This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: Ih7Wm8COHPJlPMTbFnm2dX1HyjbhkCjJXKqSxla7PxU= Subject key identifier: CB:7A:0C:DE:E6:EE:11:B7:4D:7D:95:DB:4F:78:4C:2B:04:29:84:0A Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 08F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 08D2 Signing time: Sat 20 Dec 2025 19:51:41 +0000 Manifest this update: Sat 20 Dec 2025 19:51:41 +0000 Manifest next update: Sat 27 Dec 2025 19:51:41 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: IPvoMAf98OPsyvKz1Y7QLCHVXX1whL8+mPWyGE4ytjE=) 2: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: /rsO1xFmt4Wd2M5OBk3RGt2QvbZOZFnfqTaQeAfy5hE=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: mTee11vC2WHUjxpYpzX5Cx2s5T+zTjrHiz6j8S4XOXs=) 4: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: Ug8T2jAnxBEFXcI9OyfxIdrB1/QKIOy0uEZRs/AiI9w=) 5: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RJDI3i7hM1nBIPS/73ED0LFQix8Jwqczz+z+Slz7wW8=) 6: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: tqRni/vRCybcm/Qe5j/RJ1ji818pRaDVNQ0/GTu1HOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2293 (0x8f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Dec 20 19:51:41 2025 GMT Not After : Dec 27 19:51:41 2025 GMT Subject: CN=6946fe4d-8f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:0e:1e:91:84:14:a3:89:20:9f:74:42:16: 4c:5e:f9:b4:3f:3b:7c:43:11:ed:7b:1a:6d:bd:a1: 3d:8a:2a:0e:1f:90:00:64:c2:4a:87:ba:8a:0e:2d: 89:6e:24:43:e6:36:5a:f0:7e:3f:d4:dc:cc:80:3e: 29:0e:67:fb:d9:a3:ea:ff:58:da:17:bd:a9:ff:f2: 5a:48:53:dd:cc:3d:e2:09:bb:74:8d:07:b8:2d:cd: aa:13:c0:57:9f:4f:c8:70:d1:e3:7d:e4:48:ce:6c: e5:b4:42:5f:6a:5e:8d:81:91:32:45:9b:e9:92:e5: 28:6d:13:21:6b:3f:65:cb:19:a4:6d:2a:66:9c:36: c5:13:2c:6d:6f:8e:5d:2c:65:7d:90:b8:79:97:20: fa:0a:96:15:9d:30:46:53:b4:bc:ac:53:01:4f:9a: 19:ce:c6:6a:7c:05:7c:0a:20:d9:8a:06:7f:c6:d1: d0:32:c2:16:e8:a4:f2:6d:51:bc:60:17:7c:91:d2: a0:49:88:d1:9a:f4:ab:15:12:e2:60:83:03:19:e1: 3a:3f:d8:fa:86:ae:9d:28:86:80:b5:1a:b5:62:1d: 9a:16:5d:08:a8:90:5f:31:a2:d8:a5:5e:03:c9:ea: ff:e0:12:1b:d3:62:b5:c4:73:d0:ba:4f:69:52:d3: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:0C:DE:E6:EE:11:B7:4D:7D:95:DB:4F:78:4C:2B:04:29:84:0A X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f4:8c:22:cc:8f:51:b3:98:f5:c2:00:9d:5e:0c:b3:5f:8a: b0:b8:2b:b3:38:18:e9:51:c0:4d:3f:a5:f7:f3:a8:03:d8:04: 0e:ce:61:4c:ae:8c:f1:25:ff:3c:14:c9:9b:8f:7b:ec:67:f1: 83:0d:a9:bd:3f:f0:bf:e1:eb:36:2e:86:90:f8:df:92:19:39: 29:3d:30:1a:4f:c4:05:5d:56:60:2a:10:7a:97:36:ac:fa:3b: d3:ba:64:f5:22:52:60:84:14:e8:b0:51:58:0a:ca:91:1c:ac: 00:c7:bb:a9:40:9f:67:22:5b:17:b5:5a:a8:7c:77:54:e9:f6: f2:25:01:f3:18:96:2a:a6:c2:87:2b:16:74:ff:1d:aa:34:c3: bb:5e:3f:93:e6:18:1c:8c:50:8d:5d:7a:69:d2:93:c4:37:cd: 3c:8d:7a:51:a8:fe:33:31:5f:03:98:fe:77:e7:35:5c:2e:da: 8f:97:af:69:80:d0:97:16:ea:82:04:6b:44:bc:6a:88:a4:af: b0:c5:89:6d:0a:31:b0:86:60:72:8b:de:48:f8:40:fb:47:9d: 50:ba:a7:3f:ff:04:d8:68:e6:3d:2b:7c:a9:00:2d:39:4f:e6: 7d:82:09:31:c2:6b:90:f3:86:d8:c1:b9:65:ed:17:8c:a4:41: c5:1a:03:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUxMjIwMTk1MTQxWhcNMjUxMjI3MTk1MTQxWjAYMRYwFAYD VQQDDA02OTQ2ZmU0ZC04ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b4OHpGEFKOJIJ90QhZMXvm0Pzt8QxHtexptvaE9iioOH5AAZMJKh7qKDi2J biRD5jZa8H4/1NzMgD4pDmf72aPq/1jaF72p//JaSFPdzD3iCbt0jQe4Lc2qE8BX n0/IcNHjfeRIzmzltEJfal6NgZEyRZvpkuUobRMhaz9lyxmkbSpmnDbFEyxtb45d LGV9kLh5lyD6CpYVnTBGU7S8rFMBT5oZzsZqfAV8CiDZigZ/xtHQMsIW6KTybVG8 YBd8kdKgSYjRmvSrFRLiYIMDGeE6P9j6hq6dKIaAtRq1Yh2aFl0IqJBfMaLYpV4D yer/4BIb02K1xHPQuk9pUtNVewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMt6DN7m 7hG3TX2V2094TCsEKYQKMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA59IwizI9Rs5j1wgCdXgyzX4qwuCuzOBjpUcBNP6X386gD2AQOzmFM rozxJf88FMmbj3vsZ/GDDam9P/C/4es2LoaQ+N+SGTkpPTAaT8QFXVZgKhB6lzas +jvTumT1IlJghBTosFFYCsqRHKwAx7upQJ9nIlsXtVqofHdU6fbyJQHzGJYqpsKH KxZ0/x2qNMO7Xj+T5hgcjFCNXXpp0pPEN808jXpRqP4zMV8DmP535zVcLtqPl69p gNCXFuqCBGtEvGqIpK+wxYltCjGwhmByi95I+ED7R51Quqc//wTYaOY9K3ypAC05 T+Z9ggkxwmuQ84bYwbll7ReMpEHFGgOJ -----END CERTIFICATE-----Generated at Sun Dec 21 17:17:14 2025 by rpki-client