This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: 13e/GqmiyK0u3gSfOd2VnhQrjfK0A74oipgyldaUz34= Subject key identifier: 0E:54:5F:BD:1C:FA:80:37:8F:81:E2:80:A6:9E:68:0C:73:90:E3:E9 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 05A7 Signing time: Thu 04 Dec 2025 21:48:48 +0000 Manifest this update: Thu 04 Dec 2025 21:48:47 +0000 Manifest next update: Thu 11 Dec 2025 21:48:47 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: 2TEba21GOlSbO4GmQ8FbPbhls4pJYFizdRQffTruL5M=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: jmBBk9G7I6kWRNtiv9uf3HqTLrY1UbUUMPlSvnBT+V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Dec 4 21:48:47 2025 GMT Not After : Dec 11 21:48:47 2025 GMT Subject: CN=693201c0-8340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:a7:e0:65:aa:b2:08:f1:58:ed:98:50:39: 78:42:48:96:b3:51:f6:f2:16:fb:2d:a8:e8:8b:3d: 41:8f:52:52:1c:9b:1d:9b:27:e9:21:88:55:e2:97: 1e:03:2c:82:c1:c0:6d:fc:cb:f1:e0:7e:be:52:6f: 20:f0:be:c2:ab:77:6e:75:e7:f6:e0:c5:62:e4:90: 0c:53:83:78:b2:34:0b:d5:b5:0a:14:f3:67:ad:5a: 46:02:17:df:f2:9e:95:d6:3f:2c:76:b8:d7:d2:44: 03:81:06:ef:1d:b1:51:40:c8:0c:52:84:54:5a:af: 5a:32:21:fe:fe:88:37:22:c7:93:4d:59:06:03:15: 02:dc:ea:74:b2:1c:58:d6:4f:a8:ea:8a:f9:21:bc: 29:9b:ba:4f:b9:ff:f8:a0:a7:0f:3e:23:21:81:ef: 09:58:85:c9:c8:94:30:0f:48:8d:d2:03:21:c0:80: 80:3a:e5:42:0c:c2:91:f7:d1:0c:98:bc:10:e0:3a: 82:79:96:ab:53:89:7d:35:90:ca:7e:7a:cb:d6:7f: 29:69:b9:17:6b:f8:7f:23:97:cc:5c:d6:a2:9c:4f: 06:db:de:cc:fc:82:32:27:e2:e1:fd:a7:c0:dd:c5: 0e:e4:ab:42:b3:32:d3:ba:c0:99:47:a8:30:39:a0: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:5F:BD:1C:FA:80:37:8F:81:E2:80:A6:9E:68:0C:73:90:E3:E9 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c4:6f:b1:7f:dc:4d:ab:44:94:89:d5:dc:c4:3e:86:fe:30: 73:72:85:d8:72:0f:e0:cb:9c:02:93:87:5a:a0:82:8f:96:f2: be:4f:89:0f:7a:a3:e8:44:07:48:26:c8:eb:63:d5:8b:f5:d7: a9:20:7a:02:a5:4e:9d:dc:43:85:6c:06:a1:98:04:cb:94:83: 1e:e4:ee:99:22:61:e6:49:c3:fc:c4:2c:c8:52:b2:10:b7:4e: b7:0f:da:31:b3:13:e1:77:3f:5b:9c:fb:e2:e7:e9:c0:85:e8: f7:e9:a3:e0:0a:5a:15:ba:51:b1:84:ed:e2:53:4e:ab:d6:9a: 18:68:50:67:e2:01:7a:76:80:1c:01:91:5a:fa:91:12:8c:24: d1:5e:cb:18:83:e7:01:54:f0:d1:a5:06:0b:d9:2b:2c:55:4e: a7:b8:c4:05:28:ab:68:9d:72:9d:0f:c5:1e:7d:30:24:f3:68: 1c:76:a5:00:85:79:32:7c:d1:bb:40:a7:8d:fd:c9:94:44:04: 85:a5:80:ed:6a:3e:0d:48:24:6f:0b:2a:6a:5a:84:c9:a9:8c: 40:84:96:83:e2:83:32:0f:d6:16:28:99:21:31:8e:d2:45:5a: ca:51:d5:cd:c1:92:38:8d:30:b9:b7:f4:19:a4:4d:4e:80:1f: 3a:57:21:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjUxMjA0MjE0ODQ3WhcNMjUxMjExMjE0ODQ3WjAYMRYwFAYD VQQDEw02OTMyMDFjMC04MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz2n4GWqsgjxWO2YUDl4QkiWs1H28hb7Lajoiz1Bj1JSHJsdmyfpIYhV4pce AyyCwcBt/Mvx4H6+Um8g8L7Cq3dudef24MVi5JAMU4N4sjQL1bUKFPNnrVpGAhff 8p6V1j8sdrjX0kQDgQbvHbFRQMgMUoRUWq9aMiH+/og3IseTTVkGAxUC3Op0shxY 1k+o6or5Ibwpm7pPuf/4oKcPPiMhge8JWIXJyJQwD0iN0gMhwICAOuVCDMKR99EM mLwQ4DqCeZarU4l9NZDKfnrL1n8pabkXa/h/I5fMXNainE8G297M/IIyJ+Lh/afA 3cUO5KtCszLTusCZR6gwOaAjqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5UX70c +oA3j4HigKaeaAxzkOPpMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKxG+xf9xNq0SUidXcxD6G/jBzcoXYcg/gy5wCk4daoIKPlvK+T4kP eqPoRAdIJsjrY9WL9depIHoCpU6d3EOFbAahmATLlIMe5O6ZImHmScP8xCzIUrIQ t063D9oxsxPhdz9bnPvi5+nAhej36aPgCloVulGxhO3iU06r1poYaFBn4gF6doAc AZFa+pESjCTRXssYg+cBVPDRpQYL2SssVU6nuMQFKKtonXKdD8UefTAk82gcdqUA hXkyfNG7QKeN/cmURASFpYDtaj4NSCRvCypqWoTJqYxAhJaD4oMyD9YWKJkhMY7S RVrKUdXNwZI4jTC5t/QZpE1OgB86VyEq -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:11 2025 by rpki-client