This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: uGwmSAgsvwAnS7H2n2mVyhYRQ4rRHaf2pPVwBs5/elI= Subject key identifier: FD:62:44:81:D3:D9:37:A1:85:31:A0:00:14:BE:46:FE:32:97:7B:38 Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 03F7 Signing time: Thu 04 Dec 2025 22:58:48 +0000 Manifest this update: Thu 04 Dec 2025 22:58:48 +0000 Manifest next update: Thu 11 Dec 2025 22:58:48 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: 92QOZVOR6tlLAh52N64l2MOxFFEJJyAkUjPL7kNRUW4=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: CoOJrAcKTrWo0nejzXhp58RWFVEIO9a7vZX9DurBX3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Dec 4 22:58:48 2025 GMT Not After : Dec 11 22:58:48 2025 GMT Subject: CN=69321228-a74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:f3:9e:21:e4:6e:e0:8e:90:25:ac:de:bb: f1:42:ba:af:07:da:85:d5:21:28:19:20:54:fe:35: 17:b1:74:ff:4b:dd:ba:79:f5:e9:71:96:99:0c:0c: b9:02:6d:36:94:ca:12:0f:bd:13:eb:e7:c0:4d:92: ad:72:33:bc:1e:49:b3:7f:34:e6:99:2d:81:dd:a9: 91:34:83:f9:02:c7:df:b5:ab:d8:52:fa:7b:12:05: d1:85:03:ca:28:2f:f8:20:db:b2:a3:cd:a3:61:8d: 55:d8:7a:89:f1:ce:d9:e2:5e:89:ce:4d:2d:3c:cf: 44:ac:7a:1a:eb:2c:3f:e6:54:f6:c8:f9:9f:44:de: e4:79:ff:3f:0c:c0:be:97:07:32:f9:e2:b4:83:52: 0b:46:21:ce:a2:a1:a2:20:39:71:1e:7c:cf:b8:7b: 8c:b5:34:2f:a9:ca:0e:a8:ca:a4:11:64:f1:7e:0b: 75:a2:25:15:5e:8e:ef:a1:ba:51:7a:69:4d:bd:5b: 98:bc:7f:8e:a1:73:fc:fc:1a:67:74:a6:aa:d8:72: a5:29:7c:b8:44:87:2f:63:e3:c9:6b:13:89:38:04: 73:2a:ed:d3:8d:be:0c:74:92:47:60:f1:85:c9:59: 9d:07:1d:ab:88:65:08:cc:34:94:14:a7:4f:96:16: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:44:81:D3:D9:37:A1:85:31:A0:00:14:BE:46:FE:32:97:7B:38 X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a5:a9:a7:aa:8d:92:fe:db:81:40:d8:67:65:a2:51:75:f3: eb:56:28:31:24:42:4e:53:1a:58:a9:de:30:15:dc:48:64:04: 76:92:04:33:b5:b4:c9:d9:75:70:90:8c:de:71:11:7c:ef:5b: 5a:e5:4f:69:e3:8f:17:c9:30:0f:dd:9d:eb:9b:0a:64:7f:f6: 2e:63:a9:a2:18:e8:9a:09:1b:d9:f3:56:e9:b9:5b:27:38:fa: 5b:ed:ff:ff:1c:a0:ae:3e:73:2a:af:de:e2:fb:48:ce:c8:0e: 26:4a:58:2a:6b:5f:72:96:6d:eb:0c:1a:79:34:62:fd:94:43: e7:59:e5:00:3a:87:19:f6:3f:87:d0:97:56:f6:a5:c9:49:3a: e1:e0:6b:18:01:01:94:db:c0:b8:68:5d:b7:94:f3:9e:49:ee: 5d:d3:5a:3c:be:15:a4:f6:cc:95:e9:31:a2:d5:60:f5:1c:51: 9c:32:78:e5:69:d5:cd:a9:9d:a2:14:ce:a0:7b:94:90:18:1f: 15:f3:55:b6:96:1b:60:8d:99:dc:47:49:58:8d:b3:72:1e:cc: 95:8a:d3:f5:e2:a1:a2:be:24:4c:3a:b6:31:8a:9d:0c:37:17: 6b:a5:2e:4f:0a:ea:74:18:f1:eb:1c:4e:4e:e1:e9:76:4d:8d: 3c:7e:5e:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjUxMjA0MjI1ODQ4WhcNMjUxMjExMjI1ODQ4WjAYMRYwFAYD VQQDEw02OTMyMTIyOC1hNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD7zniHkbuCOkCWs3rvxQrqvB9qF1SEoGSBU/jUXsXT/S926efXpcZaZDAy5 Am02lMoSD70T6+fATZKtcjO8HkmzfzTmmS2B3amRNIP5AsfftavYUvp7EgXRhQPK KC/4INuyo82jYY1V2HqJ8c7Z4l6Jzk0tPM9ErHoa6yw/5lT2yPmfRN7kef8/DMC+ lwcy+eK0g1ILRiHOoqGiIDlxHnzPuHuMtTQvqcoOqMqkEWTxfgt1oiUVXo7vobpR emlNvVuYvH+OoXP8/BpndKaq2HKlKXy4RIcvY+PJaxOJOARzKu3Tjb4MdJJHYPGF yVmdBx2riGUIzDSUFKdPlhagMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1iRIHT 2TehhTGgABS+Rv4yl3s4MB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPpamnqo2S/tuBQNhnZaJRdfPrVigxJEJOUxpYqd4wFdxIZAR2kgQz tbTJ2XVwkIzecRF871ta5U9p448XyTAP3Z3rmwpkf/YuY6miGOiaCRvZ81bpuVsn OPpb7f//HKCuPnMqr97i+0jOyA4mSlgqa19ylm3rDBp5NGL9lEPnWeUAOocZ9j+H 0JdW9qXJSTrh4GsYAQGU28C4aF23lPOeSe5d01o8vhWk9syV6TGi1WD1HFGcMnjl adXNqZ2iFM6ge5SQGB8V81W2lhtgjZncR0lYjbNyHsyVitP14qGiviRMOrYxip0M NxdrpS5PCup0GPHrHE5O4el2TY08fl4B -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:42 2025 by rpki-client