYMRYwFAYD VQQDEw02OTM0NGE1Ni01OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwzoj3nSmyvXRurQUnkcqfCqu4K54ND17PQQjkwgWcU48fBS6sw4cRMDSabE SRXKEMyeuQda5ksjZzRmtG/VfbiOT3mrcll+c+KTBkPW5rfMaZWJucMPcZ18IHxN asWvyT3Km3J+TXBZphMgpoSIPwhYeBoIP/C/GnC3mXV+Di/Lv++fffqftB8HNeDI 3cLpk4VnCYT2H7GxgU/GqXYGPL/MnMszeQDMks4nL2IMwEXDPeBXPaB6TvFpEx30 JTdjxRVcYBbGOvyRD9HhqgJ9vP8O7V8hcA+Cf7oXsJBVFQjh82OPN4ImJPfu/r+p LaUQtMYcKjLdHUfrqiG/V1SajQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0W3Ksj ak3l7ubp6xBalmrVM915MB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlo0SqTr5l22KQjQfa8ahIkh1xo9Vy+xmdP62zNI+byv2TTzmFg9TV YeMjpghltBCNcpbhDAbQkMrmyiFzxLYDMMX1MlwwXblEdx1NkkL60xpSAZAyWpO4 FuBgCGnyPs10Dkx+E1+rXN8CFbK5HavCNI5dWBbXp/sZC/pn88oUgR9fOfxSZyGf rQJjBMx8U4HwEt14GuPfsE6kSPT5Ti+MONQ+kmEyfm5EJHkUCK1cg9cuQg4t/OYH V+nfRsMSSnIQ36ROzkc9zK/9L7fOemUviI7pbgXp+Nu8cxQTPpSZHqVKCobUm9/w B32v/FGa3/sXliZua9atlusi9SjEWSD1 -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:32 2025 by rpki-client