This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: TwR7soVSDfRwkHrkUosk/lHzU9B2F3djE/p7le7b9sY= Subject key identifier: 59:46:D3:3A:C0:00:82:FF:18:41:DB:FB:16:A8:A7:1A:B6:AC:53:DA Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 2200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 2200 Signing time: Thu 18 Dec 2025 15:48:06 +0000 Manifest this update: Thu 18 Dec 2025 15:48:05 +0000 Manifest next update: Thu 25 Dec 2025 15:48:05 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: qjt31EaLtMaShT2u3ICB5GI7gyLIIeVS38/yG4KvzTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8704 (0x2200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Dec 18 15:48:05 2025 GMT Not After : Dec 25 15:48:05 2025 GMT Subject: CN=69442235-e0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:80:53:d1:74:62:25:b2:51:b0:c4:13:8b:b7: 7d:31:2d:03:ac:d8:56:a5:89:f7:64:8f:9c:a4:35: d4:72:e6:81:7c:dc:f5:da:3f:73:cf:b3:98:db:37: fb:50:a8:5b:fb:09:a0:96:bc:ec:e2:00:f3:e2:33: b3:26:bf:41:e4:02:65:20:0b:76:d3:a2:77:8d:e3: 1e:6f:4d:9e:bd:6c:d0:4e:29:79:46:7f:ae:fd:2b: 10:e4:a4:0b:9f:0e:9d:37:00:7c:66:ca:03:63:85: e1:d1:e9:f6:58:59:25:92:98:70:8a:34:3c:0e:fe: 3f:7e:f4:c4:10:21:88:be:e8:07:b2:e8:7f:97:ff: 53:74:1c:d2:d2:38:4a:35:ee:4b:82:48:09:38:40: c8:52:2f:be:1c:63:24:50:7b:7a:90:e3:97:36:0c: b0:d0:7c:14:ad:59:2c:8e:24:2c:fa:d9:c0:b0:8d: 24:6c:2f:68:44:31:97:b2:da:f8:89:a8:eb:a0:bd: b2:f8:40:38:66:91:e6:16:08:ac:6c:13:06:ac:13: 59:a4:24:c2:8c:59:d9:12:02:10:9d:2d:f3:f0:16: 20:a7:d6:5f:f1:28:15:a2:eb:db:69:d5:c5:6d:c1: 17:dd:16:c4:9b:87:b7:f3:27:bb:12:ff:25:a6:a2: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:46:D3:3A:C0:00:82:FF:18:41:DB:FB:16:A8:A7:1A:B6:AC:53:DA X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f5:0c:4f:65:1c:e2:f3:aa:4b:c0:19:29:bf:51:9a:e8:5b:db: 98:ca:fb:e5:ee:8f:53:c9:98:29:e8:da:d0:91:9c:79:3f:1d: 01:1a:d7:96:61:c1:57:ab:9c:0b:ee:2d:10:9d:8a:a8:f8:43: b8:b8:0f:8c:11:b8:4b:a6:7b:88:3e:f8:07:41:d0:83:10:45: bb:ec:c9:56:6b:a1:10:e8:08:5c:60:e1:d5:bd:3b:c0:7a:a2: 98:dc:35:5c:fe:a1:22:62:8c:c8:c0:b9:bb:e7:11:e9:2b:5e: 95:fb:0b:fc:10:a6:bf:cb:38:61:53:2d:c1:43:d9:54:b1:f8: 20:8d:07:d9:e1:10:a3:0d:5f:97:90:0d:23:94:0c:98:0b:fa: b7:e9:68:7b:dc:78:e7:92:63:42:0f:98:c9:6b:e6:e2:6f:28: c8:0e:8d:b0:c3:7e:24:8b:24:a7:84:72:8f:8a:fa:52:91:b5: c3:ab:8a:15:0a:74:ae:af:61:de:25:58:f2:74:9d:17:98:5d: 3e:aa:a5:36:13:9a:2d:89:d5:be:a7:d4:39:88:9b:9e:c0:04: 86:a8:a2:d1:fb:be:bd:ea:3b:8f:e1:bd:bc:dc:68:93:4c:c2: 13:e3:03:5a:a9:b4:5f:a4:b9:25:18:85:3c:dd:c4:e5:26:2c: 97:64:62:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUxMjE4MTU0ODA1WhcNMjUxMjI1MTU0ODA1WjAYMRYwFAYD VQQDDA02OTQ0MjIzNS1lMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oBT0XRiJbJRsMQTi7d9MS0DrNhWpYn3ZI+cpDXUcuaBfNz12j9zz7OY2zf7 UKhb+wmglrzs4gDz4jOzJr9B5AJlIAt206J3jeMeb02evWzQTil5Rn+u/SsQ5KQL nw6dNwB8ZsoDY4Xh0en2WFklkphwijQ8Dv4/fvTEECGIvugHsuh/l/9TdBzS0jhK Ne5LgkgJOEDIUi++HGMkUHt6kOOXNgyw0HwUrVksjiQs+tnAsI0kbC9oRDGXstr4 iajroL2y+EA4ZpHmFgisbBMGrBNZpCTCjFnZEgIQnS3z8BYgp9Zf8SgVouvbadXF bcEX3RbEm4e38ye7Ev8lpqKf6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlG0zrA AIL/GEHb+xaopxq2rFPaMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD1DE9lHOLzqkvAGSm/UZroW9uYyvvl7o9TyZgp6NrQkZx5Px0BGteW YcFXq5wL7i0QnYqo+EO4uA+MEbhLpnuIPvgHQdCDEEW77MlWa6EQ6AhcYOHVvTvA eqKY3DVc/qEiYozIwLm75xHpK16V+wv8EKa/yzhhUy3BQ9lUsfggjQfZ4RCjDV+X kA0jlAyYC/q36Wh73HjnkmNCD5jJa+bibyjIDo2ww34kiySnhHKPivpSkbXDq4oV CnSur2HeJVjydJ0XmF0+qqU2E5otidW+p9Q5iJuewASGqKLR+7696juP4b283GiT TMIT4wNaqbRfpLklGIU83cTlJiyXZGKo -----END CERTIFICATE-----Generated at Fri Dec 19 18:49:42 2025 by rpki-client