This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: LSZsjbjxvTHfDTkpO3k4CD+xh5YCGJ0F9doCB+72H9k= Subject key identifier: BA:2D:72:AD:27:BF:4D:CD:21:C0:F4:CC:25:79:02:B0:A4:7A:0D:95 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 8E Signing time: Fri 05 Dec 2025 04:31:13 +0000 Manifest this update: Fri 05 Dec 2025 04:31:13 +0000 Manifest next update: Fri 12 Dec 2025 04:31:13 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: 14F1ASxLXKW/1MF/Ecq/K9brL+ipFHzLOYhymvzmYc8=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Dec 5 04:31:13 2025 GMT Not After : Dec 12 04:31:13 2025 GMT Subject: CN=69326011-b609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:5e:ec:36:f5:e5:22:04:e4:43:6c:22:25: 5f:1e:ea:46:b1:66:67:a7:3e:8d:9e:99:43:bc:99: 40:aa:14:71:63:53:cc:c4:54:88:a7:bc:7a:93:b0: 2e:c3:89:d8:d8:32:ef:dd:26:f9:ed:d0:71:7a:40: 0f:7e:79:35:74:86:a9:94:3b:c7:05:f2:37:ca:e3: 99:f8:ac:e4:09:8a:5c:40:66:0f:4c:b6:ca:ff:59: 9a:f4:4b:5b:c6:99:fd:93:7a:30:bd:0d:b3:1c:b7: 17:a5:e2:6e:1a:ec:78:de:3d:da:19:14:0b:dc:32: 37:0a:6f:ef:b5:7b:4b:ad:e2:98:74:8d:0b:23:24: c2:0f:bb:27:8e:9e:33:e2:67:02:30:3e:a1:f5:c6: 11:74:12:b3:3f:7d:9a:76:0e:6f:54:88:a4:35:77: c3:e8:a9:54:3d:e9:22:75:f6:33:a7:b0:23:fb:43: 3f:89:b2:f8:0f:4b:a5:d5:cb:be:8e:04:68:21:9f: 7d:26:60:20:30:77:e7:82:99:dd:76:cb:d4:8e:d6: 7c:d2:35:5b:a3:72:d7:a2:ed:35:fa:0e:c9:6a:25: 2a:e9:40:a4:a3:69:58:f1:2a:17:77:b6:be:e3:b1: de:c8:4b:35:2f:e3:b5:e5:29:16:51:92:6a:6b:8e: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2D:72:AD:27:BF:4D:CD:21:C0:F4:CC:25:79:02:B0:A4:7A:0D:95 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1e:57:36:53:51:93:eb:71:20:82:27:f4:aa:e2:c3:6f:85: ca:84:24:a4:2e:b0:0b:94:26:c2:8c:e1:55:2b:3c:f5:04:d2: 67:29:97:f3:16:73:0f:fe:53:dc:65:40:0f:49:2f:04:22:06: 52:29:49:a2:8b:69:15:05:63:7e:12:be:61:68:5a:8a:97:44: 0c:2c:3e:36:78:70:5a:f7:6b:84:e1:ca:fd:a4:c8:67:e9:f5: 54:f7:55:c6:2b:1e:c6:9b:2c:c8:91:93:0e:7d:46:b2:3b:74: 04:eb:62:e5:7f:3a:db:14:3b:63:3f:2d:8b:4a:34:df:11:c2: ae:b7:e6:a5:58:5c:1b:59:b7:40:28:06:5c:81:ad:f9:9c:24: 1e:26:d8:5d:d2:4e:77:c0:89:bc:f4:bb:a5:7c:e8:a8:b6:89: 68:a2:c3:e0:d4:24:0e:83:89:94:0b:3b:31:bf:0e:41:e4:69: 78:6c:82:5a:f6:dd:50:30:1e:25:54:84:8f:7f:f3:12:df:dd: c6:f5:e3:a1:19:fd:7e:02:13:91:eb:31:03:7c:b4:59:29:ab: 6a:55:17:62:79:4c:98:d1:18:ad:48:94:7a:4d:a5:eb:6e:1b: 82:ca:4a:04:6a:41:da:eb:10:88:89:f8:03:68:33:52:63:11: 04:72:5b:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NzQxMTAvBgNVBAUTKDkwQjJGMTJCRTdBNTg2NjNCRjE1REM3MTdFN0Q0MEIz MDI0MUI4RUEwHhcNMjUxMjA1MDQzMTEzWhcNMjUxMjEyMDQzMTEzWjAYMRYwFAYD VQQDEw02OTMyNjAxMS1iNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJpe7Db15SIE5ENsIiVfHupGsWZnpz6NnplDvJlAqhRxY1PMxFSIp7x6k7Au w4nY2DLv3Sb57dBxekAPfnk1dIaplDvHBfI3yuOZ+KzkCYpcQGYPTLbK/1ma9Etb xpn9k3owvQ2zHLcXpeJuGux43j3aGRQL3DI3Cm/vtXtLreKYdI0LIyTCD7snjp4z 4mcCMD6h9cYRdBKzP32adg5vVIikNXfD6KlUPekidfYzp7Aj+0M/ibL4D0ul1cu+ jgRoIZ99JmAgMHfngpnddsvUjtZ80jVbo3LXou01+g7JaiUq6UCko2lY8SoXd7a+ 47HeyEs1L+O15SkWUZJqa44uswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLotcq0n v03NIcD0zCV5ArCkeg2VMB8GA1UdIwQYMBaAFJCy8SvnpYZjvxXccX59QLMCQbjq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk3NC9FNEU4OTAwRUZC NjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGhtT19GZHh4Zm4xQXN3SkJ1 T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk3NC9FNEU4OTAwRUZCNjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGht T19GZHh4Zm4xQXN3SkJ1T28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpHlc2U1GT63Eggif0quLDb4XKhCSkLrALlCbCjOFVKzz1BNJnKZfz FnMP/lPcZUAPSS8EIgZSKUmii2kVBWN+Er5haFqKl0QMLD42eHBa92uE4cr9pMhn 6fVU91XGKx7GmyzIkZMOfUayO3QE62LlfzrbFDtjPy2LSjTfEcKut+alWFwbWbdA KAZcga35nCQeJthd0k53wIm89LulfOiotoloosPg1CQOg4mUCzsxvw5B5Gl4bIJa 9t1QMB4lVISPf/MS393G9eOhGf1+AhOR6zEDfLRZKatqVRdieUyY0RitSJR6TaXr bhuCykoEakHa6xCIifgDaDNSYxEEclvR -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:43 2025 by rpki-client