This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: SykJre4am4PEN1Rd/zvtUVMZOvQ3CTmLAc1bVusirvg= Subject key identifier: B8:09:56:A5:CF:26:F0:6F:6C:FC:10:7A:45:54:05:58:0B:FD:4B:9B Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 0236 Signing time: Fri 05 Dec 2025 00:16:35 +0000 Manifest this update: Fri 05 Dec 2025 00:16:35 +0000 Manifest next update: Fri 12 Dec 2025 00:16:35 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: /Ef45Ss6Qyx2hV/bnGpCY/MKpcE/GjSpkTDSEghUj4g=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Dec 5 00:16:35 2025 GMT Not After : Dec 12 00:16:35 2025 GMT Subject: CN=69322463-1218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:f1:a4:33:d2:55:53:6c:a3:68:9b:b3:e4: 4f:50:1c:13:f3:6e:e6:06:7f:e1:23:65:ce:71:c3: 5b:10:07:7e:69:8b:62:0d:57:10:5f:a3:6b:34:b3: bc:e7:1c:ea:09:ef:79:84:c5:40:74:0d:51:37:ac: e9:33:a5:90:23:1a:ad:af:da:9c:75:21:97:bc:97: 2a:a4:22:1e:50:52:4b:06:7d:b1:cd:d6:46:bc:60: ff:82:99:2f:04:42:1f:95:a6:97:c8:a7:80:30:86: 5e:b3:2e:e2:4a:f3:78:bd:61:9d:be:ed:9e:1b:f8: 06:ec:bb:40:4b:5d:9e:8a:d9:99:e6:89:a1:3b:cc: fd:53:4f:a4:f4:57:0d:f0:86:ff:94:0c:61:12:99: d0:ae:70:e7:49:87:5c:69:d4:29:c2:ce:2b:d0:74: f9:69:7c:ec:fe:e5:af:39:92:7d:3f:7e:3d:74:d0: 23:a4:b9:ba:aa:0c:7f:68:f0:6c:f1:f5:0a:7c:99: 54:6f:25:69:69:ee:eb:91:6a:6c:89:3a:36:52:db: 42:bf:ff:15:29:8b:01:d5:df:d1:0f:f7:4b:a7:91: 9a:3e:26:70:5b:9c:3f:c0:64:f3:26:de:d6:59:ac: 01:cc:40:65:69:c6:29:4f:5d:a3:a2:03:b4:a7:9e: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:09:56:A5:CF:26:F0:6F:6C:FC:10:7A:45:54:05:58:0B:FD:4B:9B X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b3:4c:e7:36:04:2d:4e:ba:0c:fb:44:23:52:1b:58:b2:42: eb:13:59:b5:0e:5e:66:be:d8:30:e9:00:cd:82:a7:24:4f:9c: d1:33:25:aa:3b:8f:e8:39:ba:4f:cc:51:1e:49:9d:04:2c:55: 63:b3:c2:1f:fc:63:c7:cf:1e:4d:72:03:87:fa:cc:79:5c:4f: 8e:17:42:14:1e:96:ed:3b:23:b5:85:e0:ca:22:29:0d:82:7f: 09:a1:17:fc:7b:d6:d3:91:f4:c4:1e:02:58:3f:56:f8:c9:28: 4a:02:46:08:d2:e4:22:02:1b:0d:c0:65:ae:5c:58:38:9d:43: c0:7c:7a:5b:b1:d3:0d:89:ce:06:12:53:2f:24:fd:92:1c:89: 03:40:e7:5f:f2:00:e3:87:8b:35:23:bd:b5:10:ff:65:29:2e: 11:ee:44:5c:76:2c:49:f0:a2:d5:a2:08:d9:d0:4c:e4:f4:d2: fb:b6:0a:d4:90:5e:35:a6:eb:b5:cf:73:21:ca:3f:40:bd:11: 71:ed:ed:f9:18:8d:af:ac:23:e2:64:13:3d:81:0c:93:79:52: 91:e5:9e:fe:47:2d:4f:a0:ed:ce:d9:f0:5c:00:16:dc:f2:83: 0f:f4:c7:72:da:ee:3d:94:39:b2:01:70:51:09:b3:77:2e:76: 8d:92:6f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUxMjA1MDAxNjM1WhcNMjUxMjEyMDAxNjM1WjAYMRYwFAYD VQQDEw02OTMyMjQ2My0xMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/XxpDPSVVNso2ibs+RPUBwT827mBn/hI2XOccNbEAd+aYtiDVcQX6NrNLO8 5xzqCe95hMVAdA1RN6zpM6WQIxqtr9qcdSGXvJcqpCIeUFJLBn2xzdZGvGD/gpkv BEIflaaXyKeAMIZesy7iSvN4vWGdvu2eG/gG7LtAS12eitmZ5omhO8z9U0+k9FcN 8Ib/lAxhEpnQrnDnSYdcadQpws4r0HT5aXzs/uWvOZJ9P349dNAjpLm6qgx/aPBs 8fUKfJlUbyVpae7rkWpsiTo2UttCv/8VKYsB1d/RD/dLp5GaPiZwW5w/wGTzJt7W WawBzEBlacYpT12jogO0p551jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgJVqXP JvBvbPwQekVUBVgL/UubMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjs0znNgQtTroM+0QjUhtYskLrE1m1Dl5mvtgw6QDNgqckT5zRMyWq O4/oObpPzFEeSZ0ELFVjs8If/GPHzx5NcgOH+sx5XE+OF0IUHpbtOyO1heDKIikN gn8JoRf8e9bTkfTEHgJYP1b4yShKAkYI0uQiAhsNwGWuXFg4nUPAfHpbsdMNic4G ElMvJP2SHIkDQOdf8gDjh4s1I721EP9lKS4R7kRcdixJ8KLVogjZ0Ezk9NL7tgrU kF41puu1z3Mhyj9AvRFx7e35GI2vrCPiZBM9gQyTeVKR5Z7+Ry1PoO3O2fBcABbc 8oMP9Mdy2u49lDmyAXBRCbN3LnaNkm++ -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:11 2025 by rpki-client