This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: rennxdlZqAy7zsImodOYyxsTTsQdzrZImoZ9k2y0eKE= Subject key identifier: FA:39:4F:79:9B:A3:DD:9A:65:4D:BF:82:93:0A:17:37:B8:71:12:B8 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 05BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 05B3 Signing time: Sun 28 Dec 2025 22:18:10 +0000 Manifest this update: Sun 28 Dec 2025 22:18:09 +0000 Manifest next update: Sun 04 Jan 2026 22:18:09 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: SUwQHE0LlKusEMsIPVUJLD6J6VY/BehyIolqCgEE6RE=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: jmBBk9G7I6kWRNtiv9uf3HqTLrY1UbUUMPlSvnBT+V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 22:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Dec 28 22:18:09 2025 GMT Not After : Jan 4 22:18:09 2026 GMT Subject: CN=6951aca1-f72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:fc:2b:d1:2a:93:48:76:3f:8c:6e:fe:2e: f1:8a:09:9b:4d:0c:a6:85:94:93:36:87:90:6b:c3: 78:dc:0d:21:8e:3c:f9:88:c2:b1:b7:44:9a:53:21: 2d:a8:f0:0c:3e:d1:18:8e:12:b5:48:af:50:20:4f: 66:dc:f4:d7:31:8e:cb:9e:f8:83:5a:e9:04:d7:42: a2:43:c3:be:83:16:c6:24:52:51:7f:29:15:fe:29: 57:06:33:56:85:d7:c1:80:92:41:a4:af:62:62:f1: 7b:32:51:22:31:dd:f5:22:6b:f8:65:0e:95:f6:45: 86:59:17:1e:a0:db:84:d8:cf:c6:8e:49:da:dc:03: 0c:01:32:91:d7:94:58:3c:40:f2:d3:da:b3:64:c4: 33:2c:1b:d1:58:f6:51:87:2f:2e:ac:30:d2:8f:c0: e5:94:0a:1f:9f:eb:1b:8f:0d:07:18:3e:34:47:4c: 49:74:63:fb:19:ee:39:a8:4a:06:d1:fe:48:d9:8e: 08:f9:ba:b8:4b:47:52:ca:70:07:eb:de:5b:3d:ac: fe:0d:74:da:a5:28:2a:8d:73:a3:82:3f:51:90:08: 9d:47:ea:be:7a:4a:3e:25:4d:35:31:fe:41:02:0d: 1c:3e:91:73:d9:36:91:13:90:b1:02:c1:8f:a9:24: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:39:4F:79:9B:A3:DD:9A:65:4D:BF:82:93:0A:17:37:B8:71:12:B8 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:44:7d:4b:df:08:29:54:8e:3d:ce:60:a1:ca:a3:eb:6e:30: 1f:77:6a:ad:b7:b3:0c:35:f9:81:21:3a:64:71:de:1a:06:d7: 4d:b6:7e:65:64:be:d2:9b:f2:d6:cc:16:82:25:64:7a:b8:f5: 1e:b0:28:4d:28:b9:ad:06:a2:4e:a7:a4:a0:de:25:67:d2:0a: f2:8a:b6:8e:04:32:59:61:3e:fd:a3:01:0b:a4:06:a1:64:04: e8:c9:21:d8:5a:f5:0c:f3:bb:af:c8:a5:b5:b4:78:76:24:e5: 7f:8d:66:48:f0:da:ef:8e:2c:f7:8a:63:15:1b:71:46:83:ae: 47:b5:77:6a:55:ea:ce:48:1a:51:7f:6c:f1:92:78:f4:e7:66: 48:2c:8c:26:01:34:c2:c5:77:5b:4e:b1:7f:12:b7:d7:fa:e8: 52:b6:52:c8:6b:21:80:c5:05:b1:58:04:52:59:2c:cc:bb:58: f4:99:32:c9:35:6c:eb:01:e2:9c:18:c5:38:40:1f:1c:18:e4: 86:c1:06:f6:47:a8:02:d8:d0:4d:a6:92:ef:38:3f:4f:83:b1: 3f:45:27:9d:ee:59:b9:ed:2f:2d:20:b8:16:ce:84:7b:07:e0: 26:14:39:d7:01:4b:cd:da:a2:75:57:53:21:00:1d:86:ea:5c: 3b:e9:15:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjUxMjI4MjIxODA5WhcNMjYwMTA0MjIxODA5WjAYMRYwFAYD VQQDDA02OTUxYWNhMS1mNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthD8K9Eqk0h2P4xu/i7xigmbTQymhZSTNoeQa8N43A0hjjz5iMKxt0SaUyEt qPAMPtEYjhK1SK9QIE9m3PTXMY7LnviDWukE10KiQ8O+gxbGJFJRfykV/ilXBjNW hdfBgJJBpK9iYvF7MlEiMd31Imv4ZQ6V9kWGWRceoNuE2M/Gjkna3AMMATKR15RY PEDy09qzZMQzLBvRWPZRhy8urDDSj8DllAofn+sbjw0HGD40R0xJdGP7Ge45qEoG 0f5I2Y4I+bq4S0dSynAH695bPaz+DXTapSgqjXOjgj9RkAidR+q+eko+JU01Mf5B Ag0cPpFz2TaRE5CxAsGPqSSllQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo5T3mb o92aZU2/gpMKFze4cRK4MB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGRH1L3wgpVI49zmChyqPrbjAfd2qtt7MMNfmBITpkcd4aBtdNtn5l ZL7Sm/LWzBaCJWR6uPUesChNKLmtBqJOp6Sg3iVn0gryiraOBDJZYT79owELpAah ZAToySHYWvUM87uvyKW1tHh2JOV/jWZI8Nrvjiz3imMVG3FGg65HtXdqVerOSBpR f2zxknj052ZILIwmATTCxXdbTrF/ErfX+uhStlLIayGAxQWxWARSWSzMu1j0mTLJ NWzrAeKcGMU4QB8cGOSGwQb2R6gC2NBNppLvOD9Pg7E/RSed7lm57S8tILgWzoR7 B+AmFDnXAUvN2qJ1V1MhAB2G6lw76RUJ -----END CERTIFICATE-----Generated at Tue Dec 30 07:04:36 2025 by rpki-client