This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: SasgbgZMvQBw1ZF4UM0gfQk6iIMnp6UUE8ErBDRadFg= Subject key identifier: FB:EF:71:05:A0:38:92:42:0C:4B:3A:BF:A5:08:4D:FB:A2:DD:C8:DD Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 258A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 2575 Signing time: Sat 06 Dec 2025 15:30:21 +0000 Manifest this update: Sat 06 Dec 2025 15:30:21 +0000 Manifest next update: Sat 13 Dec 2025 15:30:20 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: Z3rY3l9f2Du8BqL0kiQlIDzO/AMh0Ch15AdcKk45vnE=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: SqubnCOkk8RsrmFBLZGk+dGzptnKgDT9xCotCHCxhuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9610 (0x258a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Dec 6 15:30:21 2025 GMT Not After : Dec 13 15:30:20 2025 GMT Subject: CN=69344c0d-0485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:6c:a2:13:fe:bb:94:ea:07:d1:f4:17:be: ca:73:2d:7c:ce:03:13:b4:d0:c9:c8:1d:51:3f:dc: b1:bd:fe:e2:6a:15:40:0b:4b:20:5c:54:56:3f:8a: bd:6a:03:05:f1:d2:97:b4:b2:ce:9d:1c:72:48:43: 30:b9:47:6b:ab:a7:26:c7:b6:28:f3:bf:97:bb:5e: 72:e0:7b:67:6d:e1:ba:ec:e7:e2:01:fb:64:29:63: e9:d2:d9:ee:2c:66:e9:89:56:3c:83:88:c6:35:b0: 0b:12:91:5f:04:63:74:e6:3f:3d:68:89:76:5b:7a: ea:8c:f7:e1:96:72:5d:23:61:92:6b:72:bd:8f:90: 14:5d:91:89:00:80:b0:1c:70:85:c5:5c:26:35:35: 7f:1c:6b:13:a7:05:50:75:4d:51:24:e3:ef:f0:5c: 0e:2b:89:f2:fb:6f:cd:2f:e2:0a:0e:60:b9:0e:fd: e5:ff:78:74:4b:1a:32:a5:06:43:06:f5:86:62:3d: a8:bc:ef:61:b5:b3:da:a1:ff:f9:b0:93:7d:d1:7f: 46:57:69:9f:80:fc:53:fb:f3:e9:80:4e:9b:49:10: e5:4a:0b:e3:fa:19:51:14:ef:ea:6b:dc:bf:78:9c: 27:63:b9:8a:72:9d:fe:d0:43:57:e2:1e:1c:bd:a1: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EF:71:05:A0:38:92:42:0C:4B:3A:BF:A5:08:4D:FB:A2:DD:C8:DD X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:bc:63:ae:b7:0b:e4:08:15:c9:8b:24:ad:86:86:ee:99:31: 29:c4:01:e2:02:41:25:fc:3f:2f:f9:9d:eb:45:52:3b:a9:93: 7a:95:bb:89:5c:23:7f:2c:8a:a7:1e:2c:bf:27:cf:dd:eb:63: df:bf:bd:03:fd:53:60:1a:28:61:8d:a7:35:ba:85:fb:97:7d: da:8d:60:ae:f5:99:5b:3f:6c:cf:58:65:37:cd:fc:a5:2c:a5: b0:a5:b0:7b:be:6b:e4:43:e1:92:be:e6:21:e5:7d:2c:b2:dc: 4e:80:18:da:79:ae:48:3c:94:3d:ad:33:c6:a2:ce:51:16:23: 0f:bb:0a:a2:8e:b0:da:d1:42:67:f1:5f:62:7c:1a:00:43:7b: ee:36:44:a0:8c:16:c0:0c:31:5d:21:64:4e:cf:b6:1e:a7:34: f9:1c:e0:53:e3:ef:ec:52:cb:97:ec:86:5b:17:3c:77:af:cc: 5b:37:0a:20:91:a1:63:34:46:cd:7e:b4:5f:0c:15:9f:1f:fe: c4:b4:c9:af:ea:e0:60:3e:af:58:d1:2f:79:da:b0:82:e6:23: a8:45:ce:02:c5:8c:fd:12:ce:a1:1e:26:e3:4d:8a:a7:a3:b2: 10:ee:9e:26:6a:08:5f:6d:bb:72:d8:85:91:98:f8:99:6c:73: de:44:de:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUxMjA2MTUzMDIxWhcNMjUxMjEzMTUzMDIwWjAYMRYwFAYD VQQDEw02OTM0NGMwZC0wNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5ZsohP+u5TqB9H0F77Kcy18zgMTtNDJyB1RP9yxvf7iahVAC0sgXFRWP4q9 agMF8dKXtLLOnRxySEMwuUdrq6cmx7Yo87+Xu15y4HtnbeG67OfiAftkKWPp0tnu LGbpiVY8g4jGNbALEpFfBGN05j89aIl2W3rqjPfhlnJdI2GSa3K9j5AUXZGJAICw HHCFxVwmNTV/HGsTpwVQdU1RJOPv8FwOK4ny+2/NL+IKDmC5Dv3l/3h0SxoypQZD BvWGYj2ovO9htbPaof/5sJN90X9GV2mfgPxT+/PpgE6bSRDlSgvj+hlRFO/qa9y/ eJwnY7mKcp3+0ENX4h4cvaHyvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvvcQWg OJJCDEs6v6UITfui3cjdMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWvGOutwvkCBXJiySthobumTEpxAHiAkEl/D8v+Z3rRVI7qZN6lbuJ XCN/LIqnHiy/J8/d62Pfv70D/VNgGihhjac1uoX7l33ajWCu9ZlbP2zPWGU3zfyl LKWwpbB7vmvkQ+GSvuYh5X0sstxOgBjaea5IPJQ9rTPGos5RFiMPuwqijrDa0UJn 8V9ifBoAQ3vuNkSgjBbADDFdIWROz7YepzT5HOBT4+/sUsuX7IZbFzx3r8xbNwog kaFjNEbNfrRfDBWfH/7EtMmv6uBgPq9Y0S952rCC5iOoRc4CxYz9Es6hHibjTYqn o7IQ7p4maghfbbty2IWRmPiZbHPeRN5L -----END CERTIFICATE-----Generated at Sun Dec 7 10:06:37 2025 by rpki-client