This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: wL8+Se1mtasYIUacMr6eNO7ILfVX6vM0elj4J9dvyVw= Subject key identifier: 0C:E4:C7:EA:20:AD:E6:62:A7:45:79:0E:88:33:74:9F:21:66:EB:8D Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A83 Signing time: Thu 04 Dec 2025 18:53:24 +0000 Manifest this update: Thu 04 Dec 2025 18:53:24 +0000 Manifest next update: Thu 11 Dec 2025 18:53:24 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: gv65s8RuaCZmG3B+wYhG3JbFGm6/4PiAi8squbXt4vo=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Dec 4 18:53:24 2025 GMT Not After : Dec 11 18:53:24 2025 GMT Subject: CN=6931d8a4-58a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d3:91:fe:41:c0:58:0c:5c:15:d5:3e:84:05: 24:7a:6a:e8:b5:ba:92:19:d9:99:ca:00:9d:e6:b5: 57:43:45:6c:19:d9:63:6a:a4:57:9d:f4:2e:58:fc: 73:d5:a8:16:3a:34:4d:6a:6b:e0:99:b7:e5:54:1b: fc:4e:fb:5d:4b:86:bd:ba:ca:47:38:45:cb:d4:06: f2:ac:77:e2:6d:90:65:d4:9b:b2:5a:d8:62:2d:4d: 3a:38:b2:38:20:59:41:8b:47:e3:ef:bf:3d:98:5e: 32:b7:8b:12:d4:73:1f:bc:1e:e0:9e:16:dd:9e:a7: 89:ad:5b:3b:7f:34:66:87:d5:8e:f2:f2:e0:58:4d: 79:1e:ff:d3:66:4a:7a:8d:d3:a2:a2:f2:6d:1d:b0: 50:9b:3c:9b:72:65:03:73:57:bf:92:5c:98:eb:de: 6e:81:5c:55:8f:3c:16:03:71:08:4d:cd:73:a2:3b: ec:cb:5d:52:7b:26:88:e7:e8:c7:04:23:19:43:bf: a0:12:b5:d0:1b:13:af:ed:65:8a:db:4b:2e:26:63: e3:6f:76:d4:4b:6c:14:ba:bf:91:10:e4:d6:55:a3: 84:57:0d:c2:07:a4:7f:e1:23:0b:fb:fd:5f:6d:fc: 2e:83:35:3a:ef:c3:c0:2a:33:b9:49:e4:ec:c5:42: d0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E4:C7:EA:20:AD:E6:62:A7:45:79:0E:88:33:74:9F:21:66:EB:8D X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d9:a6:08:60:1c:e6:1d:a5:4b:15:50:7c:d6:00:9c:e3:7d: 99:6d:fb:67:8a:e2:08:a5:d7:50:c1:ea:78:86:8c:33:59:2c: fd:10:ca:21:a3:d2:7f:47:72:86:44:0e:84:be:39:60:5b:87: 46:a9:6f:06:75:ce:d1:56:8e:78:1e:ea:6f:79:e3:28:88:de: 0c:bb:f5:17:f8:7a:de:44:49:63:4d:4b:2e:bf:cc:c1:b8:2d: cd:89:fd:0e:17:53:c3:1e:ae:35:55:9a:b3:a6:0b:e7:e6:cd: d3:68:28:c7:43:0a:83:11:4b:47:3a:bf:a8:5e:37:3c:54:aa: 39:1b:93:6f:13:66:92:e4:62:f3:fc:a7:66:85:5b:98:f7:de: b3:e6:4b:0c:44:80:2f:5d:70:ba:47:03:57:5f:f5:d7:38:70: 45:29:4b:c6:6d:1d:ec:28:eb:ff:c7:9a:da:9b:ab:b9:39:dd: 53:f7:52:57:29:a7:bb:32:a9:fb:bb:e3:bf:71:ec:52:80:34: 6d:fc:7e:6d:83:c9:78:7c:d2:6b:db:37:17:8e:24:11:27:16: 67:ae:6d:ae:24:36:19:30:ca:b5:c1:ce:07:39:61:a9:c2:6d: f1:7e:fc:64:8e:fa:06:1e:a6:ed:82:a5:be:5e:23:ca:40:b6: e9:4f:71:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUxMjA0MTg1MzI0WhcNMjUxMjExMTg1MzI0WjAYMRYwFAYD VQQDEw02OTMxZDhhNC01OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39OR/kHAWAxcFdU+hAUkemrotbqSGdmZygCd5rVXQ0VsGdljaqRXnfQuWPxz 1agWOjRNamvgmbflVBv8TvtdS4a9uspHOEXL1AbyrHfibZBl1JuyWthiLU06OLI4 IFlBi0fj7789mF4yt4sS1HMfvB7gnhbdnqeJrVs7fzRmh9WO8vLgWE15Hv/TZkp6 jdOiovJtHbBQmzybcmUDc1e/klyY695ugVxVjzwWA3EITc1zojvsy11SeyaI5+jH BCMZQ7+gErXQGxOv7WWK20suJmPjb3bUS2wUur+REOTWVaOEVw3CB6R/4SML+/1f bfwugzU678PAKjO5SeTsxULQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzkx+og reZip0V5DogzdJ8hZuuNMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT2aYIYBzmHaVLFVB81gCc432ZbftniuIIpddQwep4howzWSz9EMoh o9J/R3KGRA6EvjlgW4dGqW8Gdc7RVo54HupveeMoiN4Mu/UX+HreREljTUsuv8zB uC3Nif0OF1PDHq41VZqzpgvn5s3TaCjHQwqDEUtHOr+oXjc8VKo5G5NvE2aS5GLz /KdmhVuY996z5ksMRIAvXXC6RwNXX/XXOHBFKUvGbR3sKOv/x5ram6u5Od1T91JX Kae7Mqn7u+O/cexSgDRt/H5tg8l4fNJr2zcXjiQRJxZnrm2uJDYZMMq1wc4HOWGp wm3xfvxkjvoGHqbtgqW+XiPKQLbpT3F1 -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:22 2025 by rpki-client