This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft File: KdzyaXujSl1MV_LtlnGNAxu8VjA.mft (raw, json) Hash identifier: QLftFTCQKEijBpims2AbCOmHvyi9hYYF+0ol6Ffs6Ik= Subject key identifier: 2B:DB:1E:0A:13:9D:9E:BA:00:EC:30:08:F3:E8:B4:E5:EA:2F:EB:53 Authority key identifier: 29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 Certificate issuer: /CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Certificate serial: 166D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft Manifest number: 1663 Signing time: Sat 06 Dec 2025 16:18:42 +0000 Manifest this update: Sat 06 Dec 2025 16:18:42 +0000 Manifest next update: Sat 13 Dec 2025 16:18:42 +0000 Files and hashes: 1: KdzyaXujSl1MV_LtlnGNAxu8VjA.crl (hash: /NgtDDXkA+qfyyJ+AQVFAT8zkKTBB0w1aRfyy084XZc=) 2: 1C85059C1EB911E88533FA4EC4F9AE02.roa (hash: RqHN2PwZe21iOjQw65O1dXW58VJkxhmOGxQkFQUXslk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5741 (0x166d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1103, serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Validity Not Before: Dec 6 16:18:42 2025 GMT Not After : Dec 13 16:18:42 2025 GMT Subject: CN=69345762-b32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:51:a5:66:bc:39:39:76:28:f8:55:13:3e:56: cf:af:29:a9:1a:4e:51:1a:47:fe:2f:f7:51:13:19: 8e:f9:3b:49:2d:15:07:63:8a:11:ee:fa:bc:f8:fb: 2a:e1:f1:22:11:92:42:ff:3f:68:15:50:f9:e4:a7: e7:54:83:8a:d4:78:59:83:de:93:23:4d:e8:ca:4c: 29:f1:60:14:a2:5c:a3:ab:a5:aa:0f:c9:bf:f3:d3: ad:08:a1:26:50:51:48:bf:4d:e8:4e:6d:f1:fe:14: 60:f4:a1:73:77:ed:29:7b:8a:3b:ab:5e:18:95:3d: 90:5a:2c:98:a3:54:8f:91:ad:07:28:cb:4b:db:83: 19:94:97:42:df:08:01:27:44:ed:46:90:36:5b:aa: 09:bb:ab:d9:d6:16:97:92:ac:b1:f1:f4:ab:72:15: af:1f:35:fe:98:26:40:d0:76:65:7b:37:fd:cd:2b: 4e:14:f0:3e:65:1e:87:a3:e3:82:57:8c:62:1a:b2: 2b:45:f6:a2:b5:1a:bb:c2:09:7d:5d:0f:b9:dd:7e: 09:03:1d:9a:f2:ff:94:33:c7:d3:b9:a2:c9:56:b2: 4a:cd:91:6f:21:08:bf:b8:90:f5:bc:11:32:64:ca: 2c:dd:e3:b0:a1:da:77:b2:be:85:4f:d6:5b:ef:38: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DB:1E:0A:13:9D:9E:BA:00:EC:30:08:F3:E8:B4:E5:EA:2F:EB:53 X509v3 Authority Key Identifier: keyid:29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7c:19:64:8f:7e:68:28:02:5a:5f:0a:0f:62:e4:b3:45:37: be:32:64:4b:cc:e9:a9:22:4a:13:2d:41:e4:8a:13:b6:56:3e: 96:1e:33:78:66:b2:5e:8e:2d:bf:1f:9b:1b:a3:4a:50:80:3b: 24:51:60:83:e1:0e:9c:88:40:1a:72:a5:7b:bc:fe:8a:85:75: ee:6b:e9:55:f7:f0:39:af:7a:ad:5e:78:3f:28:69:74:7f:17: fb:31:f8:c4:f3:17:a0:fd:3b:86:2d:93:3f:c0:5a:39:09:97: 2c:5e:f8:71:6e:a5:8e:4e:9e:c7:dd:48:a8:96:3f:de:39:d5: d2:e9:91:13:72:6d:23:6f:d7:21:21:49:b0:b0:90:16:d4:07: 6c:02:8d:75:f7:a2:50:5a:5d:24:4b:95:b7:30:e7:23:3e:a0: 54:af:97:3d:63:3f:44:1f:9b:40:75:39:f2:06:6c:87:29:5a: 69:b2:e2:63:03:bf:06:2c:1a:9d:2a:e7:4f:55:72:89:d9:03: 89:c1:56:4f:48:84:ab:3f:32:31:db:87:63:4a:56:ac:7a:d7: 2c:2f:dd:4c:f9:99:1a:01:cd:bc:fd:6b:9e:1a:48:29:f7:0b: 8d:8d:1d:c2:3f:3f:60:bf:92:48:d1:e6:91:a3:cd:de:db:65: 7b:59:61:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExMDMxMTAvBgNVBAUTKDI5RENGMjY5N0JBMzRBNUQ0QzU3RjJFRDk2NzE4RDAz MUJCQzU2MzAwHhcNMjUxMjA2MTYxODQyWhcNMjUxMjEzMTYxODQyWjAYMRYwFAYD VQQDEw02OTM0NTc2Mi1iMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lGlZrw5OXYo+FUTPlbPrympGk5RGkf+L/dRExmO+TtJLRUHY4oR7vq8+Psq 4fEiEZJC/z9oFVD55KfnVIOK1HhZg96TI03oykwp8WAUolyjq6WqD8m/89OtCKEm UFFIv03oTm3x/hRg9KFzd+0pe4o7q14YlT2QWiyYo1SPka0HKMtL24MZlJdC3wgB J0TtRpA2W6oJu6vZ1haXkqyx8fSrchWvHzX+mCZA0HZlezf9zStOFPA+ZR6Ho+OC V4xiGrIrRfaitRq7wgl9XQ+53X4JAx2a8v+UM8fTuaLJVrJKzZFvIQi/uJD1vBEy ZMos3eOwodp3sr6FT9Zb7zjs3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvbHgoT nZ66AOwwCPPotOXqL+tTMB8GA1UdIwQYMBaAFCnc8ml7o0pdTFfy7ZZxjQMbvFYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTEwMy8yMDk1QUE2MjFB MDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNsMU1WX0x0bG5HTkF4dThW akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkenlhWHVqU2wxTVZfTHRsbkdOQXh1OFZqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTEwMy8yMDk1QUE2MjFBMDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNs MU1WX0x0bG5HTkF4dThWakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgfBlkj35oKAJaXwoPYuSzRTe+MmRLzOmpIkoTLUHkihO2Vj6WHjN4 ZrJeji2/H5sbo0pQgDskUWCD4Q6ciEAacqV7vP6KhXXua+lV9/A5r3qtXng/KGl0 fxf7MfjE8xeg/TuGLZM/wFo5CZcsXvhxbqWOTp7H3Uiolj/eOdXS6ZETcm0jb9ch IUmwsJAW1AdsAo1196JQWl0kS5W3MOcjPqBUr5c9Yz9EH5tAdTnyBmyHKVppsuJj A78GLBqdKudPVXKJ2QOJwVZPSISrPzIx24djSlasetcsL91M+ZkaAc28/WueGkgp 9wuNjR3CPz9gv5JI0eaRo83e22V7WWED -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:04 2025 by rpki-client