This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: GDYZ/LQNS5PZbNCa9h+LE0LS054ZKCThWDPaTpJ0/mA= Subject key identifier: FD:B3:B6:CB:CD:40:72:F5:3F:C4:39:DF:DC:FB:74:21:D0:A3:99:E2 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 08CB Signing time: Sat 06 Dec 2025 19:36:24 +0000 Manifest this update: Sat 06 Dec 2025 19:36:23 +0000 Manifest next update: Sat 13 Dec 2025 19:36:23 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: 8UX1Mq0hMGKzsHLm57wOn7lCg5j6WUS8/MED4ZuXrPg=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: Ug8T2jAnxBEFXcI9OyfxIdrB1/QKIOy0uEZRs/AiI9w=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: mTee11vC2WHUjxpYpzX5Cx2s5T+zTjrHiz6j8S4XOXs=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: tqRni/vRCybcm/Qe5j/RJ1ji818pRaDVNQ0/GTu1HOQ=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: /rsO1xFmt4Wd2M5OBk3RGt2QvbZOZFnfqTaQeAfy5hE=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RJDI3i7hM1nBIPS/73ED0LFQix8Jwqczz+z+Slz7wW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Dec 6 19:36:23 2025 GMT Not After : Dec 13 19:36:23 2025 GMT Subject: CN=693485b8-0d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:be:c4:45:08:f4:f1:26:58:39:f5:9b:92: 1a:28:01:6c:71:68:69:74:db:8d:18:6b:85:62:8d: fe:61:c9:32:c9:ba:05:8c:66:f1:5c:b1:fe:51:4d: 00:46:94:cf:ef:51:c4:83:2a:2a:49:93:37:43:7f: d5:c9:cf:46:82:d3:dc:26:28:94:37:01:d8:60:67: a2:89:2b:2d:95:81:89:90:43:42:47:12:90:62:33: ef:f8:ba:39:64:f2:93:bb:17:4c:14:37:b7:4a:52: 5e:30:ce:e6:85:82:93:e1:21:83:e0:70:ef:cc:ea: 20:3a:40:d1:00:67:fe:36:f2:03:f9:2c:39:79:36: 0c:e5:fc:eb:5f:23:4d:b9:8a:a8:d3:08:78:e2:56: b0:7c:1e:e4:04:c9:c8:33:2a:22:eb:2e:2f:94:92: e2:ff:33:3a:c8:97:cf:e0:4b:84:b6:b1:90:7f:18: fe:7f:45:c7:36:54:9c:0c:62:49:4a:4d:c3:f1:5a: 40:ba:74:2a:7c:c2:57:93:9f:e0:0e:0f:1a:9d:2e: 0d:11:66:53:0b:35:99:18:40:32:2f:2e:6a:83:2a: ab:a1:75:1e:52:e4:d2:a3:5d:cb:e5:e1:49:45:89: 1e:e3:58:d4:a1:68:7a:84:21:cd:98:ec:76:29:01: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:B6:CB:CD:40:72:F5:3F:C4:39:DF:DC:FB:74:21:D0:A3:99:E2 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:12:07:c5:93:d0:db:23:33:1d:14:dd:d3:3b:e1:a7:0d:66: e5:f9:16:98:7f:b0:71:e6:3b:83:e5:d9:52:de:79:f2:b1:f9: be:6c:81:01:79:26:9e:da:03:c9:13:f2:b5:83:42:f1:c4:03: 16:1b:db:82:ca:b9:4f:b8:d2:83:4e:76:10:bd:51:73:2c:a1: e2:25:6a:33:cc:b5:83:45:de:bc:ed:0c:7f:4d:8b:a4:55:ea: 9e:76:b8:62:d2:a7:7e:9c:f2:88:41:74:24:fd:07:48:a2:9d: 60:d9:b8:d4:74:c8:27:b5:7e:ca:ed:a4:36:a6:c4:ce:c8:71: 3d:6c:28:c7:9a:6f:22:69:23:d6:a0:46:30:eb:d0:17:79:f0: 10:ba:28:e1:11:a5:28:8e:d8:1d:df:0f:92:ff:f6:dd:38:a3: a4:c6:d1:ef:ce:99:b5:bf:7f:e2:11:0c:a7:6c:c8:e8:a4:90: c0:b5:9b:4a:1b:ae:d5:4c:63:0d:0e:6c:d9:0b:2d:59:be:83: ce:d8:f5:31:f6:54:82:98:93:c0:13:84:b6:7d:c0:c0:e7:75: 69:9d:3c:68:a7:06:33:a2:d3:81:2c:73:fd:bb:cf:c4:5f:2b: 78:4a:c3:9b:c2:4d:a4:c1:c1:4a:f5:30:26:26:b8:32:80:8e: bd:fa:e2:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUxMjA2MTkzNjIzWhcNMjUxMjEzMTkzNjIzWjAYMRYwFAYD VQQDEw02OTM0ODViOC0wZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8q+xEUI9PEmWDn1m5IaKAFscWhpdNuNGGuFYo3+YckyyboFjGbxXLH+UU0A RpTP71HEgyoqSZM3Q3/Vyc9GgtPcJiiUNwHYYGeiiSstlYGJkENCRxKQYjPv+Lo5 ZPKTuxdMFDe3SlJeMM7mhYKT4SGD4HDvzOogOkDRAGf+NvID+Sw5eTYM5fzrXyNN uYqo0wh44lawfB7kBMnIMyoi6y4vlJLi/zM6yJfP4EuEtrGQfxj+f0XHNlScDGJJ Sk3D8VpAunQqfMJXk5/gDg8anS4NEWZTCzWZGEAyLy5qgyqroXUeUuTSo13L5eFJ RYke41jUoWh6hCHNmOx2KQE2zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2ztsvN QHL1P8Q539z7dCHQo5niMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+EgfFk9DbIzMdFN3TO+GnDWbl+RaYf7Bx5juD5dlS3nnysfm+bIEB eSae2gPJE/K1g0LxxAMWG9uCyrlPuNKDTnYQvVFzLKHiJWozzLWDRd687Qx/TYuk Veqedrhi0qd+nPKIQXQk/QdIop1g2bjUdMgntX7K7aQ2psTOyHE9bCjHmm8iaSPW oEYw69AXefAQuijhEaUojtgd3w+S//bdOKOkxtHvzpm1v3/iEQynbMjopJDAtZtK G67VTGMNDmzZCy1ZvoPO2PUx9lSCmJPAE4S2fcDA53VpnTxopwYzotOBLHP9u8/E Xyt4SsObwk2kwcFK9TAmJrgygI69+uLQ -----END CERTIFICATE-----Generated at Sat Dec 6 23:06:47 2025 by rpki-client