This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: 7DEpUW6LH6V+iL7oIL2UZK+cv5KDU12PMPsxPzntlOg= Subject key identifier: 53:C8:A2:38:CD:71:FB:32:C6:45:B1:CE:E7:98:56:77:1C:A7:36:6B Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 0613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 060A Signing time: Sat 20 Dec 2025 22:11:33 +0000 Manifest this update: Sat 20 Dec 2025 22:11:33 +0000 Manifest next update: Sat 27 Dec 2025 22:11:33 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: CB2pxMqOsME4LQVxAtlasD57xla6Ooi+QJeTuefTiZo=) 2: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 3: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 4: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Dec 20 22:11:33 2025 GMT Not After : Dec 27 22:11:33 2025 GMT Subject: CN=69471f15-3901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:4e:64:38:a0:b9:46:d4:02:ae:76:86:74: cf:ba:da:9b:fe:ff:e8:24:d8:00:af:1b:4a:d1:ed: 2b:32:bd:6d:be:4f:38:8d:8f:2c:44:bb:6f:ba:da: 98:c4:8d:2d:c6:33:ed:d6:27:c1:a8:69:54:61:d4: 37:bb:00:30:5f:71:89:de:c5:ea:c6:36:1a:6f:4b: c1:e8:94:71:1e:9b:ac:8c:7a:ab:92:90:9d:cc:d4: 96:e1:07:52:fd:70:9c:d6:6d:1d:70:7b:4f:4e:8d: f4:3c:fb:8b:80:83:75:98:b5:b9:2f:b5:9c:2f:0d: c9:b4:7b:03:18:19:72:2c:7c:35:98:84:3e:6b:17: b4:99:c5:be:80:d9:4e:2d:cc:2f:af:09:03:c9:78: 06:5c:73:91:68:36:d3:56:8e:fd:9c:55:ab:d8:6e: 41:29:1e:bd:f8:58:60:e0:19:d4:56:48:d9:28:81: 2a:7f:56:5d:65:40:2f:47:61:19:a9:4f:14:89:e2: 87:92:0b:cb:c5:bd:16:ec:4a:f8:25:21:cd:af:d7: c6:99:2e:33:e1:f9:14:d8:b4:62:f2:6c:97:7e:f6: 6b:8e:82:e6:33:ae:12:15:35:59:9e:72:8d:23:8d: fd:16:fa:95:ce:5c:15:24:0f:f8:f0:fd:f5:6e:6a: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C8:A2:38:CD:71:FB:32:C6:45:B1:CE:E7:98:56:77:1C:A7:36:6B X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:43:27:4e:74:09:70:5f:e8:82:c9:3e:20:a7:ea:c9:f9:4f: 30:0a:02:92:9b:66:1c:dc:8b:cd:e3:87:70:64:d4:eb:63:c5: 24:ff:30:c2:7f:13:99:da:5c:bf:62:b6:65:63:43:dc:d8:65: 9b:08:af:c5:b0:c4:16:c0:7c:b9:f8:13:b8:d7:94:be:c5:de: 29:1d:66:24:ed:a4:d6:b6:44:77:e7:bb:59:b3:7c:47:0d:dc: 19:a0:88:9d:10:a4:d3:58:26:37:f1:26:7a:25:8b:95:29:79: f3:8b:4f:28:ee:43:fe:61:99:8e:16:02:e2:7c:2d:20:01:79: cb:7b:d0:2e:88:fb:59:2d:33:84:35:b5:25:59:e1:81:13:94: 19:80:c4:7e:99:5a:9f:a3:82:d4:ce:2f:0e:c5:33:d0:04:a7: b8:5b:79:84:3d:73:0c:de:60:8a:36:dd:f2:73:33:7c:06:f2: 0e:73:94:e8:97:60:b5:07:93:dd:ad:dc:05:0d:fa:92:83:40: f7:45:81:f2:e4:b8:9e:a5:c3:c5:cf:8e:db:a2:1c:d9:1c:86: 78:1c:e2:94:3d:53:4d:d4:9a:22:b6:e6:22:7b:5c:cc:80:2c: ec:bf:6d:b8:50:c1:62:19:d7:35:13:c3:7d:ca:49:e4:91:5a: 1a:ce:19:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUxMjIwMjIxMTMzWhcNMjUxMjI3MjIxMTMzWjAYMRYwFAYD VQQDDA02OTQ3MWYxNS0zOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rFOZDiguUbUAq52hnTPutqb/v/oJNgArxtK0e0rMr1tvk84jY8sRLtvutqY xI0txjPt1ifBqGlUYdQ3uwAwX3GJ3sXqxjYab0vB6JRxHpusjHqrkpCdzNSW4QdS /XCc1m0dcHtPTo30PPuLgIN1mLW5L7WcLw3JtHsDGBlyLHw1mIQ+axe0mcW+gNlO LcwvrwkDyXgGXHORaDbTVo79nFWr2G5BKR69+Fhg4BnUVkjZKIEqf1ZdZUAvR2EZ qU8UieKHkgvLxb0W7Er4JSHNr9fGmS4z4fkU2LRi8myXfvZrjoLmM64SFTVZnnKN I439FvqVzlwVJA/48P31bmq7SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPIojjN cfsyxkWxzueYVnccpzZrMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIQydOdAlwX+iCyT4gp+rJ+U8wCgKSm2Yc3IvN44dwZNTrY8Uk/zDC fxOZ2ly/YrZlY0Pc2GWbCK/FsMQWwHy5+BO415S+xd4pHWYk7aTWtkR357tZs3xH DdwZoIidEKTTWCY38SZ6JYuVKXnzi08o7kP+YZmOFgLifC0gAXnLe9AuiPtZLTOE NbUlWeGBE5QZgMR+mVqfo4LUzi8OxTPQBKe4W3mEPXMM3mCKNt3yczN8BvIOc5To l2C1B5PdrdwFDfqSg0D3RYHy5LiepcPFz47bohzZHIZ4HOKUPVNN1JoituYie1zM gCzsv224UMFiGdc1E8N9yknkkVoazhnW -----END CERTIFICATE-----Generated at Sun Dec 21 00:16:11 2025 by rpki-client