This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: Pl6TF1G7UUS1DOq6huNDN2vHEQDH2sqHU0GqYdF1HEM= Subject key identifier: C2:69:44:55:12:E1:FD:A1:9F:28:6E:5A:07:6B:D3:C7:FB:BE:13:55 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0D1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0D05 Signing time: Sat 06 Dec 2025 17:28:15 +0000 Manifest this update: Sat 06 Dec 2025 17:28:15 +0000 Manifest next update: Sat 13 Dec 2025 17:28:15 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: 1uIz1NJ7inH7uS25E/sOwaSyldiv7b8eirg+1qgFVRc=) 2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: vuIx5uN5ZZTHGHOWV+i45uzSngomzzsL58ntfcnGCEs=) 3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Dec 6 17:28:15 2025 GMT Not After : Dec 13 17:28:15 2025 GMT Subject: CN=693467af-1ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:a2:5a:f8:1e:e5:9d:f3:50:18:36:69:5c: 96:d3:7c:28:60:5d:51:95:1e:b9:54:f4:b1:e6:68: 83:8d:56:31:46:9b:64:15:32:90:1d:b8:64:40:fe: ad:82:ec:f4:cb:83:d2:01:d6:05:02:70:65:58:09: ce:e9:2b:15:10:71:83:5f:3a:71:3f:80:67:cb:f5: 44:94:55:16:5e:ab:6a:73:f3:9f:c9:5e:fe:c3:e2: 36:fc:92:97:a5:99:c6:a8:23:bd:2b:1b:16:39:dd: 5d:d1:89:05:2f:65:29:5a:27:e9:89:ee:55:27:05: 62:13:c8:cd:5d:b2:62:f7:70:43:ae:ac:a1:d8:01: 9b:1d:9f:e9:4f:92:a2:ef:21:3e:da:e8:51:f4:e3: 6d:c3:45:e5:da:97:40:92:ce:8c:70:30:e0:93:4b: 41:b5:f6:28:a7:01:8e:ef:05:86:76:39:b7:f3:9d: 22:97:32:58:64:9c:32:cf:08:3e:5a:55:cc:d4:b0: 3f:42:ca:99:ec:b6:20:e6:5e:23:c4:4b:3d:4d:67: ab:fd:5f:cb:55:ad:51:36:11:b1:0d:ba:8a:0b:09: df:81:76:8f:57:49:f4:53:7a:ca:92:ad:a7:48:b6: 2a:ed:9d:c8:5e:95:15:a7:16:4e:05:70:f6:b2:11: 84:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:69:44:55:12:E1:FD:A1:9F:28:6E:5A:07:6B:D3:C7:FB:BE:13:55 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c7:c0:fc:1d:51:1f:57:d8:d2:90:f6:1d:2d:c3:e4:6f:40: 3b:07:9f:ef:ef:d4:07:78:45:bd:87:52:51:3d:f2:1a:5d:3b: de:a9:41:15:70:16:9d:d0:0b:f6:6f:7d:09:75:af:31:7a:7f: e3:dd:70:31:68:29:35:d3:02:35:4f:c2:04:6a:42:0a:2c:48: 2a:c0:9f:15:aa:9a:31:c6:c1:10:73:48:76:3b:3d:f4:62:0b: 42:a8:27:87:fd:b6:f1:57:8e:22:a5:14:d0:96:45:4f:98:93: ba:77:5c:8e:6f:e0:ba:c2:41:56:0d:a3:8b:08:db:35:c6:77: d7:ab:32:66:29:0b:df:75:c1:c9:a6:7a:94:4b:e9:2c:0f:3d: 97:fa:9c:ed:11:48:33:01:0f:f8:cc:62:c6:10:fc:ee:17:67: 46:d8:53:58:8b:c9:48:d9:e1:87:55:4f:91:5c:b6:d1:a9:cf: 26:33:28:d2:9d:f4:b1:f9:87:90:b5:15:69:49:1f:b2:2d:51: d4:da:aa:e6:9a:9d:91:b5:8e:72:d8:e0:70:aa:d4:59:be:c8: 3d:30:aa:45:3b:1d:0e:cd:3b:db:d6:24:89:49:79:93:a5:7f: dd:98:4a:59:f8:46:cb:18:67:6b:89:3a:71:11:0a:cd:11:4f: d0:4b:ef:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjUxMjA2MTcyODE1WhcNMjUxMjEzMTcyODE1WjAYMRYwFAYD VQQDEw02OTM0NjdhZi0xZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxriiWvge5Z3zUBg2aVyW03woYF1RlR65VPSx5miDjVYxRptkFTKQHbhkQP6t guz0y4PSAdYFAnBlWAnO6SsVEHGDXzpxP4Bny/VElFUWXqtqc/OfyV7+w+I2/JKX pZnGqCO9KxsWOd1d0YkFL2UpWifpie5VJwViE8jNXbJi93BDrqyh2AGbHZ/pT5Ki 7yE+2uhR9ONtw0Xl2pdAks6McDDgk0tBtfYopwGO7wWGdjm3850ilzJYZJwyzwg+ WlXM1LA/QsqZ7LYg5l4jxEs9TWer/V/LVa1RNhGxDbqKCwnfgXaPV0n0U3rKkq2n SLYq7Z3IXpUVpxZOBXD2shGEIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJpRFUS 4f2hnyhuWgdr08f7vhNVMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5x8D8HVEfV9jSkPYdLcPkb0A7B5/v79QHeEW9h1JRPfIaXTveqUEV cBad0Av2b30Jda8xen/j3XAxaCk10wI1T8IEakIKLEgqwJ8VqpoxxsEQc0h2Oz30 YgtCqCeH/bbxV44ipRTQlkVPmJO6d1yOb+C6wkFWDaOLCNs1xnfXqzJmKQvfdcHJ pnqUS+ksDz2X+pztEUgzAQ/4zGLGEPzuF2dG2FNYi8lI2eGHVU+RXLbRqc8mMyjS nfSx+YeQtRVpSR+yLVHU2qrmmp2RtY5y2OBwqtRZvsg9MKpFOx0OzTvb1iSJSXmT pX/dmEpZ+EbLGGdriTpxEQrNEU/QS+9V -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:46 2025 by rpki-client