This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json) Hash identifier: lUGtDDfow47VFF+UMy0rW+AsdGoosZSrBzOta4CpqaU= Subject key identifier: BD:CE:EC:FD:51:23:F4:56:E0:6F:23:1D:DF:2D:10:57:57:A0:CE:4D Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft Manifest number: 9C Signing time: Sun 21 Dec 2025 05:30:15 +0000 Manifest this update: Sun 21 Dec 2025 05:30:14 +0000 Manifest next update: Sun 28 Dec 2025 05:30:14 +0000 Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: 4lW9Nr+6YdbVjzyj1wNL3Sizo6YCvqGkYRIxt8pLIIg=) 2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Validity Not Before: Dec 21 05:30:14 2025 GMT Not After : Dec 28 05:30:14 2025 GMT Subject: CN=694785e7-e4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:87:bd:2e:14:60:67:9f:ad:92:63:90:4b:ce: 61:e9:fb:de:a5:6a:03:31:2e:92:2f:4f:53:51:0b: ba:a1:35:9b:4f:36:b8:ab:e0:55:50:56:18:b9:22: 70:c0:11:49:ce:e9:dd:cc:1c:d7:09:c8:cd:ca:9f: 25:4d:77:d9:b1:d4:ac:e4:7c:e2:5b:a1:58:c7:f6: f7:52:04:53:66:30:e1:0a:fa:74:99:7e:1c:1f:fa: 4c:38:3b:8d:49:6c:aa:eb:0e:2b:05:02:2c:65:ba: 5b:1a:8f:94:14:f6:fb:a7:35:48:18:62:61:0e:6d: fd:9a:cb:53:42:9a:30:d8:f1:b1:f8:8a:c5:a4:e0: 5a:4a:df:36:69:48:fd:43:b5:8d:18:a7:f3:5c:43: de:0e:04:57:8c:68:6d:f3:22:6f:56:bf:a6:bf:bc: da:9a:08:23:6f:a4:ab:97:32:ba:16:03:87:37:91: d6:b4:bc:8a:ed:74:0c:34:a6:de:2b:07:7d:ab:ab: 8d:f3:4c:10:df:3c:2f:8e:6c:78:06:c6:4f:54:5d: 3e:69:ae:0e:36:cd:3d:ea:86:51:62:91:bb:30:6a: 2b:8e:c3:dc:3b:c7:28:a3:29:c7:c5:71:69:9e:ff: df:e3:d6:0e:dd:68:5e:bb:fd:72:7a:18:53:f6:d0: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CE:EC:FD:51:23:F4:56:E0:6F:23:1D:DF:2D:10:57:57:A0:CE:4D X509v3 Authority Key Identifier: keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:44:1c:f6:4e:d2:81:bd:fb:af:ab:f9:25:04:c7:b4:3d: 82:c3:3a:c0:71:5f:13:51:d0:64:82:0e:de:bb:a9:08:b5:33: 4a:c2:ed:20:c5:5a:67:be:01:46:f8:bc:f4:4b:4d:32:19:3d: c2:ca:33:f2:47:f4:b2:36:ef:13:df:73:bc:9c:f7:b0:fa:85: 4b:82:4c:72:8a:ab:4e:83:b2:db:10:4d:e5:89:60:39:da:79: d7:e7:1d:b1:c5:2e:4b:97:de:39:cd:39:ef:c9:c6:cf:fa:0c: 4d:52:1a:f6:e5:26:26:a5:c0:7e:67:e1:92:bb:c2:01:95:96: 08:97:fc:43:14:1b:eb:fd:c4:5a:12:52:7d:ca:f4:f7:68:c9: a6:83:bb:4d:c3:a9:04:04:11:60:cd:d5:70:8c:ff:4f:35:2c: 87:9a:55:75:81:69:52:c2:e9:0d:b4:7e:29:b4:d9:73:2d:ac: f6:06:a7:85:8e:a9:ac:cd:06:dc:2a:d7:be:78:7a:c3:b9:6e: ef:8e:a0:0b:2b:a7:67:95:19:30:51:57:f4:9a:73:de:e6:cd: 53:f9:03:6f:48:99:c7:ee:23:3c:dd:62:63:7c:41:52:d5:42: d2:53:d2:2d:65:8d:16:6f:47:81:f2:e2:b3:59:3d:ea:bd:de: 6d:9d:9a:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMzcxMTAvBgNVBAUTKDRFNjhCMDQ4REQzRERCQTVGNDc4RjFGRDI4OEE4NjE4 QkE5RkFCQUEwHhcNMjUxMjIxMDUzMDE0WhcNMjUxMjI4MDUzMDE0WjAYMRYwFAYD VQQDDA02OTQ3ODVlNy1lNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8oe9LhRgZ5+tkmOQS85h6fvepWoDMS6SL09TUQu6oTWbTza4q+BVUFYYuSJw wBFJzundzBzXCcjNyp8lTXfZsdSs5HziW6FYx/b3UgRTZjDhCvp0mX4cH/pMODuN SWyq6w4rBQIsZbpbGo+UFPb7pzVIGGJhDm39mstTQpow2PGx+IrFpOBaSt82aUj9 Q7WNGKfzXEPeDgRXjGht8yJvVr+mv7zamggjb6SrlzK6FgOHN5HWtLyK7XQMNKbe Kwd9q6uN80wQ3zwvjmx4BsZPVF0+aa4ONs096oZRYpG7MGorjsPcO8cooynHxXFp nv/f49YO3Wheu/1yehhT9tBW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3O7P1R I/RW4G8jHd8tEFdXoM5NMB8GA1UdIwQYMBaAFE5osEjdPdul9Hjx/SiKhhi6n6uq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy8zQ0I3NzlFMEY1 RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2WDBlUEg5S0lxR0dMcWZx Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIzNy8zQ0I3NzlFMEY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2 WDBlUEg5S0lxR0dMcWZxNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwf0Qc9k7Sgb37r6v5JQTHtD2CwzrAcV8TUdBkgg7eu6kItTNKwu0g xVpnvgFG+Lz0S00yGT3CyjPyR/SyNu8T33O8nPew+oVLgkxyiqtOg7LbEE3liWA5 2nnX5x2xxS5Ll945zTnvycbP+gxNUhr25SYmpcB+Z+GSu8IBlZYIl/xDFBvr/cRa ElJ9yvT3aMmmg7tNw6kEBBFgzdVwjP9PNSyHmlV1gWlSwukNtH4ptNlzLaz2BqeF jqmszQbcKte+eHrDuW7vjqALK6dnlRkwUVf0mnPe5s1T+QNvSJnH7iM83WJjfEFS 1ULSU9ItZY0Wb0eB8uKzWT3qvd5tnZol -----END CERTIFICATE-----Generated at Mon Dec 22 12:30:36 2025 by rpki-client