This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: stVDvjZ2DbvquVPCRG9p9Q8ErD8of8IOtoF+pkjrtbM= Subject key identifier: BF:8E:52:E5:A5:73:F9:3D:E2:3E:8E:ED:0B:9F:3C:C9:54:7D:5B:1B Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0EC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0EBB Signing time: Sat 20 Dec 2025 18:15:04 +0000 Manifest this update: Sat 20 Dec 2025 18:15:04 +0000 Manifest next update: Sat 27 Dec 2025 18:15:04 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: JUx1AdL4fsOKNBpw9WMOohyg6/3rJNB48pUW9HfksFE=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: alUOeCKJ2MY0GW2hS2QrAY4PPh9KutpvKrc9XRXM1WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3780 (0xec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Dec 20 18:15:04 2025 GMT Not After : Dec 27 18:15:04 2025 GMT Subject: CN=6946e7a8-63b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:72:2d:1d:aa:fc:a7:e2:41:45:32:71:87: 76:73:1a:ec:6d:4d:4b:fc:17:65:91:b4:47:47:1d: 62:fe:ed:f4:07:9d:c0:a9:e7:e6:6e:f2:65:f4:c2: 79:5b:05:d8:5e:ce:a4:89:82:80:24:fb:61:7b:3c: 22:e3:b9:28:3f:0d:5d:17:25:1b:dd:73:82:a3:41: 9f:51:9b:51:2d:cc:5f:89:e8:61:ec:e9:24:96:bd: 92:1e:0b:c0:27:e6:9c:ee:7d:58:9b:a4:f1:d8:81: ee:74:07:ac:91:de:7d:9f:3b:ee:3a:a5:9f:a5:0e: 5a:82:ff:7b:51:dd:7b:d1:27:9d:c8:ba:d4:f3:7e: 36:75:95:34:ba:34:88:0c:ee:e0:68:db:06:5e:30: ab:3c:ab:ac:a0:3a:61:2d:fc:be:3c:5a:a0:23:1d: 7b:04:da:40:25:a1:57:e0:a6:d1:bd:15:47:09:bb: dc:d7:6e:18:f3:3e:66:17:f6:b9:40:59:b5:d9:5b: 85:36:b1:76:52:03:de:2f:af:30:0f:90:f9:7a:55: 25:f6:49:f5:46:f8:35:94:53:1b:2a:f2:07:d8:e9: 41:c7:eb:9d:7c:e8:56:b6:cf:ee:d7:16:a1:bb:ee: 12:37:f5:8a:21:08:94:a7:f9:3c:83:68:12:db:6c: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:52:E5:A5:73:F9:3D:E2:3E:8E:ED:0B:9F:3C:C9:54:7D:5B:1B X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:cf:37:40:fc:7f:ba:40:76:1c:de:5a:21:26:7c:ac:71: 4a:9d:61:76:39:85:2b:2b:78:a2:c5:a4:db:b7:eb:cb:4c:8f: 49:0d:4a:9e:60:5c:59:ae:25:bf:25:ed:32:f6:53:92:b1:0e: 3a:1d:e6:72:7a:b0:ac:87:92:05:da:fc:43:72:bc:e9:99:fd: 89:93:1c:3d:52:d1:eb:af:27:ff:05:d0:c7:48:73:e9:e4:72: 42:2d:2d:d7:d2:a5:a9:fe:73:2e:0c:0d:b1:6a:0a:1d:bd:fb: cb:77:b8:00:79:a2:df:82:41:04:e0:00:24:b9:e2:9f:f4:59: fd:69:eb:f5:97:96:28:31:68:25:8d:f5:a7:9f:1a:02:6b:01: a9:cd:d3:2c:c6:8c:53:3e:4f:36:72:c0:b2:61:30:ba:d2:af: c0:b5:bc:72:df:d7:aa:9c:40:16:a6:6c:b2:56:00:3b:83:1d: 0c:96:96:30:8f:75:fb:16:ff:d5:73:4b:c4:c0:05:29:d5:0d: 49:70:50:18:06:f6:7a:cd:15:97:c0:a3:fc:d6:8a:b4:d4:8a: ab:ca:e1:8b:e5:12:45:bf:3f:04:46:20:d5:7d:ff:21:5b:92: 90:e4:3a:6a:09:a9:de:f7:21:d9:eb:fa:47:f5:24:a5:60:01: 4b:c2:94:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjUxMjIwMTgxNTA0WhcNMjUxMjI3MTgxNTA0WjAYMRYwFAYD VQQDDA02OTQ2ZTdhOC02M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgxyLR2q/KfiQUUycYd2cxrsbU1L/BdlkbRHRx1i/u30B53AqefmbvJl9MJ5 WwXYXs6kiYKAJPthezwi47koPw1dFyUb3XOCo0GfUZtRLcxfiehh7Okklr2SHgvA J+ac7n1Ym6Tx2IHudAeskd59nzvuOqWfpQ5agv97Ud170SedyLrU8342dZU0ujSI DO7gaNsGXjCrPKusoDphLfy+PFqgIx17BNpAJaFX4KbRvRVHCbvc124Y8z5mF/a5 QFm12VuFNrF2UgPeL68wD5D5elUl9kn1Rvg1lFMbKvIH2OlBx+udfOhWts/u1xah u+4SN/WKIQiUp/k8g2gS22wq8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+OUuWl c/k94j6O7QufPMlUfVsbMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHBc83QPx/ukB2HN5aISZ8rHFKnWF2OYUrK3iixaTbt+vLTI9JDUqe YFxZriW/Je0y9lOSsQ46HeZyerCsh5IF2vxDcrzpmf2Jkxw9UtHrryf/BdDHSHPp 5HJCLS3X0qWp/nMuDA2xagodvfvLd7gAeaLfgkEE4AAkueKf9Fn9aev1l5YoMWgl jfWnnxoCawGpzdMsxoxTPk82csCyYTC60q/Atbxy39eqnEAWpmyyVgA7gx0MlpYw j3X7Fv/Vc0vEwAUp1Q1JcFAYBvZ6zRWXwKP81oq01IqryuGL5RJFvz8ERiDVff8h W5KQ5DpqCane9yHZ6/pH9SSlYAFLwpSc -----END CERTIFICATE-----Generated at Mon Dec 22 14:14:41 2025 by rpki-client