This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: YsL5wgp8RSeeszKDB+zntbabRhxf8LxI6YTRWvy4JBI= Subject key identifier: A6:75:31:41:34:91:20:2C:74:E5:71:DF:8C:45:79:EA:93:D7:B7:2E Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: F4 Signing time: Fri 05 Dec 2025 03:17:38 +0000 Manifest this update: Fri 05 Dec 2025 03:17:37 +0000 Manifest next update: Fri 12 Dec 2025 03:17:37 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: 1rnzbL5mBwfSr1l5LY+acbHmeN7rVl6OoXH0mKQwB3A=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: Ji4FnaAA41M0xkMFETxyoill5QqKNA4PIi1n5I8VonU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Dec 5 03:17:37 2025 GMT Not After : Dec 12 03:17:37 2025 GMT Subject: CN=69324ed1-98ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:24:ca:d6:27:cf:17:06:f1:3a:44:7a:4e: 51:51:7a:47:ce:85:33:da:99:5e:c4:6a:c7:69:3c: e7:90:e1:ca:a5:e8:a5:f8:1b:f2:f7:38:68:1c:01: 49:70:98:6b:a2:d7:e2:35:8b:cc:a5:49:7b:e6:d5: ef:7e:0b:f4:84:60:01:07:d4:35:7f:f2:6d:fc:46: 3c:2a:b0:81:68:ed:1c:81:02:c1:4a:af:cb:46:cb: 98:34:3b:d2:4f:20:74:d1:d3:01:8a:fd:9c:35:79: c1:15:aa:03:2e:0e:42:20:83:a0:f4:63:ea:a1:69: df:25:95:52:f5:a8:9c:99:a8:94:02:e7:7a:67:25: 0c:20:3a:6f:55:04:2e:f5:f7:00:f7:03:cd:44:dc: d7:72:6c:de:66:97:f0:2b:a8:6d:e9:01:d0:58:67: 21:12:af:51:72:0e:c5:9d:aa:6b:e6:f7:b0:fc:f2: 6e:a7:ff:71:1d:dc:a0:8e:30:d9:3a:1b:29:85:c6: 4a:36:e7:df:5b:ea:9f:e8:0b:55:01:5b:0b:72:f3: ff:7e:16:b7:cc:df:63:10:b1:93:52:f4:71:a9:5a: fa:c8:1d:12:29:1a:be:60:35:22:68:22:a5:93:47: ea:1c:21:01:b9:ee:dc:26:87:a1:01:af:20:6a:0a: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:75:31:41:34:91:20:2C:74:E5:71:DF:8C:45:79:EA:93:D7:B7:2E X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:1f:81:72:1b:bc:d3:6b:13:2f:3e:57:4e:0f:6f:02:57:8b: 0b:8b:1d:90:a2:bd:a2:a8:06:a5:9a:d5:b6:58:48:50:94:5f: f6:1d:a4:e4:04:45:77:de:0b:30:24:93:c4:23:b5:53:76:43: 8f:9b:cb:cb:a7:6c:04:8e:9c:f5:a2:de:51:d4:da:89:f4:05: b4:35:85:90:52:d8:c2:dc:0d:7d:2e:70:2a:4e:32:81:5e:a1: 75:1f:04:ae:b7:48:2c:40:96:f4:03:5b:1c:7f:3b:32:4f:cd: 6f:9d:7c:f6:b0:05:73:c4:06:22:f0:f6:1a:0f:00:6e:b1:57: c6:9d:41:27:9a:cb:5f:0d:72:a7:65:1d:54:df:6f:9c:66:a4: da:93:a2:01:fd:9d:65:11:8a:07:7a:5e:22:6d:3e:6a:30:74: 4e:c5:1d:dc:cb:56:d6:43:27:3e:db:93:24:a0:da:6a:e0:20: 12:d4:52:dc:e6:07:4e:11:f3:7a:d2:29:83:60:ee:9b:91:f0: 5c:62:a0:ba:48:26:0b:69:e6:68:ec:42:68:d1:68:c3:b0:a9: 78:30:32:c3:c0:af:fd:a9:35:dc:96:c3:cb:18:a4:8d:d1:80: 8b:62:84:32:af:90:58:c3:07:f1:ae:fa:1e:1f:66:43:a9:9f: 1d:27:32:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjUxMjA1MDMxNzM3WhcNMjUxMjEyMDMxNzM3WjAYMRYwFAYD VQQDEw02OTMyNGVkMS05OGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmwkytYnzxcG8TpEek5RUXpHzoUz2plexGrHaTznkOHKpeil+Bvy9zhoHAFJ cJhrotfiNYvMpUl75tXvfgv0hGABB9Q1f/Jt/EY8KrCBaO0cgQLBSq/LRsuYNDvS TyB00dMBiv2cNXnBFaoDLg5CIIOg9GPqoWnfJZVS9aicmaiUAud6ZyUMIDpvVQQu 9fcA9wPNRNzXcmzeZpfwK6ht6QHQWGchEq9Rcg7Fnapr5vew/PJup/9xHdygjjDZ OhsphcZKNuffW+qf6AtVAVsLcvP/fha3zN9jELGTUvRxqVr6yB0SKRq+YDUiaCKl k0fqHCEBue7cJoehAa8gago5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ1MUE0 kSAsdOVx34xFeeqT17cuMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJH4FyG7zTaxMvPldOD28CV4sLix2Qor2iqAalmtW2WEhQlF/2HaTk BEV33gswJJPEI7VTdkOPm8vLp2wEjpz1ot5R1NqJ9AW0NYWQUtjC3A19LnAqTjKB XqF1HwSut0gsQJb0A1scfzsyT81vnXz2sAVzxAYi8PYaDwBusVfGnUEnmstfDXKn ZR1U32+cZqTak6IB/Z1lEYoHel4ibT5qMHROxR3cy1bWQyc+25MkoNpq4CAS1FLc 5gdOEfN60imDYO6bkfBcYqC6SCYLaeZo7EJo0WjDsKl4MDLDwK/9qTXclsPLGKSN 0YCLYoQyr5BYwwfxrvoeH2ZDqZ8dJzJo -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:11 2025 by rpki-client