This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json) Hash identifier: fT21StiIRWiK/DXYtDU33yuWBgWPN+CmA7g45SBaWCU= Subject key identifier: 94:61:B1:43:0A:C8:76:16:14:7F:80:84:F7:0E:4E:2A:61:0B:41:2A Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 142F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft Manifest number: 1414 Signing time: Wed 24 Dec 2025 16:40:58 +0000 Manifest this update: Wed 24 Dec 2025 16:40:58 +0000 Manifest next update: Wed 31 Dec 2025 16:40:58 +0000 Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: ITTgtTIuUi0wZpUqndXMsqF/Ra68/QQKMsDN2eaF370=) 2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: bw4oyTaqoqfdp29e2lYAU370gy2twH+W8CpSCQrTXLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5167 (0x142f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Dec 24 16:40:58 2025 GMT Not After : Dec 31 16:40:58 2025 GMT Subject: CN=694c179a-e2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:68:af:94:10:72:c3:0f:10:1c:36:ad:d5: fe:80:4a:a3:63:a6:05:90:67:fa:e0:43:33:a2:25: 2b:65:c2:ee:73:af:a0:d7:3f:4a:d8:44:e6:36:1b: 8d:e8:dd:9e:aa:4b:ca:cb:c9:ca:26:58:ee:07:82: 48:6d:1e:25:fd:ed:b6:f0:d9:8d:15:d5:c0:82:6e: 0b:68:cd:a2:81:81:6c:48:58:15:75:3b:9b:7b:51: d3:12:82:15:2b:78:45:de:2a:58:f9:e5:97:35:9f: b0:07:b2:0b:92:70:a1:75:5f:54:25:2d:12:60:2e: a0:8d:87:fe:0e:b8:7e:c0:6e:cc:a2:f7:47:e2:00: 58:b5:b4:aa:95:39:2b:a8:b6:06:5f:c5:4a:49:6d: b3:6e:20:73:80:37:42:3d:5c:ad:a2:81:dd:87:52: 5e:4a:63:9c:fc:6a:a2:e2:9d:c8:dd:11:7d:c8:ab: 68:4c:ca:eb:4c:d1:af:1b:4e:b3:f3:73:a3:3b:c2: c7:e9:27:f2:52:b4:f7:c3:7e:51:41:fb:42:d7:16: c4:86:c9:3e:1f:ad:8d:22:a4:17:61:48:cc:ba:07: 0c:03:07:a3:fa:a9:c9:2d:fa:2e:fa:2e:aa:16:f4: 5c:77:9f:91:51:26:70:35:d1:00:36:4b:06:89:7b: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:61:B1:43:0A:C8:76:16:14:7F:80:84:F7:0E:4E:2A:61:0B:41:2A X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5c:83:56:41:a8:2e:70:95:10:11:c5:13:fa:d4:90:41:82: 01:2b:33:3b:06:81:9e:29:1c:f1:30:30:e6:98:a1:85:83:c2: 73:8f:fc:86:1b:01:e6:d1:67:bd:4c:2c:fa:4f:08:75:10:ad: c1:f1:00:c3:a6:87:05:2f:b8:f9:a4:58:1a:89:1e:c0:e2:46: 99:04:20:21:c1:f6:08:e5:1e:b9:7c:0e:3a:58:06:0b:40:d6: b1:d0:bf:25:38:b0:a6:07:4f:70:60:71:eb:b0:ae:86:9d:90: 0d:d8:90:76:01:cc:57:88:45:4e:c8:4c:dc:ca:d2:4b:5f:31: 82:43:40:35:d6:6d:9b:33:86:63:3f:87:c7:73:27:cf:3b:4f: d1:32:86:b4:02:11:5b:f7:dd:5b:67:30:cc:04:56:35:c8:57: ff:bd:5d:96:66:07:68:ca:65:3f:ab:c9:62:99:84:3e:d2:a5: 70:b9:7f:cf:bd:22:48:12:11:49:65:46:3d:1a:fd:b0:25:4f: 79:82:f9:51:da:27:36:fa:93:f6:3b:1a:6d:5d:bd:ee:69:53: 2f:2f:0a:49:3b:bc:6b:0b:d7:09:60:a5:c5:3e:06:7d:42:1f: 97:74:00:7d:2c:aa:d3:5b:e0:aa:6c:1a:69:d2:5f:fa:12:de: 4a:23:71:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjUxMjI0MTY0MDU4WhcNMjUxMjMxMTY0MDU4WjAYMRYwFAYD VQQDDA02OTRjMTc5YS1lMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+5or5QQcsMPEBw2rdX+gEqjY6YFkGf64EMzoiUrZcLuc6+g1z9K2ETmNhuN 6N2eqkvKy8nKJljuB4JIbR4l/e228NmNFdXAgm4LaM2igYFsSFgVdTube1HTEoIV K3hF3ipY+eWXNZ+wB7ILknChdV9UJS0SYC6gjYf+Drh+wG7MovdH4gBYtbSqlTkr qLYGX8VKSW2zbiBzgDdCPVytooHdh1JeSmOc/Gqi4p3I3RF9yKtoTMrrTNGvG06z 83OjO8LH6SfyUrT3w35RQftC1xbEhsk+H62NIqQXYUjMugcMAwej+qnJLfou+i6q FvRcd5+RUSZwNdEANksGiXs4uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRhsUMK yHYWFH+AhPcOTiphC0EqMB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QxNS83QzY4NUE4Mjk1QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxP cFlVb0M3TXhMekVPRWd3T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANXINWQagucJUQEcUT+tSQQYIBKzM7BoGeKRzxMDDmmKGFg8Jzj/yG GwHm0We9TCz6Twh1EK3B8QDDpocFL7j5pFgaiR7A4kaZBCAhwfYI5R65fA46WAYL QNax0L8lOLCmB09wYHHrsK6GnZAN2JB2AcxXiEVOyEzcytJLXzGCQ0A11m2bM4Zj P4fHcyfPO0/RMoa0AhFb991bZzDMBFY1yFf/vV2WZgdoymU/q8limYQ+0qVwuX/P vSJIEhFJZUY9Gv2wJU95gvlR2ic2+pP2OxptXb3uaVMvLwpJO7xrC9cJYKXFPgZ9 Qh+XdAB9LKrTW+CqbBpp0l/6Et5KI3F7 -----END CERTIFICATE-----Generated at Thu Dec 25 21:07:22 2025 by rpki-client