This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: lo0pM05eSFpKUkx9g9k4UbNc1Sy2/U/GwOpD/UG1fxc= Subject key identifier: CD:C3:2C:38:3E:02:55:DD:48:74:C5:DD:E2:DB:92:CF:6E:ED:0C:C4 Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 05BD Signing time: Thu 18 Dec 2025 14:17:54 +0000 Manifest this update: Thu 18 Dec 2025 14:17:54 +0000 Manifest next update: Thu 25 Dec 2025 14:17:54 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: m56qrlHdh8f+6gK1Y/UtKPVS/BllBlb8Li/Inv8PlSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Dec 18 14:17:54 2025 GMT Not After : Dec 25 14:17:54 2025 GMT Subject: CN=69440d12-d78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:fe:84:1d:05:72:f5:58:3f:91:41:78:26: 55:74:1d:c2:c6:20:aa:45:c2:ff:47:f6:6c:02:0c: 7c:b2:59:fe:8d:6e:72:47:a8:79:d5:9a:e8:04:64: 9e:55:5c:0d:39:ca:04:fa:d9:6b:4c:33:e9:7f:ea: 25:f3:eb:11:a7:fd:99:62:ce:bf:c4:88:76:55:6b: 72:2a:d5:49:98:55:90:23:5d:be:c8:40:59:f2:00: 23:b3:f4:5c:9f:d3:c7:bd:6d:e7:45:84:8e:08:cc: cf:25:5b:7b:b9:83:a6:1a:36:67:18:eb:42:73:ca: 6e:0d:11:6b:45:df:3f:97:01:06:97:64:e5:c7:bc: f2:91:ce:dc:ea:6c:fd:4e:ec:f4:90:f8:5e:95:2c: 29:3e:3a:ff:65:29:ff:1e:ab:d8:ed:f9:79:a7:d4: 8f:d0:49:8f:70:da:0c:9b:6d:09:46:a9:0e:67:b1: 32:d3:ec:ec:1a:68:d9:ec:e7:52:52:6d:32:f7:e9: 8f:33:f4:17:57:f1:36:0f:96:2e:6e:68:f7:f3:ab: d1:9c:31:37:d9:64:25:ff:f5:ff:cf:a2:e8:ec:bb: b9:08:d2:49:18:55:6d:fb:90:1a:51:b9:cc:60:2d: cb:aa:a4:40:8c:0d:cd:4f:01:20:09:52:5a:2f:57: dd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C3:2C:38:3E:02:55:DD:48:74:C5:DD:E2:DB:92:CF:6E:ED:0C:C4 X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:4b:62:b8:ab:f1:f7:05:59:1b:69:ef:b1:d6:73:d8:a6:e8: a2:9d:fb:8d:f6:b5:8f:1a:fc:0c:39:cb:cf:c5:6d:d0:61:b7: 32:2a:41:06:80:51:a5:a1:77:ea:a7:ae:05:4c:6b:32:31:fc: fa:c6:32:63:4c:8c:fe:3c:3e:aa:5b:ff:eb:a9:2c:39:0a:d7: 0d:73:9d:67:15:92:d0:0e:34:5f:45:88:b8:e7:78:c8:11:2d: b1:fb:87:b6:9c:0f:69:fc:7e:33:0a:f6:0e:84:43:a0:c2:eb: 9d:66:d9:a2:e4:77:b8:17:a7:75:9b:ae:f6:1f:cf:1e:f5:1d: cd:e6:6a:c1:ed:62:dd:08:97:e3:42:f6:9f:00:d7:63:3b:ef: b3:5c:f7:4d:6c:ce:aa:98:cb:60:12:e4:99:34:3e:98:6c:99: 3a:c8:08:3d:c5:f1:de:31:69:61:0b:0c:2d:38:ac:f8:66:bc: 16:30:d2:6e:1c:82:c0:a1:93:15:3f:84:df:82:32:27:17:72: f1:ad:b5:9c:7c:69:49:83:a3:a3:86:f0:80:70:ba:40:4f:e1: 8b:16:09:b1:db:ba:9c:fe:22:7f:ce:92:d7:8b:bf:5f:a0:7b: 0b:5f:f7:bb:9b:88:93:a3:a0:3c:f8:90:57:ae:33:b4:34:f7: d1:ce:b8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjUxMjE4MTQxNzU0WhcNMjUxMjI1MTQxNzU0WjAYMRYwFAYD VQQDDA02OTQ0MGQxMi1kNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzL+hB0FcvVYP5FBeCZVdB3CxiCqRcL/R/ZsAgx8sln+jW5yR6h51ZroBGSe VVwNOcoE+tlrTDPpf+ol8+sRp/2ZYs6/xIh2VWtyKtVJmFWQI12+yEBZ8gAjs/Rc n9PHvW3nRYSOCMzPJVt7uYOmGjZnGOtCc8puDRFrRd8/lwEGl2Tlx7zykc7c6mz9 Tuz0kPhelSwpPjr/ZSn/HqvY7fl5p9SP0EmPcNoMm20JRqkOZ7Ey0+zsGmjZ7OdS Um0y9+mPM/QXV/E2D5Yubmj386vRnDE32WQl//X/z6Lo7Lu5CNJJGFVt+5AaUbnM YC3LqqRAjA3NTwEgCVJaL1fdHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3DLDg+ AlXdSHTF3eLbks9u7QzEMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYS2K4q/H3BVkbae+x1nPYpuiinfuN9rWPGvwMOcvPxW3QYbcyKkEG gFGloXfqp64FTGsyMfz6xjJjTIz+PD6qW//rqSw5CtcNc51nFZLQDjRfRYi453jI ES2x+4e2nA9p/H4zCvYOhEOgwuudZtmi5He4F6d1m672H88e9R3N5mrB7WLdCJfj QvafANdjO++zXPdNbM6qmMtgEuSZND6YbJk6yAg9xfHeMWlhCwwtOKz4ZrwWMNJu HILAoZMVP4TfgjInF3LxrbWcfGlJg6OjhvCAcLpAT+GLFgmx27qc/iJ/zpLXi79f oHsLX/e7m4iTo6A8+JBXrjO0NPfRzrjD -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:38 2025 by rpki-client