This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json) Hash identifier: e4qmYim3fLOliNHJKyHkNZvt/vu92gMhZhWS9j/OwJE= Subject key identifier: 8D:EF:C9:60:EF:FF:70:6E:06:63:B0:0E:B8:39:4F:F0:FE:D4:A0:0C Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft Manifest number: 090F Signing time: Sat 20 Dec 2025 19:43:25 +0000 Manifest this update: Sat 20 Dec 2025 19:43:24 +0000 Manifest next update: Sat 27 Dec 2025 19:43:24 +0000 Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: BMH6wzw4KjI2+9ivz9HZarirnE6vbiQVBrhc5tPJeLE=) 2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: Pjk7KOVj7H3BoAMc7NRiJiAFk/4ChSG9JZtPBtMlKPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Validity Not Before: Dec 20 19:43:24 2025 GMT Not After : Dec 27 19:43:24 2025 GMT Subject: CN=6946fc5d-56e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:96:da:31:7e:c5:81:a1:ff:e9:63:4d:cf: 06:7a:fd:69:48:1d:00:7f:8d:ef:6e:a5:9e:33:8a: 67:e9:70:c9:f0:4f:ea:87:df:63:a4:82:e2:58:24: 64:34:bf:7a:97:b7:72:e4:39:23:22:ae:01:fd:04: 17:e2:5e:7e:42:7d:37:13:a0:57:54:10:cd:7f:2c: 59:66:44:f0:4f:5e:f5:97:f1:e5:5d:95:3c:ae:67: 1c:61:54:a5:c8:fc:da:e0:83:df:c8:0a:80:64:e0: a8:ed:c3:da:76:a5:ef:b5:80:3c:8d:9e:12:15:36: 12:12:57:8c:45:b5:37:b0:27:20:1c:65:c0:1f:eb: 8f:d6:27:0c:39:93:1c:b7:1e:56:a2:3e:7b:e7:7f: da:f7:24:e6:b7:2d:93:2e:db:8e:60:36:0b:48:dc: f4:1e:22:a7:69:95:f6:3d:a4:77:2a:d6:2c:ba:a6: 99:36:86:9f:24:28:44:cc:06:02:59:db:ff:3d:11: 51:c4:37:af:b5:d5:8f:9f:e7:9e:9f:f5:6b:b7:07: 9b:f4:9c:b1:49:90:27:c4:ff:a2:93:96:bf:ee:20: 4e:6d:20:92:4c:d0:f7:3a:49:ea:ff:53:e6:99:e8: a4:6a:7e:e9:8a:91:62:6f:d7:22:08:b0:ec:26:87: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EF:C9:60:EF:FF:70:6E:06:63:B0:0E:B8:39:4F:F0:FE:D4:A0:0C X509v3 Authority Key Identifier: keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:be:6a:79:0d:82:c0:6c:39:5e:67:cd:76:a3:45:2c:0d: 67:5c:1d:38:2e:9d:23:c5:83:19:6e:51:c9:3f:f1:8c:ae:53: 43:92:af:cf:6e:e5:bd:68:a1:b1:36:88:56:8a:fd:c8:4d:9e: a6:e6:6d:72:a8:54:f2:78:b3:66:8c:f8:d4:50:2d:5e:f9:96: bc:d0:af:5b:cd:57:93:90:11:f2:e3:c0:46:b2:2a:5e:a2:69: 79:06:c1:c7:d1:d2:8f:e5:38:75:73:15:b6:49:82:df:92:76: 7e:5e:46:67:e0:05:8d:f2:db:35:e2:af:65:63:ea:b9:51:fe: 9f:6f:26:01:15:66:45:ce:94:fa:4f:26:d2:56:09:26:2d:03: cc:d5:d1:5f:6d:5e:3b:14:29:e8:b7:a4:40:96:4c:d5:9c:1a: 40:2b:e0:da:7c:f5:13:30:d6:2f:54:fc:a9:7a:c5:28:c7:33: 12:67:9b:69:c6:51:e3:c6:a3:34:ad:4f:a7:d7:49:e6:56:ef: 83:2e:ff:7a:f3:8b:39:63:ae:e8:fa:e2:c9:50:a8:c6:0e:f8: f6:5a:24:99:24:ae:c5:f7:a4:62:c2:83:0d:d9:e7:c9:6b:20: c7:0b:36:89:13:bc:34:19:cc:58:2b:45:82:b7:a4:69:ad:36: 3b:12:4c:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB M0I3NUE2RDMwHhcNMjUxMjIwMTk0MzI0WhcNMjUxMjI3MTk0MzI0WjAYMRYwFAYD VQQDDA02OTQ2ZmM1ZC01NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuKW2jF+xYGh/+ljTc8Gev1pSB0Af43vbqWeM4pn6XDJ8E/qh99jpILiWCRk NL96l7dy5DkjIq4B/QQX4l5+Qn03E6BXVBDNfyxZZkTwT171l/HlXZU8rmccYVSl yPza4IPfyAqAZOCo7cPadqXvtYA8jZ4SFTYSEleMRbU3sCcgHGXAH+uP1icMOZMc tx5Woj5753/a9yTmty2TLtuOYDYLSNz0HiKnaZX2PaR3KtYsuqaZNoafJChEzAYC Wdv/PRFRxDevtdWPn+een/Vrtweb9JyxSZAnxP+ik5a/7iBObSCSTND3Oknq/1Pm meikan7pipFib9ciCLDsJoc6nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3vyWDv /3BuBmOwDrg5T/D+1KAMMB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8zMjA5MDFDNEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4 ZDd4c09hUUdoWmlqdDFwdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvYr5qeQ2CwGw5XmfNdqNFLA1nXB04Lp0jxYMZblHJP/GMrlNDkq/P buW9aKGxNohWiv3ITZ6m5m1yqFTyeLNmjPjUUC1e+Za80K9bzVeTkBHy48BGsipe oml5BsHH0dKP5Th1cxW2SYLfknZ+XkZn4AWN8ts14q9lY+q5Uf6fbyYBFWZFzpT6 TybSVgkmLQPM1dFfbV47FCnot6RAlkzVnBpAK+DafPUTMNYvVPypesUoxzMSZ5tp xlHjxqM0rU+n10nmVu+DLv9684s5Y67o+uLJUKjGDvj2WiSZJK7F96RiwoMN2efJ ayDHCzaJE7w0GcxYK0WCt6RprTY7EkyC -----END CERTIFICATE-----Generated at Sun Dec 21 13:12:36 2025 by rpki-client