This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: +lLtZYsb/Xba0JcX3TsP0UVfT605g4yzI29oeviNpHM= Subject key identifier: 69:04:45:68:50:78:59:C8:B7:50:29:F0:B9:FB:A5:9C:37:E2:F4:EA Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 10C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 10C0 Signing time: Sun 28 Dec 2025 17:01:10 +0000 Manifest this update: Sun 28 Dec 2025 17:01:10 +0000 Manifest next update: Sun 04 Jan 2026 17:01:10 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: PriAFeyABKQlzEDOF1K8zEhaHfEeukKFMLHy4j6FQ20=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: XAfo1PZPIVH3Y+cfsdpgLhiwJGHrd3PGIzfnpG6VlMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 17:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4296 (0x10c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Dec 28 17:01:10 2025 GMT Not After : Jan 4 17:01:10 2026 GMT Subject: CN=69516256-0c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4b:ee:d7:23:47:30:c0:b3:df:60:04:3a:fa: 9b:fe:16:40:10:a1:7e:c7:6e:5b:30:87:6a:14:13: 8a:1d:4a:21:d8:e7:ea:da:54:f2:af:2e:8e:fe:fe: ed:0b:ed:b9:7d:41:86:ef:49:bc:d7:09:28:df:52: 40:ba:53:03:4d:1e:8a:aa:57:9d:66:8a:8d:5b:ec: ed:c8:26:8f:99:9a:ec:92:b0:2a:5e:49:a9:53:78: ea:bc:2b:62:91:48:ac:ad:0c:90:72:68:c2:56:b6: bf:2d:15:6e:d3:96:ce:b2:08:d1:7a:a4:99:1f:c5: d4:5e:71:f6:67:43:fb:15:3c:19:56:00:cd:e7:ad: f1:3b:78:aa:bb:97:72:09:3c:7f:7b:8a:43:f1:74: 20:ab:bd:47:dc:06:56:99:5c:75:11:17:ae:ce:e1: e0:c8:25:a0:b5:12:0d:ee:ac:4d:df:bf:a3:77:9c: d9:1f:7e:34:55:15:e2:45:6b:48:63:f3:8d:de:89: 60:a6:38:1e:db:e9:6e:48:0f:c0:bc:bf:45:15:f4: a5:e5:40:1a:85:83:94:38:df:cb:e2:91:0f:ec:0c: 1a:b0:f3:b0:d5:ac:a5:e8:66:cf:0c:99:0e:dc:68: 21:06:fc:70:99:f3:50:dd:6b:d4:2e:5b:05:21:b1: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:04:45:68:50:78:59:C8:B7:50:29:F0:B9:FB:A5:9C:37:E2:F4:EA X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:fd:37:73:8f:18:c4:db:cb:8b:30:0f:53:dd:89:da:9a:0b: 60:cd:2f:2c:06:fc:4a:1c:2e:d3:d6:9e:5f:75:cd:18:3e:28: 0c:d9:15:48:3b:af:22:fa:cb:21:ba:bd:df:aa:bb:0f:b8:4d: 46:74:d3:dd:a2:0d:45:66:8c:c9:8d:01:c7:61:15:7d:2f:66: 31:29:1c:d1:86:ea:6f:38:9e:cf:d9:ad:46:f2:9f:8e:f6:7f: 66:49:91:ad:c9:17:3e:c5:fb:04:d2:ff:e4:f0:3e:55:bb:23: 35:6e:fd:bc:64:c2:0f:64:36:7a:bc:b7:70:0d:75:4d:65:34: 18:ae:60:de:59:d0:f8:fb:63:72:88:a2:5e:ca:95:90:89:a5: 72:ed:5e:d9:a9:f7:61:32:77:ef:de:e6:c3:54:17:17:23:a8: 29:da:04:ab:ca:1a:7e:36:86:d5:b9:0f:ae:6c:80:a1:f3:e5: 87:e0:86:c7:a8:53:7f:69:7b:91:86:27:6c:43:e4:d3:5a:79: 0c:df:58:65:13:f1:db:3a:de:a3:44:41:a4:5c:be:8f:31:76: b0:34:21:1c:be:41:46:42:c8:89:ee:bc:6d:3e:2f:6f:c2:38: 68:02:7a:25:20:37:ea:cb:7c:c7:f1:38:c4:cb:6a:f6:05:1d: db:1a:6e:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUxMjI4MTcwMTEwWhcNMjYwMTA0MTcwMTEwWjAYMRYwFAYD VQQDDA02OTUxNjI1Ni0wYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUvu1yNHMMCz32AEOvqb/hZAEKF+x25bMIdqFBOKHUoh2Ofq2lTyry6O/v7t C+25fUGG70m81wko31JAulMDTR6KqledZoqNW+ztyCaPmZrskrAqXkmpU3jqvCti kUisrQyQcmjCVra/LRVu05bOsgjReqSZH8XUXnH2Z0P7FTwZVgDN563xO3iqu5dy CTx/e4pD8XQgq71H3AZWmVx1EReuzuHgyCWgtRIN7qxN37+jd5zZH340VRXiRWtI Y/ON3olgpjge2+luSA/AvL9FFfSl5UAahYOUON/L4pEP7AwasPOw1ayl6GbPDJkO 3GghBvxwmfNQ3WvULlsFIbFaNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkERWhQ eFnIt1Ap8Ln7pZw34vTqMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD/TdzjxjE28uLMA9T3YnamgtgzS8sBvxKHC7T1p5fdc0YPigM2RVI O68i+sshur3fqrsPuE1GdNPdog1FZozJjQHHYRV9L2YxKRzRhupvOJ7P2a1G8p+O 9n9mSZGtyRc+xfsE0v/k8D5VuyM1bv28ZMIPZDZ6vLdwDXVNZTQYrmDeWdD4+2Ny iKJeypWQiaVy7V7ZqfdhMnfv3ubDVBcXI6gp2gSryhp+NobVuQ+ubICh8+WH4IbH qFN/aXuRhidsQ+TTWnkM31hlE/HbOt6jREGkXL6PMXawNCEcvkFGQsiJ7rxtPi9v wjhoAnolIDfqy3zH8TjEy2r2BR3bGm6l -----END CERTIFICATE-----Generated at Mon Dec 29 06:49:17 2025 by rpki-client