This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: TCZV4i9SFgsncfLDApYqrvhLi8AcGCpu/YEVasMC7l4= Subject key identifier: CE:D2:BE:1B:BD:F3:33:E7:07:E2:2C:AD:B0:60:B5:35:76:05:74:CD Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 014B Signing time: Fri 05 Dec 2025 02:23:25 +0000 Manifest this update: Fri 05 Dec 2025 02:23:24 +0000 Manifest next update: Fri 12 Dec 2025 02:23:24 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: MIH3kpoWOlSlgOQN7lEez6dcCoPfHaJ8mN4Eo4TK2Z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Dec 5 02:23:24 2025 GMT Not After : Dec 12 02:23:24 2025 GMT Subject: CN=6932421d-aa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:6f:d2:d0:9a:29:8d:2a:67:86:6b:ae:6a: 7b:4c:7b:ad:18:56:2a:78:e8:8e:c3:59:1d:76:13: 54:95:6d:83:1c:83:19:3f:8e:b0:b0:ae:4d:56:ee: 75:57:90:3f:12:80:36:94:c1:2b:84:68:8a:f1:53: da:a7:e9:a2:b6:33:4c:ab:f6:00:3a:08:76:26:42: c5:42:c7:6e:a0:1e:15:6e:e9:df:01:a9:ee:30:2c: fb:6d:76:d2:7e:67:57:cd:1f:8b:7d:de:e2:ca:8a: bd:d8:22:36:5a:4b:0c:d6:e6:cc:bd:6b:6e:06:0d: 48:b5:84:c3:fa:f5:d6:dd:1c:2a:8b:44:58:46:b3: ba:c7:85:ee:3b:43:f0:27:c0:d5:73:22:fd:e8:fb: c9:9a:f2:04:b7:78:21:a0:7e:eb:90:01:dc:8b:6a: fc:5b:41:2c:56:5c:2a:70:62:d3:01:1f:78:d1:0b: 4d:27:3c:4a:d7:bf:70:d8:e2:d6:80:7f:cc:d5:25: 4b:3e:3e:eb:29:a7:e1:0d:62:95:29:e5:ef:64:0e: da:b1:28:0f:9d:98:d1:5f:38:69:e8:80:78:5c:f9: f4:93:ec:07:c8:13:91:8f:dc:70:18:20:28:d4:da: fc:d1:26:2d:c7:06:42:77:dc:c9:8b:e0:3c:e4:dc: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:BE:1B:BD:F3:33:E7:07:E2:2C:AD:B0:60:B5:35:76:05:74:CD X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:29:92:dd:8f:67:67:47:98:78:34:f2:65:b0:a7:ef:53:35: 8a:98:a6:09:f6:0a:cf:1d:24:39:77:3a:a2:cf:aa:50:29:4b: 10:91:7e:0c:26:bf:b5:d8:a3:f1:6a:59:3d:be:90:15:5b:84: 32:3c:73:b8:16:9b:fb:64:66:a9:67:ee:31:fd:f6:09:8d:d7: 29:cd:96:d0:eb:d5:b4:54:82:99:27:d3:b0:28:2d:43:22:97: 15:9f:21:8c:4f:bb:18:0a:4d:0d:e8:0b:88:89:d2:ad:3b:b8: fa:6c:fc:e2:20:5b:e1:08:ea:c6:2f:1f:3c:da:db:ef:22:7e: 0e:c0:ab:f4:bb:cb:c7:1f:3d:5e:fe:2c:34:01:9e:9c:d6:e0: f9:7e:d2:f2:ef:90:71:f6:8a:bb:1d:c9:a0:43:1a:d1:31:7b: 56:62:b2:89:73:96:27:1b:d2:1f:61:24:07:93:74:8e:34:b1: 78:ed:2c:f0:cc:5c:80:b1:3d:60:9e:0b:98:c6:e3:e7:74:d0: b7:23:ec:4a:a7:00:d8:01:24:74:19:3f:2d:76:90:9d:3a:be: 70:bf:0f:1b:b1:55:ec:07:8d:9c:e1:00:be:df:16:f1:85:73: 84:3c:29:e4:e6:fb:26:69:6f:4f:dd:95:be:b8:80:46:1e:c5: b4:37:00:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUxMjA1MDIyMzI0WhcNMjUxMjEyMDIyMzI0WjAYMRYwFAYD VQQDEw02OTMyNDIxZC1hYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ndv0tCaKY0qZ4Zrrmp7THutGFYqeOiOw1kddhNUlW2DHIMZP46wsK5NVu51 V5A/EoA2lMErhGiK8VPap+mitjNMq/YAOgh2JkLFQsduoB4VbunfAanuMCz7bXbS fmdXzR+Lfd7iyoq92CI2WksM1ubMvWtuBg1ItYTD+vXW3Rwqi0RYRrO6x4XuO0Pw J8DVcyL96PvJmvIEt3ghoH7rkAHci2r8W0EsVlwqcGLTAR940QtNJzxK179w2OLW gH/M1SVLPj7rKafhDWKVKeXvZA7asSgPnZjRXzhp6IB4XPn0k+wHyBORj9xwGCAo 1Nr80SYtxwZCd9zJi+A85NzWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7Svhu9 8zPnB+IsrbBgtTV2BXTNMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1KZLdj2dnR5h4NPJlsKfvUzWKmKYJ9grPHSQ5dzqiz6pQKUsQkX4M Jr+12KPxalk9vpAVW4QyPHO4Fpv7ZGapZ+4x/fYJjdcpzZbQ69W0VIKZJ9OwKC1D IpcVnyGMT7sYCk0N6AuIidKtO7j6bPziIFvhCOrGLx882tvvIn4OwKv0u8vHHz1e /iw0AZ6c1uD5ftLy75Bx9oq7HcmgQxrRMXtWYrKJc5YnG9IfYSQHk3SONLF47Szw zFyAsT1gnguYxuPndNC3I+xKpwDYASR0GT8tdpCdOr5wvw8bsVXsB42c4QC+3xbx hXOEPCnk5vsmaW9P3ZW+uIBGHsW0NwB3 -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:03 2025 by rpki-client