This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json) Hash identifier: Y2XK9BP/lp7ChgLRpQIO/RM3zo0wEnyse1gDsYBNywk= Subject key identifier: DD:7D:86:BB:AA:6A:CF:A7:0B:4E:CF:FB:FC:E1:57:DE:BD:C7:83:5E Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft Manifest number: 01AD Signing time: Fri 05 Dec 2025 01:25:38 +0000 Manifest this update: Fri 05 Dec 2025 01:25:37 +0000 Manifest next update: Fri 12 Dec 2025 01:25:37 +0000 Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: qowA6U3EDIQwaMxjzUlbJBibZoClWslR8sdoCRZNyjk=) 2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: bUZufHm2YUJjKX7UE+iKB/iI+xqEJZ46mEmd8NCr+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Validity Not Before: Dec 5 01:25:37 2025 GMT Not After : Dec 12 01:25:37 2025 GMT Subject: CN=69323492-0fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9b:29:5e:4e:4b:9f:d9:03:34:72:c2:fd:df: 11:40:3d:c0:8c:e7:d5:6d:84:a7:0b:57:d2:dd:d2: a9:83:1a:8f:3a:28:ac:a2:d4:64:f6:63:ce:cb:b4: 58:b6:e9:ce:f6:6a:0b:82:54:4a:0d:49:b1:31:4f: 7a:05:e8:a7:24:cc:2f:97:60:b1:a3:fb:95:fe:c3: 9d:83:4b:50:92:ae:c6:bd:16:1e:26:42:d2:03:b9: 4f:7a:4f:9d:50:19:44:9a:0d:17:e7:6d:60:80:c6: 82:61:70:d3:c8:6a:c0:b1:73:9f:0c:fc:f0:1f:76: 6f:b2:df:8e:e7:b3:56:62:71:bd:23:75:c1:6e:a6: ff:08:f2:2b:81:a1:fd:7d:90:d2:17:97:25:b9:2c: 81:88:b9:1c:07:a9:5d:8a:6f:83:0b:65:1c:04:e7: d5:d6:a6:d3:0f:9e:86:21:a9:1f:31:5a:29:eb:36: 53:cb:86:7b:f2:c9:c2:b3:90:4d:b6:eb:c7:b9:85: ee:e1:a8:90:d0:ba:92:ae:92:57:fe:6a:29:9b:b8: 3a:87:fb:71:c4:19:22:37:c5:e0:af:41:35:13:86: 9a:5c:52:a6:ee:2b:de:b9:63:ea:96:36:18:4a:da: d0:15:eb:ae:00:d1:ba:6e:b6:d8:ba:77:2b:8e:1a: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7D:86:BB:AA:6A:CF:A7:0B:4E:CF:FB:FC:E1:57:DE:BD:C7:83:5E X509v3 Authority Key Identifier: keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f4:62:6e:fd:67:ba:b7:1f:f5:04:39:95:c3:89:fd:d3:1c: 64:32:35:e1:27:e2:aa:08:b8:61:1a:5b:a6:f6:8a:c0:14:c8: 0e:84:96:76:e8:16:d5:46:04:35:88:5e:a2:39:3e:48:61:6a: 72:89:b4:95:6d:73:25:f2:80:27:bd:a7:68:7b:bb:6e:2e:b5: b5:bd:84:7f:d5:93:2e:07:99:bb:a2:72:31:35:0c:b6:04:ef: 09:97:f6:9f:2a:15:dc:d9:71:a0:70:10:9b:a1:da:b4:74:53: 5f:1e:08:de:89:09:25:9e:fb:2f:fb:17:92:3f:dc:9b:6a:bc: d9:c2:1c:b5:4f:12:de:0e:15:60:89:cf:36:7b:31:1a:b5:8b: 65:f4:77:77:8b:e0:1c:40:09:f3:83:95:01:60:e2:9f:0c:62: be:35:41:eb:14:ba:84:1e:ef:0a:a4:45:1f:24:5b:9e:71:1a: b2:0b:66:92:dd:1f:30:fc:27:99:e6:61:e5:c8:15:28:b6:a5: bf:7d:45:28:49:5c:da:e6:76:ca:c0:dc:c0:21:72:d2:58:d9: c5:65:0a:c8:b4:f2:94:0d:90:5a:28:95:fa:0e:fb:a4:9b:96: d7:36:cb:bc:26:82:bc:4a:55:f9:de:46:73:a9:ed:cb:93:be: e7:1f:73:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG M0QwMkVERTUwHhcNMjUxMjA1MDEyNTM3WhcNMjUxMjEyMDEyNTM3WjAYMRYwFAYD VQQDEw02OTMyMzQ5Mi0wZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65spXk5Ln9kDNHLC/d8RQD3AjOfVbYSnC1fS3dKpgxqPOiisotRk9mPOy7RY tunO9moLglRKDUmxMU96BeinJMwvl2Cxo/uV/sOdg0tQkq7GvRYeJkLSA7lPek+d UBlEmg0X521ggMaCYXDTyGrAsXOfDPzwH3Zvst+O57NWYnG9I3XBbqb/CPIrgaH9 fZDSF5cluSyBiLkcB6ldim+DC2UcBOfV1qbTD56GIakfMVop6zZTy4Z78snCs5BN tuvHuYXu4aiQ0LqSrpJX/mopm7g6h/txxBkiN8Xgr0E1E4aaXFKm7iveuWPqljYY StrQFeuuANG6brbYuncrjhoszwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN19hruq as+nC07P+/zhV969x4NeMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd9GJu/We6tx/1BDmVw4n90xxkMjXhJ+KqCLhhGlum9orAFMgOhJZ2 6BbVRgQ1iF6iOT5IYWpyibSVbXMl8oAnvadoe7tuLrW1vYR/1ZMuB5m7onIxNQy2 BO8Jl/afKhXc2XGgcBCbodq0dFNfHgjeiQklnvsv+xeSP9ybarzZwhy1TxLeDhVg ic82ezEatYtl9Hd3i+AcQAnzg5UBYOKfDGK+NUHrFLqEHu8KpEUfJFuecRqyC2aS 3R8w/CeZ5mHlyBUotqW/fUUoSVza5nbKwNzAIXLSWNnFZQrItPKUDZBaKJX6Dvuk m5bXNsu8JoK8SlX53kZzqe3Lk77nH3NH -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:26 2025 by rpki-client