This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json) Hash identifier: FTYihd6xmVJqzoULQflBJ722gx9MaWJKHhs0TENwxcw= Subject key identifier: EA:F1:15:F1:F8:98:1D:1E:39:F2:3B:D9:16:56:80:92:E1:CD:05:4F Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft Manifest number: 43 Signing time: Fri 05 Dec 2025 05:16:30 +0000 Manifest this update: Fri 05 Dec 2025 05:16:30 +0000 Manifest next update: Fri 12 Dec 2025 05:16:30 +0000 Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: X7pVTGjeM1Qa5JR5EKMl6ylJ3h1M8qKMyiGayryjlzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Validity Not Before: Dec 5 05:16:30 2025 GMT Not After : Dec 12 05:16:30 2025 GMT Subject: CN=69326aae-c6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:c0:48:ec:ca:fb:6a:d9:2d:9d:e6:b6:2d: e8:6e:e2:13:49:ae:2f:11:7d:37:df:65:43:44:74: 35:d4:7e:4c:97:5d:1f:f4:40:63:6c:6c:3e:1a:66: 09:e5:35:e8:7e:b3:39:eb:a0:e7:a4:b5:d0:9f:b8: 3b:ce:2b:ae:2a:ed:10:e9:24:3f:f0:c7:e1:f0:a2: 85:35:04:83:84:d3:0a:8f:34:99:31:f7:76:03:9e: fd:41:0a:c5:c0:1b:e0:b5:f3:2a:e7:48:1f:53:7a: 71:cc:f4:89:c7:e5:4b:59:46:50:41:56:39:10:f6: af:bb:05:cb:fc:0a:a5:d7:c0:0d:1b:c8:99:b8:2e: da:35:ef:57:17:1d:7b:b1:22:6b:26:cd:bc:4f:21: ca:59:e5:29:74:cc:79:5f:0d:75:15:d7:d7:b5:78: 49:ee:6e:bc:d5:ab:f5:99:6a:3e:7b:75:dc:87:11: a6:7b:be:8d:85:e2:b8:fd:ef:cd:26:a1:8e:ab:42: 6c:d5:d7:ae:18:6b:aa:0f:49:ff:7f:ff:1e:d0:38: 7a:6b:73:8b:ab:a4:73:2a:f5:46:47:d8:73:53:a5: 56:b0:0d:0d:4d:24:d0:25:de:2e:77:c2:90:5f:8c: ed:07:23:c4:6c:1a:a5:eb:77:61:3d:7b:3d:3c:ad: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F1:15:F1:F8:98:1D:1E:39:F2:3B:D9:16:56:80:92:E1:CD:05:4F X509v3 Authority Key Identifier: keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:07:98:b2:dd:26:61:05:f0:52:c2:51:5e:f6:1e:0d:93:46: 4f:11:a3:53:9c:88:c3:76:05:d4:e2:f4:e7:a6:df:bc:1c:7c: 5a:8f:a5:ce:05:c6:ff:f0:dc:b9:2b:ea:e5:a2:62:28:77:71: 39:23:9c:44:b8:60:15:20:dc:f7:0c:1f:b7:ee:ab:ca:a4:b8: de:e1:1a:aa:40:f0:9b:33:21:3d:89:85:ac:4a:90:6e:77:7e: 46:69:50:a7:34:59:eb:6b:61:59:82:f8:24:08:27:c6:6e:a2: ef:ae:eb:a5:81:50:0c:f4:af:b4:e5:c8:2d:00:58:5f:48:8d: c6:be:a9:c8:ea:85:80:95:42:53:cb:0d:de:29:59:eb:b2:5a: ac:03:32:28:09:14:f2:74:d4:8d:b3:d1:dc:02:a2:95:f8:ef: 98:06:94:a1:28:eb:14:52:34:9f:95:73:9f:a1:fc:6b:85:25: ae:2b:47:35:be:e4:91:e9:d6:3a:8a:8e:e0:2b:6a:6d:b4:4d: 02:cf:a7:91:bc:53:b6:7d:b0:d0:c7:40:1e:79:02:18:5f:c2: c4:7f:dd:b9:b9:44:90:55:03:cb:45:3a:a3:ea:c3:e9:29:05: 7a:7a:a9:f5:cf:ba:20:95:2d:1e:17:a4:98:92:77:d4:12:b4: 66:79:e8:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoOTBDQjdGQTEzNzk2OUM0MzU2QTRDQTUyRjcwNURDQTFB QjIyNUZEMDAeFw0yNTEyMDUwNTE2MzBaFw0yNTEyMTIwNTE2MzBaMBgxFjAUBgNV BAMTDTY5MzI2YWFlLWM2YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOWcBI7Mr7atktnea2Lehu4hNJri8RfTffZUNEdDXUfkyXXR/0QGNsbD4aZgnl Neh+sznroOektdCfuDvOK64q7RDpJD/wx+HwooU1BIOE0wqPNJkx93YDnv1BCsXA G+C18yrnSB9TenHM9InH5UtZRlBBVjkQ9q+7Bcv8CqXXwA0byJm4Lto171cXHXux ImsmzbxPIcpZ5Sl0zHlfDXUV19e1eEnubrzVq/WZaj57ddyHEaZ7vo2F4rj9780m oY6rQmzV164Ya6oPSf9//x7QOHprc4urpHMq9UZH2HNTpVawDQ1NJNAl3i53wpBf jO0HI8RsGqXrd2E9ez08rYM1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6vEV8fiY HR458jvZFlaAkuHNBU8wHwYDVR0jBBgwFoAUkMt/oTeWnENWpMpS9wXcoasiX9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzQxOUU3RTEyNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVOV3BNcFM5d1hjb2FzaVg5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva010X29UZVduRU5XcE1wUzl3WGNvYXNpWDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzQxOUU3RTEyNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVO V3BNcFM5d1hjb2FzaVg5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD4HmLLdJmEF8FLCUV72Hg2TRk8Ro1OciMN2BdTi9Oem37wcfFqPpc4F xv/w3Lkr6uWiYih3cTkjnES4YBUg3PcMH7fuq8qkuN7hGqpA8JszIT2JhaxKkG53 fkZpUKc0WetrYVmC+CQIJ8Zuou+u66WBUAz0r7TlyC0AWF9Ijca+qcjqhYCVQlPL Dd4pWeuyWqwDMigJFPJ01I2z0dwCopX475gGlKEo6xRSNJ+Vc5+h/GuFJa4rRzW+ 5JHp1jqKjuAram20TQLPp5G8U7Z9sNDHQB55AhhfwsR/3bm5RJBVA8tFOqPqw+kp BXp6qfXPuiCVLR4XpJiSd9QStGZ56Ek= -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:00 2025 by rpki-client