This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: 8WnVBJDe93FYXdzfFDEf52NUcchPk/eoNMQzs9Iu7NM= Subject key identifier: 9F:86:12:D2:C8:2C:5B:BD:1A:05:28:EE:F3:5C:F8:8F:6A:59:F2:FE Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 83 Signing time: Sun 07 Dec 2025 04:48:14 +0000 Manifest this update: Sun 07 Dec 2025 04:48:14 +0000 Manifest next update: Sun 14 Dec 2025 04:48:14 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: jm8Jd3O7tWqnUYVvq+/KAcKQlrPolVkMa/q1NmslOgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Dec 7 04:48:14 2025 GMT Not After : Dec 14 04:48:14 2025 GMT Subject: CN=6935070e-3715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:fd:9b:fa:ab:a6:a3:4c:ab:69:97:20:e1: 55:d6:1b:c9:20:45:39:9c:90:ed:5f:d7:bb:20:ba: 5f:27:63:ff:fb:2d:fe:87:76:cf:72:e9:15:66:b0: 5a:51:87:fa:20:83:58:81:53:e4:36:6d:59:f4:89: 58:50:4a:f9:fe:62:5d:38:a2:d1:09:a2:70:d9:fa: 12:9f:dd:7a:a7:03:4c:b5:77:c7:ab:74:e0:74:c8: 77:93:ac:e4:b1:0b:94:b5:dc:4b:a3:95:59:9b:b8: ea:a8:e6:c6:f3:30:76:ef:06:bb:16:92:b4:fc:b1: a9:d4:10:78:31:0e:8a:96:d1:2f:c5:75:6a:9d:e2: 7a:2f:cb:04:b5:f8:8d:5c:5c:ed:6e:2f:e2:d8:ba: 14:08:8d:af:97:b7:e8:5a:17:71:8c:e4:29:c7:74: c6:16:92:c8:90:64:f8:7e:fc:1e:0f:4b:7a:7f:67: 7b:ec:32:ba:98:00:61:98:a1:24:d2:ee:74:43:64: 53:69:80:74:86:cb:f9:91:91:c5:1b:9a:70:40:8c: fb:75:ec:29:d6:fd:ff:56:43:26:02:b1:3d:27:5a: 77:b0:43:0b:21:39:80:2c:f8:89:f8:c5:34:ee:a2: fb:62:e1:48:b2:ed:97:5b:57:3c:5c:73:b5:d0:8b: 1f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:12:D2:C8:2C:5B:BD:1A:05:28:EE:F3:5C:F8:8F:6A:59:F2:FE X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8b:a2:5b:36:9a:ae:8e:b2:0b:e0:87:a9:cd:9e:17:71:ea: 61:6e:6b:e0:4b:33:34:30:44:b9:ca:73:96:58:fc:e0:99:09: 8b:51:57:86:bd:01:85:29:f4:3e:c8:80:20:09:47:e9:4e:ee: 27:a0:ac:2b:a9:77:57:9c:a0:c3:73:56:e1:b1:54:94:69:29: 34:5f:94:1c:31:33:1e:4d:52:c2:ba:be:17:e2:31:07:5a:e4: 10:df:60:6f:09:72:c9:57:ba:39:3d:b0:13:ef:16:85:63:86: b2:86:69:80:df:10:48:22:4b:df:60:a6:1c:70:a7:d5:1c:cb: 82:83:a4:37:68:37:57:7e:c1:84:bc:2a:0f:eb:21:ab:29:c8: b4:3a:60:f2:9b:e9:9a:89:e5:57:f6:87:10:b6:a6:f7:76:40: bd:07:78:b3:c3:78:30:a8:0e:4f:e7:2e:73:1e:5f:be:49:37: f7:80:77:3d:54:df:d2:84:a4:5d:52:48:f6:e4:e3:be:a8:fb: 7a:8d:59:b1:3f:1c:87:29:28:7b:c0:71:99:42:67:bc:9c:16: e2:5d:b8:fd:75:5e:4a:88:fd:44:fc:f0:3f:fc:c5:14:3d:29: a1:d0:d1:27:fb:9d:cd:2e:d6:6f:96:70:99:c2:35:35:6a:7a: 17:60:46:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDkyMEU3RDA5MUYxNTU2OUYyRDgzNDBDNjU4MkI5NTk1 RUMwNjU2ODAwHhcNMjUxMjA3MDQ0ODE0WhcNMjUxMjE0MDQ0ODE0WjAYMRYwFAYD VQQDEw02OTM1MDcwZS0zNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1a39m/qrpqNMq2mXIOFV1hvJIEU5nJDtX9e7ILpfJ2P/+y3+h3bPcukVZrBa UYf6IINYgVPkNm1Z9IlYUEr5/mJdOKLRCaJw2foSn916pwNMtXfHq3TgdMh3k6zk sQuUtdxLo5VZm7jqqObG8zB27wa7FpK0/LGp1BB4MQ6KltEvxXVqneJ6L8sEtfiN XFztbi/i2LoUCI2vl7foWhdxjOQpx3TGFpLIkGT4fvweD0t6f2d77DK6mABhmKEk 0u50Q2RTaYB0hsv5kZHFG5pwQIz7dewp1v3/VkMmArE9J1p3sEMLITmALPiJ+MU0 7qL7YuFIsu2XW1c8XHO10IsfkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+GEtLI LFu9GgUo7vNc+I9qWfL+MB8GA1UdIwQYMBaAFJIOfQkfFVafLYNAxlgrlZXsBlaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GMUM3NDQ3RTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZwOHRnMERHV0N1Vmxld0dW b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1ZvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GMUM3NDQ3RTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZw OHRnMERHV0N1Vmxld0dWb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5i6JbNpqujrIL4IepzZ4XcephbmvgSzM0MES5ynOWWPzgmQmLUVeG vQGFKfQ+yIAgCUfpTu4noKwrqXdXnKDDc1bhsVSUaSk0X5QcMTMeTVLCur4X4jEH WuQQ32BvCXLJV7o5PbAT7xaFY4ayhmmA3xBIIkvfYKYccKfVHMuCg6Q3aDdXfsGE vCoP6yGrKci0OmDym+maieVX9ocQtqb3dkC9B3izw3gwqA5P5y5zHl++STf3gHc9 VN/ShKRdUkj25OO+qPt6jVmxPxyHKSh7wHGZQme8nBbiXbj9dV5KiP1E/PA//MUU PSmh0NEn+53NLtZvlnCZwjU1anoXYEbA -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:33 2025 by rpki-client