This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json) Hash identifier: wOtu7voQnnLtsVZXgzh1T4BrsiR/Obk9arvDO2bXRp4= Subject key identifier: C4:2D:8A:37:39:F3:9D:B1:BB:3A:BE:90:75:21:5D:B6:B9:F8:68:F0 Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft Manifest number: 36 Signing time: Fri 05 Dec 2025 05:21:37 +0000 Manifest this update: Fri 05 Dec 2025 05:21:37 +0000 Manifest next update: Fri 12 Dec 2025 05:21:36 +0000 Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: iM1ezeNAivqeA5l2TcyQ0debM3wLYrGawlcyOOs8jZI=) 2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: 8dKxmjrD276AcnRHkqC+TGlsqBHgEpXfogCpAno8Nm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Validity Not Before: Dec 5 05:21:37 2025 GMT Not After : Dec 12 05:21:36 2025 GMT Subject: CN=69326be1-8579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:d3:da:d8:67:37:6c:26:09:86:0e:3f:fe: 8b:6a:50:30:7d:a8:4c:84:9e:d0:ed:ca:6f:2f:a3: 2b:6e:e6:e3:1d:96:53:b7:bd:ee:ad:a8:79:87:10: 66:3f:5d:8c:57:29:7e:01:9e:13:db:c8:83:0d:ae: a4:d5:d4:be:aa:d3:19:15:cd:a6:e2:5b:95:b1:bc: 9c:a9:20:c1:64:7f:4b:35:8b:55:3f:41:cf:7e:2a: 9b:e3:35:fe:9a:b1:b3:1f:2d:25:45:1a:41:c6:ed: f2:e6:7d:b8:47:bd:3e:bb:24:e3:ae:d2:89:a4:65: 07:59:04:b7:23:89:34:51:52:89:af:dc:77:7f:57: dc:6c:ef:4a:65:96:de:98:3d:c5:bc:91:2f:28:1c: 4a:f6:bf:31:4d:41:e1:1a:19:3c:1a:cb:fa:8c:1d: ac:25:5d:9e:8a:ba:bc:78:c1:c3:8e:82:6e:c6:bc: 88:26:2d:51:b1:89:1a:b0:84:b6:80:f0:48:dd:20: 55:96:c4:dc:bf:49:a1:b0:59:46:61:d6:34:1a:81: 8f:4b:be:b4:50:0e:15:97:4c:67:cc:73:59:b1:d1: 22:6c:15:5f:97:49:20:a4:59:51:6d:e3:9d:34:87: e1:27:06:71:6f:f2:f1:00:65:60:1c:0e:63:32:2e: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2D:8A:37:39:F3:9D:B1:BB:3A:BE:90:75:21:5D:B6:B9:F8:68:F0 X509v3 Authority Key Identifier: keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bc:ac:c6:dc:7c:af:e9:1e:f4:80:cb:0e:1b:52:bf:35:0a: 88:d1:0c:77:d7:61:d4:50:8b:47:19:d5:9c:cf:49:63:a6:f8: e1:e2:a8:21:48:ac:1d:f6:81:c4:7e:75:9a:c5:d3:56:88:7e: fb:48:d9:d6:a6:d6:c2:9f:c1:ac:c1:95:99:6a:1b:ed:63:3b: e8:c5:58:44:9a:2b:bd:32:9d:78:46:47:96:4a:a7:b6:1e:a8: ca:49:80:c8:0f:3c:b3:a5:5d:01:29:43:73:c4:dc:a8:f7:06: fe:72:df:99:c1:db:db:cf:54:9d:46:48:ba:43:59:07:c9:08: 31:90:03:e6:7f:4e:49:cc:32:3a:59:b2:94:81:6a:15:01:60: 4e:4a:56:a7:76:28:0d:d1:2b:1a:5d:c5:91:f6:40:6d:ee:e2: 88:7e:38:4c:86:23:2b:4f:db:a3:d2:20:47:42:7e:71:6d:10: ca:e9:df:22:71:da:3a:3c:0e:0c:b6:03:2d:82:7e:99:0b:9e: 44:80:59:cc:72:e8:0d:1b:2d:b9:a8:fa:f1:1d:78:67:d5:c9: fd:69:d3:4e:48:00:0e:c6:40:5b:35:c8:9b:60:0f:99:9c:e6: 66:4b:c0:9b:7e:65:0c:de:40:b5:33:71:76:97:f8:8e:6c:c4: 45:3c:63:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoRkU0OUNGMzNGQkU0MjQ3QjJCQTFFRTlBNTQ4NEE3NDBB RDNCNkUwRTAeFw0yNTEyMDUwNTIxMzdaFw0yNTEyMTIwNTIxMzZaMBgxFjAUBgNV BAMTDTY5MzI2YmUxLTg1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcmtPa2Gc3bCYJhg4//otqUDB9qEyEntDtym8voytu5uMdllO3ve6tqHmHEGY/ XYxXKX4BnhPbyIMNrqTV1L6q0xkVzabiW5WxvJypIMFkf0s1i1U/Qc9+KpvjNf6a sbMfLSVFGkHG7fLmfbhHvT67JOOu0omkZQdZBLcjiTRRUomv3Hd/V9xs70pllt6Y PcW8kS8oHEr2vzFNQeEaGTway/qMHawlXZ6Kurx4wcOOgm7GvIgmLVGxiRqwhLaA 8EjdIFWWxNy/SaGwWUZh1jQagY9LvrRQDhWXTGfMc1mx0SJsFV+XSSCkWVFt4500 h+EnBnFv8vEAZWAcDmMyLjvLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxC2KNznz nbG7Or6QdSFdtrn4aPAwHwYDVR0jBBgwFoAU/knPM/vkJHsroe6aVISnQK07bg4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzdENTMxNDIwN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2Jn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2tuUE1fdmtKSHNyb2U2YVZJU25RSzA3Ymc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzdENTMxNDIwN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhz cm9lNmFWSVNuUUswN2JnNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADa8rMbcfK/pHvSAyw4bUr81CojRDHfXYdRQi0cZ1ZzPSWOm+OHiqCFI rB32gcR+dZrF01aIfvtI2dam1sKfwazBlZlqG+1jO+jFWESaK70ynXhGR5ZKp7Ye qMpJgMgPPLOlXQEpQ3PE3Kj3Bv5y35nB29vPVJ1GSLpDWQfJCDGQA+Z/TknMMjpZ spSBahUBYE5KVqd2KA3RKxpdxZH2QG3u4oh+OEyGIytP26PSIEdCfnFtEMrp3yJx 2jo8Dgy2Ay2CfpkLnkSAWcxy6A0bLbmo+vEdeGfVyf1p005IAA7GQFs1yJtgD5mc 5mZLwJt+ZQzeQLUzcXaX+I5sxEU8Y2s= -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:09 2025 by rpki-client