This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: wu9CoW2DeKGGNWL7348HVlmShEybKj2gcfS47Uz9qR8= Subject key identifier: CC:B5:C5:E4:E2:1C:39:21:81:C9:D4:DD:E9:37:32:92:68:D8:2A:57 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: 57 Signing time: Fri 05 Dec 2025 05:04:05 +0000 Manifest this update: Fri 05 Dec 2025 05:04:04 +0000 Manifest next update: Fri 12 Dec 2025 05:04:04 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: Pm+Zfbc0ZSvLtJ741JjQwaDzqyvYGOhxFtD+tzb9uwQ=) 2: EAAC1A669E5C11F0B2B86856C4F9AE02.roa (hash: 3ivuXSavI1grPWsZeIczoxpu8ztBxvr+RSbjIfz05CY=) 3: E9ACBC4C9E5C11F0B2B86856C4F9AE02.roa (hash: 9HHR5FNxgt2P/Pdw8ubx9aLKafeL5xLqLydwvJefiRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Dec 5 05:04:04 2025 GMT Not After : Dec 12 05:04:04 2025 GMT Subject: CN=693267c4-b067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:cd:eb:ab:16:09:b3:1b:96:35:67:64:7f: e3:c5:76:54:17:4d:84:32:a6:3e:90:57:59:52:08: d8:9c:a1:f2:70:02:90:21:0b:e3:4a:28:2b:66:77: 5b:9a:0c:f5:4c:b0:24:2e:5e:f7:d7:a3:9c:7b:cf: 35:f8:68:b7:98:b1:99:d7:10:be:e8:09:94:4f:e2: a2:84:ce:9a:06:8b:50:7c:01:85:47:6d:42:c4:c6: 62:dc:60:9b:5e:4f:99:8f:1c:92:df:b0:cd:cb:5c: 96:77:f9:27:5c:be:a1:f2:88:eb:03:fa:94:9c:45: ad:a1:69:4c:34:4a:b3:24:01:54:46:10:46:02:cb: 50:0f:d6:6e:2e:a5:22:ad:a1:88:2c:0a:da:b8:43: 87:be:1f:da:ab:f2:f6:f1:27:4d:90:fb:71:66:a3: ce:f7:fa:f2:1f:5f:19:04:96:ce:df:77:d0:a1:d7: 77:0a:33:31:51:17:9e:0a:02:44:f6:a8:a6:42:d1: 31:90:6b:30:02:01:82:60:e4:23:87:26:59:68:e5: 09:1f:49:09:ee:ec:d9:51:8d:bb:0a:b2:66:6a:5d: de:00:ba:7e:c9:6d:ed:97:5b:c7:11:22:f6:8a:60: 74:3c:50:c2:d8:ea:ab:3d:24:05:18:73:58:32:2a: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B5:C5:E4:E2:1C:39:21:81:C9:D4:DD:E9:37:32:92:68:D8:2A:57 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9b:21:00:15:1c:18:2c:d0:d0:09:4a:28:03:45:79:11:eb: fd:82:3e:47:bb:2e:40:02:5b:71:b5:57:90:37:16:e3:db:93: b0:36:f3:93:94:87:2f:0d:ca:ce:35:e7:b0:fc:d8:58:5e:b9: 67:b8:09:64:1a:bf:1e:3e:c1:c2:60:97:fa:bf:4d:40:64:cf: f7:48:59:c1:36:7e:bd:14:ba:f5:5c:3e:3e:4d:d0:09:6d:ab: dd:64:79:27:e1:a4:c4:79:8f:4e:3d:d6:5d:f6:67:b7:c0:06: 17:90:62:54:96:81:33:b8:15:b9:d6:5a:5e:60:ff:72:7b:83: 7b:e9:1e:71:2e:dd:27:d6:d7:a1:c2:1d:ce:72:30:56:4e:55: 9a:41:cc:ae:8c:0f:d9:4c:78:d1:da:86:7d:22:2a:04:bb:05: ca:09:10:38:e0:34:a5:dd:8a:41:0f:d6:9f:ee:17:43:fa:fa: 13:33:7b:f7:ad:65:1c:bc:8b:7a:ed:fc:cf:24:03:7f:9f:00: b8:e4:ff:e0:c3:c5:e3:a7:71:2e:1f:17:30:03:2f:4b:c1:a4: 6e:93:0f:dd:05:a6:55:04:38:fc:8f:35:20:5e:46:e7:96:0c: 5a:67:04:3e:e4:27:5e:0c:17:62:05:3c:09:2f:39:f8:7e:27: 34:3d:02:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTEyMDUwNTA0MDRaFw0yNTEyMTIwNTA0MDRaMBgxFjAUBgNV BAMTDTY5MzI2N2M0LWIwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS9s3rqxYJsxuWNWdkf+PFdlQXTYQypj6QV1lSCNicofJwApAhC+NKKCtmd1ua DPVMsCQuXvfXo5x7zzX4aLeYsZnXEL7oCZRP4qKEzpoGi1B8AYVHbULExmLcYJte T5mPHJLfsM3LXJZ3+SdcvqHyiOsD+pScRa2haUw0SrMkAVRGEEYCy1AP1m4upSKt oYgsCtq4Q4e+H9qr8vbxJ02Q+3Fmo873+vIfXxkEls7fd9Ch13cKMzFRF54KAkT2 qKZC0TGQazACAYJg5COHJllo5QkfSQnu7NlRjbsKsmZqXd4Aun7Jbe2XW8cRIvaK YHQ8UMLY6qs9JAUYc1gyKghZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzLXF5OIc OSGBydTd6TcykmjYKlcwHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RTlGLzIzMDI3MTI0NTE3MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEt Z0FOUTJocHJnOFhicTZUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAECbIQAVHBgs0NAJSigDRXkR6/2CPke7LkACW3G1V5A3FuPbk7A285OU hy8Nys4157D82FheuWe4CWQavx4+wcJgl/q/TUBkz/dIWcE2fr0UuvVcPj5N0Alt q91keSfhpMR5j0491l32Z7fABheQYlSWgTO4FbnWWl5g/3J7g3vpHnEu3SfW16HC Hc5yMFZOVZpBzK6MD9lMeNHahn0iKgS7BcoJEDjgNKXdikEP1p/uF0P6+hMze/et ZRy8i3rt/M8kA3+fALjk/+DDxeOncS4fFzADL0vBpG6TD90FplUEOPyPNSBeRueW DFpnBD7kJ14MF2IFPAkvOfh+JzQ9Aoc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:18 2025 by rpki-client