This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: K+O0ZOsxckECJs1XstE9Bxs9HVQvSjisSUqzO4XRJMs= Subject key identifier: 32:34:4F:F0:2A:B8:E2:B9:9B:52:3A:64:89:E9:2D:A3:B1:70:56:64 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 0602 Signing time: Thu 04 Dec 2025 21:37:43 +0000 Manifest this update: Thu 04 Dec 2025 21:37:42 +0000 Manifest next update: Thu 11 Dec 2025 21:37:42 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: 2VFq+aI0VuE8d7dMyTxW1DgHXPlZ/FZo6/c5Ai+BTUI=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Dec 4 21:37:42 2025 GMT Not After : Dec 11 21:37:42 2025 GMT Subject: CN=6931ff26-1196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:e0:95:2b:2d:a3:81:d3:44:ee:6f:75:db: 56:32:23:24:54:e4:84:66:25:9c:23:15:86:b9:4b: f4:c6:0a:c3:7c:fd:69:4b:f5:03:b4:81:08:13:81: d6:24:1c:ac:16:d4:c2:bb:5d:13:9a:84:52:d3:23: 2f:86:c7:0d:ed:34:da:22:72:f6:14:a9:07:74:c5: 56:17:1d:5c:4a:c2:82:6f:ef:05:c0:72:ba:4a:d1: b6:aa:79:8c:2f:3a:f6:0d:c1:ff:4e:42:69:4d:b5: 20:05:ef:fc:13:09:81:da:f6:12:e7:98:26:ec:bc: 79:c2:52:c8:e1:ab:59:e7:51:94:96:89:cd:34:64: 88:9c:39:96:9c:05:4d:e6:2a:7f:94:33:20:62:ae: 2a:08:24:5b:2e:e6:f8:d7:48:2f:ea:04:38:ff:97: c3:64:b8:fb:8f:56:39:bd:4a:c3:5f:1d:53:d3:15: 18:ef:1e:d1:7d:ce:44:f3:83:7e:b8:2c:8a:30:fa: 8d:06:cb:19:9c:02:cb:a3:bf:ef:cb:9f:bc:7f:9e: 69:10:35:24:08:31:32:af:5e:5e:bc:2a:79:ab:c3: 1f:c6:b2:5c:b2:8d:42:28:ef:0e:5d:71:e8:99:7b: 09:cf:a7:24:88:1f:cb:d3:94:55:76:71:33:48:d4: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:34:4F:F0:2A:B8:E2:B9:9B:52:3A:64:89:E9:2D:A3:B1:70:56:64 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8d:16:ca:7e:48:c3:2f:30:f3:ca:24:f1:e1:21:fe:d3:36: e4:72:50:15:01:ef:b5:db:04:a4:8c:54:29:ce:2b:c2:57:39: 93:78:41:48:dc:30:52:6a:f0:e6:47:13:40:d1:82:e5:a1:18: 72:83:b7:4c:37:64:78:63:13:1e:7a:37:c0:69:0c:af:14:c1: 5c:90:6d:3a:62:83:16:b8:6a:85:1a:a1:ef:24:2b:0c:75:6d: 73:a5:5d:97:cd:0a:a2:7f:5f:87:85:b8:2c:36:a6:b0:e0:e5: ca:db:7e:3e:83:e1:46:00:65:e9:73:04:91:7e:f8:84:e7:f1: 07:2b:e1:d7:62:b5:c5:a9:6b:f1:de:42:55:7b:75:34:f0:91: 44:be:39:b3:23:2d:64:fb:5a:38:6c:6a:ae:e9:51:a3:b4:d8: fa:c0:b0:a8:05:72:08:66:a7:39:1a:71:38:af:72:e5:23:81: 89:9e:5a:70:f3:dd:bf:1a:85:72:71:00:74:39:dc:d9:f8:4c: e8:ee:05:e4:a5:93:3d:03:2e:22:2e:41:7d:c3:a5:9c:6c:f6: 3f:2a:0b:e7:0e:8d:40:1c:ad:01:34:97:6a:cc:4a:c6:67:10: 49:cb:40:54:a7:9e:a8:22:14:e9:9a:b8:d0:1a:f8:e2:24:ea: 69:de:23:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUxMjA0MjEzNzQyWhcNMjUxMjExMjEzNzQyWjAYMRYwFAYD VQQDEw02OTMxZmYyNi0xMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKvglSsto4HTRO5vddtWMiMkVOSEZiWcIxWGuUv0xgrDfP1pS/UDtIEIE4HW JBysFtTCu10TmoRS0yMvhscN7TTaInL2FKkHdMVWFx1cSsKCb+8FwHK6StG2qnmM Lzr2DcH/TkJpTbUgBe/8EwmB2vYS55gm7Lx5wlLI4atZ51GUlonNNGSInDmWnAVN 5ip/lDMgYq4qCCRbLub410gv6gQ4/5fDZLj7j1Y5vUrDXx1T0xUY7x7Rfc5E84N+ uCyKMPqNBssZnALLo7/vy5+8f55pEDUkCDEyr15evCp5q8MfxrJcso1CKO8OXXHo mXsJz6ckiB/L05RVdnEzSNRj0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI0T/Aq uOK5m1I6ZInpLaOxcFZkMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsjRbKfkjDLzDzyiTx4SH+0zbkclAVAe+12wSkjFQpzivCVzmTeEFI 3DBSavDmRxNA0YLloRhyg7dMN2R4YxMeejfAaQyvFMFckG06YoMWuGqFGqHvJCsM dW1zpV2XzQqif1+HhbgsNqaw4OXK234+g+FGAGXpcwSRfviE5/EHK+HXYrXFqWvx 3kJVe3U08JFEvjmzIy1k+1o4bGqu6VGjtNj6wLCoBXIIZqc5GnE4r3LlI4GJnlpw 892/GoVycQB0OdzZ+Ezo7gXkpZM9Ay4iLkF9w6WcbPY/KgvnDo1AHK0BNJdqzErG ZxBJy0BUp56oIhTpmrjQGvjiJOpp3iPd -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:06 2025 by rpki-client