This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: rHt9GLl1XiTIcihKRIo9YhVVSSfDtrcohaEcgLdFKDA= Subject key identifier: 59:D8:30:14:80:78:2E:8D:DF:61:F0:4D:D4:5C:7A:7E:5E:84:97:B5 Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0198 Signing time: Fri 05 Dec 2025 01:57:32 +0000 Manifest this update: Fri 05 Dec 2025 01:57:31 +0000 Manifest next update: Fri 12 Dec 2025 01:57:31 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: 8BQBiC34YCP4dtVPl86tELc6oPsR/KM4MxFKJZfmT6Y=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: 0DyvesGS9JiJBxSgGWdTCs5ap0e8SUR4oSJ/LQG2GvQ=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: 47CtM1yN1CdjUlF4SY8eSFCkgrsejSEAp2dNpEZ2S0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Dec 5 01:57:31 2025 GMT Not After : Dec 12 01:57:31 2025 GMT Subject: CN=69323c0b-8958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:1b:40:26:2f:5a:65:a5:b2:0f:ff:f0:5a: 04:bf:d0:a8:0c:84:a2:e6:97:b2:52:34:1e:b4:fe: 51:81:4b:0a:f4:11:20:f1:f0:db:25:5f:f6:a3:2a: d8:a0:29:84:36:6c:4c:11:0a:5b:3e:2c:55:81:2b: 98:48:cd:a2:90:27:4d:f5:3e:22:4d:fc:89:bf:b4: d7:a7:9b:96:1b:84:b6:ec:11:ac:c3:ee:46:3f:49: 43:da:c0:59:fa:48:5d:c8:ca:72:0e:f1:45:b0:b7: b0:0f:0a:3f:ef:98:dc:d0:56:b3:2e:6a:15:2a:cd: a6:dd:aa:c4:87:bf:2e:ee:c5:14:e4:87:36:fa:7e: 29:c9:51:ff:80:3c:0a:93:f2:02:2b:da:b5:dd:fa: f6:a1:10:81:d3:b7:28:61:c0:a1:98:4d:3a:f4:c5: 31:cc:6f:f7:3c:f9:2b:e8:91:43:f8:d4:2a:1a:3e: 48:67:12:8b:4f:ff:f4:fb:e5:b6:83:f7:f4:71:e3: bc:ee:33:86:02:82:8b:23:e1:ed:2f:c2:4a:5e:bc: cf:92:1a:5f:ef:ac:98:6f:c6:26:5f:de:20:93:01: cf:d4:1c:b1:1c:34:45:ce:71:eb:21:82:f9:1b:ba: 8c:c5:b8:b9:8d:18:17:1c:a6:43:34:66:3e:c7:27: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D8:30:14:80:78:2E:8D:DF:61:F0:4D:D4:5C:7A:7E:5E:84:97:B5 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:90:b3:1b:f9:be:c8:c8:70:8c:bc:c7:34:0e:02:90:c6:41: 65:af:86:a3:58:ef:43:e3:79:6a:89:c8:d3:0d:9b:12:85:9b: 69:7e:ef:6a:32:1f:51:77:10:8d:81:c1:0f:ac:f0:34:6c:0b: 79:66:05:16:9f:be:41:89:a3:d9:c0:4c:42:61:45:2e:a5:46: f7:ad:e7:c5:84:c0:76:e2:6a:df:d4:7c:7b:cc:ad:0d:0d:46: aa:8b:42:70:7c:0d:73:d2:fd:33:de:25:16:a7:b3:ef:47:c0: 0b:6b:f6:27:0c:9e:fc:9c:5d:ac:d5:f6:98:d2:3d:92:35:5b: fc:68:0d:61:cc:d9:7d:7e:0b:50:c3:79:37:90:45:dc:1b:27: 05:79:62:5b:f0:2f:ab:23:e2:11:7b:34:55:98:5c:17:8c:2b: e7:1e:a1:d2:d7:28:b5:37:a5:98:c5:4b:40:22:2a:5e:4a:e3: 22:51:df:ba:04:85:5b:01:3f:6d:65:70:7a:cc:04:80:3e:71: 7a:3f:74:10:2a:81:b5:a0:b7:79:17:14:ba:35:a9:a5:5e:f1: b3:8c:b9:2f:4f:d8:9a:2c:13:74:21:07:1c:19:af:aa:0e:9c: 12:2e:14:dd:ed:61:dd:04:b1:28:21:be:a6:3d:32:67:03:e0: 14:c9:a6:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjUxMjA1MDE1NzMxWhcNMjUxMjEyMDE1NzMxWjAYMRYwFAYD VQQDEw02OTMyM2MwYi04OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy8bQCYvWmWlsg//8FoEv9CoDISi5peyUjQetP5RgUsK9BEg8fDbJV/2oyrY oCmENmxMEQpbPixVgSuYSM2ikCdN9T4iTfyJv7TXp5uWG4S27BGsw+5GP0lD2sBZ +khdyMpyDvFFsLewDwo/75jc0FazLmoVKs2m3arEh78u7sUU5Ic2+n4pyVH/gDwK k/ICK9q13fr2oRCB07coYcChmE069MUxzG/3PPkr6JFD+NQqGj5IZxKLT//0++W2 g/f0ceO87jOGAoKLI+HtL8JKXrzPkhpf76yYb8YmX94gkwHP1ByxHDRFznHrIYL5 G7qMxbi5jRgXHKZDNGY+xychEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnYMBSA eC6N32HwTdRcen5ehJe1MB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfkLMb+b7IyHCMvMc0DgKQxkFlr4ajWO9D43lqicjTDZsShZtpfu9q Mh9RdxCNgcEPrPA0bAt5ZgUWn75BiaPZwExCYUUupUb3refFhMB24mrf1Hx7zK0N DUaqi0JwfA1z0v0z3iUWp7PvR8ALa/YnDJ78nF2s1faY0j2SNVv8aA1hzNl9fgtQ w3k3kEXcGycFeWJb8C+rI+IRezRVmFwXjCvnHqHS1yi1N6WYxUtAIipeSuMiUd+6 BIVbAT9tZXB6zASAPnF6P3QQKoG1oLd5FxS6NamlXvGzjLkvT9iaLBN0IQccGa+q DpwSLhTd7WHdBLEoIb6mPTJnA+AUyaZ3 -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:26 2025 by rpki-client