This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: Nl/kcfbGsugLAKDdsNr17JjLI3ogVP2TKyPKDLVf8XI= Subject key identifier: 08:22:AE:44:05:5F:94:06:93:77:1A:5F:3E:7D:7A:A4:EA:88:59:9F Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 21FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 21FA Signing time: Sat 06 Dec 2025 15:36:42 +0000 Manifest this update: Sat 06 Dec 2025 15:36:42 +0000 Manifest next update: Sat 13 Dec 2025 15:36:42 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: YNQIb8GGaxE5LJI68nz3ocUs/1PC+DIunbKEheGZ43k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8698 (0x21fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Dec 6 15:36:42 2025 GMT Not After : Dec 13 15:36:42 2025 GMT Subject: CN=69344d8a-0674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:68:23:d0:ed:a4:da:f5:39:74:0b:8e:9c: 8d:5c:0d:a9:18:ad:1a:52:2a:75:0b:c5:e9:81:6b: 11:e8:f3:90:42:f6:91:c7:2b:cf:e7:24:11:64:df: 53:0d:4c:a9:39:11:f5:fd:ab:96:87:13:a1:fb:01: 26:5e:a4:a5:fb:97:ab:b6:f1:b7:f2:15:fa:70:11: d8:fd:af:a9:cf:17:67:17:3c:3a:c6:0e:c1:a5:f6: 18:07:b4:ba:80:9f:47:48:2d:4e:ef:7e:c8:5d:2a: 26:bb:dc:9e:92:b8:da:7b:51:8d:1e:c7:7f:48:2a: 68:f9:d2:8f:a9:9c:c9:56:6f:3a:e5:77:77:9d:b0: ea:d9:77:c7:56:c9:50:38:46:ee:f1:a5:b2:03:f1: 21:49:36:5f:74:96:6d:8f:87:42:d3:87:10:91:2a: bb:d6:09:ff:17:94:9a:8d:8c:6c:1c:cb:66:a1:85: 1e:30:be:ea:10:ea:19:dd:2a:5d:2a:0f:02:ef:36: 4d:5a:f8:07:94:43:fd:8f:ca:0d:fa:08:48:1a:59: 77:01:dc:1a:77:f8:03:e5:26:78:9f:f8:19:2a:4d: 56:73:52:09:7d:5b:4c:70:93:9e:7d:93:9e:4d:dc: f8:73:35:85:80:86:06:24:3a:4a:53:16:1d:7c:f0: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:22:AE:44:05:5F:94:06:93:77:1A:5F:3E:7D:7A:A4:EA:88:59:9F X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3f:16:61:c7:db:73:7e:93:70:a2:9f:a2:d7:1f:a6:ec:c0: cf:f8:45:af:de:6f:37:65:47:44:78:b7:64:d0:1b:55:cc:23: 9b:af:b4:e1:52:8e:91:54:f0:92:02:d2:6c:31:80:26:50:00: 8c:7d:6b:4f:fd:e2:72:ea:c7:fe:7e:38:16:72:bf:cc:42:33: 55:35:ea:d7:0d:87:59:2c:68:8a:ba:45:0d:e7:3b:b5:20:6e: 47:b5:f8:92:f4:f7:b8:09:f2:09:8e:52:1f:ad:58:df:4e:57: a8:26:1c:a5:3e:74:17:f2:a2:5b:63:7b:89:2d:35:d8:18:df: db:8d:fe:bc:ba:27:b7:13:d5:59:83:2f:1c:9c:15:cb:1b:58: ba:e4:48:d1:4d:54:30:f1:3b:75:37:7d:66:07:61:b6:3c:fc: 11:63:54:03:1f:e1:b1:02:57:86:f3:33:f4:44:36:ee:76:63: 4b:fc:f1:24:6c:ef:ff:65:08:dc:fb:93:5f:52:f6:c7:32:97: 01:b4:ad:c7:ae:9d:bb:9e:62:d3:e2:ad:4f:69:7c:b1:73:ee: ff:07:79:77:7b:37:34:9a:9f:79:fe:22:e8:eb:49:cd:71:35: 2d:1c:34:d7:db:47:0d:27:23:31:a1:4d:10:e7:b8:85:a2:8d: 7c:33:bb:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUxMjA2MTUzNjQyWhcNMjUxMjEzMTUzNjQyWjAYMRYwFAYD VQQDEw02OTM0NGQ4YS0wNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB5oI9DtpNr1OXQLjpyNXA2pGK0aUip1C8XpgWsR6POQQvaRxyvP5yQRZN9T DUypORH1/auWhxOh+wEmXqSl+5ertvG38hX6cBHY/a+pzxdnFzw6xg7BpfYYB7S6 gJ9HSC1O737IXSomu9yekrjae1GNHsd/SCpo+dKPqZzJVm865Xd3nbDq2XfHVslQ OEbu8aWyA/EhSTZfdJZtj4dC04cQkSq71gn/F5SajYxsHMtmoYUeML7qEOoZ3Spd Kg8C7zZNWvgHlEP9j8oN+ghIGll3Adwad/gD5SZ4n/gZKk1Wc1IJfVtMcJOefZOe Tdz4czWFgIYGJDpKUxYdfPBGPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgirkQF X5QGk3caXz59eqTqiFmfMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/PxZhx9tzfpNwop+i1x+m7MDP+EWv3m83ZUdEeLdk0BtVzCObr7Th Uo6RVPCSAtJsMYAmUACMfWtP/eJy6sf+fjgWcr/MQjNVNerXDYdZLGiKukUN5zu1 IG5HtfiS9Pe4CfIJjlIfrVjfTleoJhylPnQX8qJbY3uJLTXYGN/bjf68uie3E9VZ gy8cnBXLG1i65EjRTVQw8Tt1N31mB2G2PPwRY1QDH+GxAleG8zP0RDbudmNL/PEk bO//ZQjc+5NfUvbHMpcBtK3Hrp27nmLT4q1PaXyxc+7/B3l3ezc0mp95/iLo60nN cTUtHDTX20cNJyMxoU0Q57iFoo18M7sz -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:46 2025 by rpki-client