This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json) Hash identifier: n9mD3L0w9QgFw3Icfn5qE9fL52ARHbORu6c7BBee6D4= Subject key identifier: 36:BF:2C:0D:09:60:05:BC:CF:8E:C2:13:9F:3F:C0:C3:7E:FD:27:B9 Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft Manifest number: 063D Signing time: Sat 06 Dec 2025 21:35:27 +0000 Manifest this update: Sat 06 Dec 2025 21:35:27 +0000 Manifest next update: Sat 13 Dec 2025 21:35:27 +0000 Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: 2N/ZiJKwb4OKyErrI0fIjUkjJBdUsVuNUiFTF0rqOY4=) 2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: yTRObH5HORzIjpQc8hjpzukLHQFJTBfO9ossVqi4KUU=) 3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Validity Not Before: Dec 6 21:35:27 2025 GMT Not After : Dec 13 21:35:27 2025 GMT Subject: CN=6934a19f-09e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:44:50:d9:86:65:eb:74:79:ca:1b:de:fb: 8d:6c:f4:fd:b7:d4:5b:1f:fb:60:d5:a2:17:99:78: 8a:5d:51:58:83:f7:22:e9:03:66:bd:9d:f9:b5:e2: 16:65:c4:10:8d:90:a7:da:ef:66:d3:e1:56:cf:13: b6:ab:79:64:5d:7d:86:1b:94:36:d3:5c:df:aa:1c: a3:5f:4e:7c:a1:23:6f:3d:59:a4:f0:2c:f2:df:9c: 17:54:1b:d9:6c:0c:c3:61:e0:ef:07:24:05:46:3a: ae:01:a2:e3:05:84:1b:f8:0d:e1:85:b3:cd:2a:32: a3:7e:fa:d3:d5:12:6c:75:a1:18:1d:6f:ba:95:30: d8:ad:8c:5c:be:8e:c2:fa:9d:4a:3e:a7:c1:2b:64: ad:2d:46:41:a0:f9:13:25:58:67:5e:94:01:f4:86: 95:1a:11:dd:2d:1f:d3:2c:c5:1f:f0:72:09:1e:f4: 95:db:42:2d:75:77:99:3b:e5:b8:e2:f1:04:75:d1: 16:42:f4:cb:f3:5b:5f:ff:a5:4e:74:09:a0:2e:da: 55:19:11:91:b1:20:3d:93:b0:80:22:b6:59:ed:51: ad:9e:32:7a:b9:32:6b:80:63:5f:ef:3b:2d:7a:e6: 1b:6f:6e:fb:0a:df:20:e2:9f:80:9a:24:34:a0:77: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BF:2C:0D:09:60:05:BC:CF:8E:C2:13:9F:3F:C0:C3:7E:FD:27:B9 X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:48:a2:a7:77:18:98:b6:24:c3:e0:04:78:8e:b8:3f:14:26: fb:79:35:7c:6f:d8:97:c5:a4:c8:45:af:49:ed:fb:f0:52:56: 03:4e:d6:55:70:d6:68:2f:38:c1:d6:d2:3f:82:10:38:d5:64: 9e:29:33:b7:52:3d:37:74:20:07:48:18:d3:38:97:db:44:8c: 5b:59:50:30:2d:cf:e9:2b:2d:67:49:82:39:1e:9f:8c:83:11: 84:82:e2:af:a1:f1:c2:da:ff:fb:3c:1f:8a:9c:d7:01:9c:9a: a7:94:32:5b:31:3a:18:2b:4b:6b:ac:09:5d:58:3b:a2:f0:71: b3:55:85:94:7d:79:1c:4a:8f:88:20:12:38:90:ec:a8:da:1e: 8a:33:5f:cf:0f:82:d1:db:b3:79:4d:2b:05:c3:df:f9:8e:2c: 47:1f:d3:10:d6:4e:2c:d7:c4:93:60:c7:23:0f:7a:4f:5c:a0: a8:64:e8:5c:8e:ac:e8:f0:d8:3e:a4:db:b7:fc:98:b2:2a:2e: c5:8b:ee:57:e5:e1:74:97:ca:84:a4:53:b1:f6:72:ae:8c:5b: 3b:9a:5b:76:a5:46:9b:f1:7e:3e:31:47:49:cb:10:87:b5:ed: 54:43:0f:c4:80:72:6c:a7:63:e2:2f:27:25:86:44:dd:b9:ab: 0c:14:4d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjUxMjA2MjEzNTI3WhcNMjUxMjEzMjEzNTI3WjAYMRYwFAYD VQQDEw02OTM0YTE5Zi0wOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwadEUNmGZet0ecob3vuNbPT9t9RbH/tg1aIXmXiKXVFYg/ci6QNmvZ35teIW ZcQQjZCn2u9m0+FWzxO2q3lkXX2GG5Q201zfqhyjX058oSNvPVmk8Czy35wXVBvZ bAzDYeDvByQFRjquAaLjBYQb+A3hhbPNKjKjfvrT1RJsdaEYHW+6lTDYrYxcvo7C +p1KPqfBK2StLUZBoPkTJVhnXpQB9IaVGhHdLR/TLMUf8HIJHvSV20ItdXeZO+W4 4vEEddEWQvTL81tf/6VOdAmgLtpVGRGRsSA9k7CAIrZZ7VGtnjJ6uTJrgGNf7zst euYbb277Ct8g4p+AmiQ0oHewGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa/LA0J YAW8z47CE58/wMN+/Se5MB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS MnpteU4wTmJGMDNuQ1pUd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXSKKndxiYtiTD4AR4jrg/FCb7eTV8b9iXxaTIRa9J7fvwUlYDTtZV cNZoLzjB1tI/ghA41WSeKTO3Uj03dCAHSBjTOJfbRIxbWVAwLc/pKy1nSYI5Hp+M gxGEguKvofHC2v/7PB+KnNcBnJqnlDJbMToYK0trrAldWDui8HGzVYWUfXkcSo+I IBI4kOyo2h6KM1/PD4LR27N5TSsFw9/5jixHH9MQ1k4s18STYMcjD3pPXKCoZOhc jqzo8Ng+pNu3/JiyKi7Fi+5X5eF0l8qEpFOx9nKujFs7mlt2pUab8X4+MUdJyxCH te1UQw/EgHJsp2PiLyclhkTduasMFE2y -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:29 2025 by rpki-client