This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft File: 1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json) Hash identifier: eaZOBixpjD9/mmhQY7HxXrsAT+o5Bzi2nGmhIOMl3k0= Subject key identifier: E9:50:FB:06:DB:BB:B0:14:21:7E:08:E5:C7:AF:76:59:83:DE:A2:8E Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft Manifest number: 27 Signing time: Fri 05 Dec 2025 05:32:58 +0000 Manifest this update: Fri 05 Dec 2025 05:32:58 +0000 Manifest next update: Fri 12 Dec 2025 05:32:58 +0000 Files and hashes: 1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: W7E/vho1CvfrZd0pzBUKDAcYifidjPxMJpsj9QrEDlk=) 2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Dg/Vcy50ZsOW8WbCgEni7y9JIL1pu3cmWYVSSZjfezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Validity Not Before: Dec 5 05:32:58 2025 GMT Not After : Dec 12 05:32:58 2025 GMT Subject: CN=69326e8a-2acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:ff:48:43:3b:ee:7b:71:6d:30:a1:dc:de: ee:c7:60:eb:1d:aa:92:e1:bf:22:03:c5:f0:dd:3d: 57:dc:f2:da:8b:22:79:6f:25:f4:9d:32:0d:f5:5c: 4f:9e:88:2a:bf:0d:ed:43:9b:4e:01:df:a8:57:a5: e4:19:07:2c:0c:14:49:22:72:97:8e:93:8e:7f:6e: 12:88:4d:ba:23:c7:a9:72:32:5d:e7:76:42:4f:1c: 57:0e:a6:ef:89:7a:d5:bc:5b:83:18:45:2d:ed:29: 2d:d5:df:90:88:98:c4:bc:f5:f0:a0:bf:16:bc:e3: 72:13:a6:31:57:da:83:92:40:14:af:74:a5:5b:23: 4d:a5:50:d5:9d:6f:dd:9b:97:9e:75:c5:94:76:3f: a9:7a:77:18:04:94:12:3c:a2:b0:b9:c6:89:7d:bc: 2b:b1:0a:e2:39:5b:9f:6b:eb:13:85:84:8e:14:b4: d5:42:f8:af:dd:19:66:8e:5d:fd:f6:b8:eb:17:88: 2f:ca:13:25:d3:34:59:e4:63:1c:df:07:cd:49:c1: 23:f8:0e:38:92:eb:b8:1e:1b:b6:45:0e:c0:ff:72: 21:62:28:ec:1d:c7:0f:40:9e:e3:15:fd:c2:1e:7d: de:fb:bf:2a:b4:9a:e6:19:39:0a:f1:6c:cb:05:53: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:50:FB:06:DB:BB:B0:14:21:7E:08:E5:C7:AF:76:59:83:DE:A2:8E X509v3 Authority Key Identifier: keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a2:b2:56:d0:0a:0a:50:37:28:68:ab:c2:bb:d3:42:4a:87: 9b:ff:dc:09:99:5d:cd:19:b6:41:eb:e8:41:7b:c2:1a:ab:93: 01:97:90:61:8b:df:c9:d3:dd:b1:9d:19:dc:32:c5:31:a7:b4: b7:8c:53:33:1f:15:e4:0d:c2:f6:6a:36:27:46:1c:da:54:d2: 25:95:a3:a1:b0:58:f6:28:bd:1d:21:22:d0:48:d1:7a:55:ce: 7f:cb:80:18:36:37:b1:d3:05:45:74:57:1d:b6:e3:c3:b4:0d: 8d:14:39:e2:a7:00:fc:dd:e3:fd:c2:49:d4:16:01:ba:2b:15: f2:5f:79:e9:c5:bf:37:c1:7f:74:c8:8e:27:47:02:7e:2c:e5: 3e:25:15:fb:43:fc:16:21:6b:3d:8a:0a:23:c6:c4:af:dd:49: 19:df:3f:84:9d:c3:e8:d8:2d:89:d1:5b:f6:6e:0f:07:5f:2f: 4f:4d:9c:f8:c2:72:1e:16:e9:82:a5:f6:7e:af:31:5f:50:e5: 3d:2a:6e:c0:92:45:63:88:ca:92:50:7e:f4:57:4c:ce:39:8b: b5:d9:40:51:62:cc:c7:33:d5:8e:61:36:21:4a:35:f5:00:82: 27:d5:af:b6:36:89:65:35:7e:c6:f5:53:7c:3d:da:1c:1b:0f: a0:36:83:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkMxRjExMC8GA1UEBRMoRDRBNEYwQjYwMDBERTAyMjQ4QzQ2NTdBRjlERDI2QjAy M0M1RjY3OTAeFw0yNTEyMDUwNTMyNThaFw0yNTEyMTIwNTMyNThaMBgxFjAUBgNV BAMTDTY5MzI2ZThhLTJhY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+//9IQzvue3FtMKHc3u7HYOsdqpLhvyIDxfDdPVfc8tqLInlvJfSdMg31XE+e iCq/De1Dm04B36hXpeQZBywMFEkicpeOk45/bhKITbojx6lyMl3ndkJPHFcOpu+J etW8W4MYRS3tKS3V35CImMS89fCgvxa843ITpjFX2oOSQBSvdKVbI02lUNWdb92b l551xZR2P6l6dxgElBI8orC5xol9vCuxCuI5W59r6xOFhI4UtNVC+K/dGWaOXf32 uOsXiC/KEyXTNFnkYxzfB81JwSP4DjiS67geG7ZFDsD/ciFiKOwdxw9AnuMV/cIe fd77vyq0muYZOQrxbMsFU3cXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6VD7Btu7 sBQhfgjlx692WYPeoo4wHwYDVR0jBBgwFoAU1KTwtgAN4CJIxGV6+d0msCPF9nkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QzFGL0U2QTdGNkI4OUE4 NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENKSXhHVjYtZDBtc0NQRjlu ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUtUd3RnQU40Q0pJeEdWNi1kMG1zQ1BGOW5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QzFGL0U2QTdGNkI4OUE4NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENK SXhHVjYtZDBtc0NQRjluay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeislbQCgpQNyhoq8K700JKh5v/3AmZXc0ZtkHr6EF7whqrkwGXkGGL 38nT3bGdGdwyxTGntLeMUzMfFeQNwvZqNidGHNpU0iWVo6GwWPYovR0hItBI0XpV zn/LgBg2N7HTBUV0Vx2248O0DY0UOeKnAPzd4/3CSdQWAborFfJfeenFvzfBf3TI jidHAn4s5T4lFftD/BYhaz2KCiPGxK/dSRnfP4Sdw+jYLYnRW/ZuDwdfL09NnPjC ch4W6YKl9n6vMV9Q5T0qbsCSRWOIypJQfvRXTM45i7XZQFFizMcz1Y5hNiFKNfUA gifVr7Y2iWU1fsb1U3w92hwbD6A2g0U= -----END CERTIFICATE-----Generated at Sun Dec 7 07:16:04 2025 by rpki-client