This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: NpNl08tEFY48XV3cvKj3Vt+iQy2/P+xfSyfpyl6g7MY= Subject key identifier: 0F:F6:2B:F4:9D:7C:0B:7B:C5:D5:C2:A0:78:00:94:62:71:BC:97:B8 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 070C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 06EA Signing time: Thu 18 Dec 2025 21:30:12 +0000 Manifest this update: Thu 18 Dec 2025 21:30:12 +0000 Manifest next update: Thu 25 Dec 2025 21:30:12 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: Rqi1SvyxxMxlHgXSW9BtL+9KgdluikGxhbGp/J2o+o8=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1804 (0x70c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Dec 18 21:30:12 2025 GMT Not After : Dec 25 21:30:12 2025 GMT Subject: CN=69447264-99d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9b:7c:9f:e4:10:e9:7f:cf:98:82:ff:49:91: 61:f3:c2:19:4d:12:99:09:da:d4:3d:70:05:3e:a8: 9a:03:b7:b7:13:93:fc:48:53:83:b2:6c:91:cc:82: b7:19:37:c0:1e:e7:9f:50:e9:09:c2:ec:59:1c:59: ab:3e:78:0f:5c:f8:39:11:da:92:58:de:bc:a8:8a: 23:20:9b:d5:5e:d0:83:d0:92:9a:11:12:c8:b5:6c: 1a:5d:94:c0:b0:81:3b:b5:01:70:4d:36:c2:54:13: 2f:0b:2f:9b:16:87:93:62:85:61:77:9f:a2:91:05: 67:13:69:f9:a1:7e:a5:bf:1c:67:50:7e:d9:47:b7: e8:5f:b8:cf:2b:a2:d5:b1:b5:32:94:1a:23:da:12: 0e:cb:fc:13:f7:4a:bb:e7:5e:c6:e2:f5:a3:78:13: 2e:c6:12:4e:25:13:54:83:5c:11:32:0e:57:c9:b1: 4a:6c:8e:f6:a4:fa:bb:fe:5f:12:38:db:72:9b:7c: 02:8b:76:e8:f6:bb:5d:de:34:08:d1:9d:96:04:63: eb:a2:99:87:d4:fc:9a:d2:a8:f3:15:18:c4:3a:65: 35:8a:06:22:0f:9a:5b:24:09:18:04:50:9d:df:c1: 29:dc:20:5e:a4:d9:47:9f:d2:f9:07:bf:31:ac:2e: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:2B:F4:9D:7C:0B:7B:C5:D5:C2:A0:78:00:94:62:71:BC:97:B8 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:32:57:bb:03:ff:25:3b:ba:c5:58:9a:b7:fd:eb:05:4d:18: bf:dc:e6:c5:6a:3c:e5:d5:9a:bd:91:94:16:09:40:8a:3d:19: 8a:08:39:04:b0:54:c8:61:38:e6:77:5c:dd:0f:a0:14:1d:57: e6:bb:21:33:9b:f4:79:2b:e9:75:aa:ed:26:5c:e8:40:49:68: ba:50:1c:49:d5:b8:6b:a2:22:9a:77:4c:74:e6:76:a2:b5:36: 58:c9:d0:bf:94:1d:13:1f:24:8f:77:00:40:74:db:dd:c1:7b: 1f:16:41:7e:83:05:30:dc:81:89:09:46:b8:02:7f:13:44:cb: c8:c3:f2:b0:61:ba:0f:dd:a9:74:70:97:c8:f3:e1:65:d0:ee: 98:fc:b5:3a:8c:e6:38:c1:07:9d:5d:f9:f5:b0:aa:04:a7:03: 59:62:b5:30:08:54:10:cd:29:69:95:25:9d:12:ac:fe:40:21: 8f:55:01:db:30:f0:69:2a:48:99:e7:7d:a8:ae:29:20:02:33: 47:90:bd:73:1b:c7:b5:82:36:67:63:ef:b2:bb:6f:8d:4e:2b: 7e:a2:cd:1b:6b:a1:7c:e2:d1:bf:1c:29:06:33:1d:2f:50:7e: 99:9c:bc:62:29:6a:67:cf:e4:27:c2:31:00:27:4f:b6:56:e1: 05:eb:08:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUxMjE4MjEzMDEyWhcNMjUxMjI1MjEzMDEyWjAYMRYwFAYD VQQDDA02OTQ0NzI2NC05OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Zt8n+QQ6X/PmIL/SZFh88IZTRKZCdrUPXAFPqiaA7e3E5P8SFODsmyRzIK3 GTfAHuefUOkJwuxZHFmrPngPXPg5EdqSWN68qIojIJvVXtCD0JKaERLItWwaXZTA sIE7tQFwTTbCVBMvCy+bFoeTYoVhd5+ikQVnE2n5oX6lvxxnUH7ZR7foX7jPK6LV sbUylBoj2hIOy/wT90q7517G4vWjeBMuxhJOJRNUg1wRMg5XybFKbI72pPq7/l8S ONtym3wCi3bo9rtd3jQI0Z2WBGPropmH1Pya0qjzFRjEOmU1igYiD5pbJAkYBFCd 38Ep3CBepNlHn9L5B78xrC7OawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/2K/Sd fAt7xdXCoHgAlGJxvJe4MB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHMle7A/8lO7rFWJq3/esFTRi/3ObFajzl1Zq9kZQWCUCKPRmKCDkE sFTIYTjmd1zdD6AUHVfmuyEzm/R5K+l1qu0mXOhASWi6UBxJ1bhroiKad0x05nai tTZYydC/lB0THySPdwBAdNvdwXsfFkF+gwUw3IGJCUa4An8TRMvIw/KwYboP3al0 cJfI8+Fl0O6Y/LU6jOY4wQedXfn1sKoEpwNZYrUwCFQQzSlplSWdEqz+QCGPVQHb MPBpKkiZ532orikgAjNHkL1zG8e1gjZnY++yu2+NTit+os0ba6F84tG/HCkGMx0v UH6ZnLxiKWpnz+QnwjEAJ0+2VuEF6whT -----END CERTIFICATE-----Generated at Sat Dec 20 22:52:42 2025 by rpki-client