This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: msH4pUzIZPxFmWnVu58t9YJCJ4nhfeIpIwoB60WOYqo= Subject key identifier: A8:EE:C1:BC:2C:85:84:21:2D:4D:8D:70:D9:F2:23:6F:B7:D6:42:B6 Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 023B Signing time: Fri 05 Dec 2025 00:11:10 +0000 Manifest this update: Fri 05 Dec 2025 00:11:09 +0000 Manifest next update: Fri 12 Dec 2025 00:11:09 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: J6MAWEVBiVcFb1ZuBR4BgevvQRCehJoWtrxaVoXWcmY=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: hbdkOUT0eBQ98Cc0oj/9P37h6+6Kubs6FMec8+3wPTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Dec 5 00:11:09 2025 GMT Not After : Dec 12 00:11:09 2025 GMT Subject: CN=6932231d-0b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:95:e2:95:52:cb:66:20:ea:0e:8b:44:80: e9:38:90:c8:4e:b9:4f:70:c1:2a:33:cb:a1:7b:28: 9a:68:cd:0e:15:ee:af:a0:a3:06:45:3a:66:24:74: c2:bf:67:a6:2b:30:16:15:25:11:ee:d0:90:5c:e5: 7f:49:a6:ed:64:c4:ac:01:44:6b:ad:c7:46:c2:7d: ba:f9:90:7d:69:a7:21:5d:b2:42:93:0e:55:b0:2b: ef:d5:e5:7c:d8:b6:f3:ae:c8:52:92:12:40:1b:c5: 33:41:38:0b:10:04:fa:fa:68:de:f6:bf:ad:2e:90: fc:54:df:e2:59:5a:39:40:8d:c3:35:39:ae:a2:a0: 90:2b:bf:d1:40:a8:f4:70:0e:9c:65:b4:4a:0c:9b: c6:e2:75:f3:9d:c8:87:8e:d6:05:3c:8d:88:39:f8: 8c:53:f5:7e:ef:eb:ea:67:ff:9d:b6:27:35:97:c6: 6b:8b:17:47:73:f8:12:4d:b6:02:a6:32:28:87:b4: e0:6d:89:29:b5:27:6e:66:b8:af:3b:2e:ac:47:71: 91:6a:de:01:bc:c0:46:35:ad:71:ae:06:d1:e2:53: 24:0c:69:26:a5:1a:c3:ae:4c:48:8b:7a:38:0a:67: 32:b4:f5:81:84:a6:3a:66:7a:24:43:e8:8f:a9:53: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EE:C1:BC:2C:85:84:21:2D:4D:8D:70:D9:F2:23:6F:B7:D6:42:B6 X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0e:16:00:15:29:ba:90:51:b0:c2:98:93:01:20:84:de:82: 8c:80:52:6e:5b:3d:c4:19:60:3b:b3:4b:af:3d:72:be:4a:85: b7:41:30:3b:5c:10:cd:f5:7f:a8:db:e8:2a:0a:a6:fc:2b:9a: 46:30:3c:c2:98:b9:c5:fb:5d:61:5b:71:f0:6b:2a:42:7f:2c: 04:05:4e:6f:13:3a:fe:a3:4c:d8:6c:12:fa:9f:12:ef:09:c2: 49:99:e3:21:54:25:69:31:ea:12:95:6c:d2:5f:7c:6d:54:ea: 7d:62:b7:86:dd:ac:71:71:ed:5d:b4:34:5c:98:3f:12:60:2f: f1:32:3f:40:f7:55:d3:54:55:f8:7e:3f:0d:7b:3f:08:53:fb: c8:7b:42:1e:d2:e4:dd:90:12:35:7e:57:c0:25:f4:01:96:b8: c6:88:40:61:c9:4f:0a:02:f0:f2:2c:7b:cc:ff:49:99:62:23: 0d:d0:fe:7d:13:80:45:c8:48:82:11:34:80:75:7b:64:b7:70: 46:69:fb:fe:13:1f:a1:c5:ed:4d:6b:fc:1a:c0:37:9e:1f:c1: a7:8c:4a:c7:df:1e:cb:30:46:41:32:90:5a:1f:1a:bb:8f:c9: 06:08:e6:5d:10:ee:6d:ad:87:d5:a3:87:a1:32:a7:d9:1a:2d: f8:04:b3:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjUxMjA1MDAxMTA5WhcNMjUxMjEyMDAxMTA5WjAYMRYwFAYD VQQDEw02OTMyMjMxZC0wYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNiV4pVSy2Yg6g6LRIDpOJDITrlPcMEqM8uheyiaaM0OFe6voKMGRTpmJHTC v2emKzAWFSUR7tCQXOV/SabtZMSsAURrrcdGwn26+ZB9aachXbJCkw5VsCvv1eV8 2LbzrshSkhJAG8UzQTgLEAT6+mje9r+tLpD8VN/iWVo5QI3DNTmuoqCQK7/RQKj0 cA6cZbRKDJvG4nXznciHjtYFPI2IOfiMU/V+7+vqZ/+dtic1l8ZrixdHc/gSTbYC pjIoh7TgbYkptSduZrivOy6sR3GRat4BvMBGNa1xrgbR4lMkDGkmpRrDrkxIi3o4 CmcytPWBhKY6ZnokQ+iPqVNPqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjuwbws hYQhLU2NcNnyI2+31kK2MB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdDhYAFSm6kFGwwpiTASCE3oKMgFJuWz3EGWA7s0uvPXK+SoW3QTA7 XBDN9X+o2+gqCqb8K5pGMDzCmLnF+11hW3HwaypCfywEBU5vEzr+o0zYbBL6nxLv CcJJmeMhVCVpMeoSlWzSX3xtVOp9YreG3axxce1dtDRcmD8SYC/xMj9A91XTVFX4 fj8Nez8IU/vIe0Ie0uTdkBI1flfAJfQBlrjGiEBhyU8KAvDyLHvM/0mZYiMN0P59 E4BFyEiCETSAdXtkt3BGafv+Ex+hxe1Na/wawDeeH8GnjErH3x7LMEZBMpBaHxq7 j8kGCOZdEO5trYfVo4ehMqfZGi34BLMM -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:43 2025 by rpki-client