This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft File: rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json) Hash identifier: DawkBaXrA7YPgPm9EfjrCE35sVAKzRFmdrFcZaymmCA= Subject key identifier: B1:E2:7B:9D:DA:8C:EC:49:D8:01:CC:F2:E1:B4:04:93:59:0A:99:99 Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 Certificate issuer: /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft Manifest number: 51 Signing time: Fri 05 Dec 2025 05:05:28 +0000 Manifest this update: Fri 05 Dec 2025 05:05:28 +0000 Manifest next update: Fri 12 Dec 2025 05:05:28 +0000 Files and hashes: 1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: RKne0uMozUifEABvul0OMIVhlOEb/S76nkxmxJPUjrA=) 2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: UUG92P2AWbXaMrK3iyqoTf0N43jcCkwVZ/K5MaIHibg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Validity Not Before: Dec 5 05:05:28 2025 GMT Not After : Dec 12 05:05:28 2025 GMT Subject: CN=69326818-0d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:e9:e8:cd:9e:5f:aa:4a:39:12:5d:c4:48: be:ec:64:35:85:db:04:eb:c5:07:14:d1:d4:dc:41: 0d:d4:7d:f0:bc:59:08:4c:13:2a:c9:11:70:99:83: 0e:21:55:f1:a3:c9:55:6a:e7:ec:c8:31:df:36:b5: 98:0a:b8:86:18:6f:46:e4:af:1e:bb:99:ed:4c:18: 39:fc:33:a0:ab:3b:4e:b6:28:58:fd:cb:b1:f8:55: 23:98:c9:65:27:72:cf:66:9b:be:7b:d7:bf:31:05: 4d:d1:b4:8e:ed:96:f1:c5:ce:aa:56:79:e5:f3:82: 66:f1:24:f4:4f:2d:c6:95:0f:49:91:87:9e:bb:89: 11:83:96:0d:c9:a4:1c:4f:a3:67:84:18:38:0c:0a: 1d:d6:a5:9c:5c:98:02:80:1d:1a:3b:61:c6:56:c7: fa:e3:92:ad:d2:63:b5:cb:3d:18:3b:6d:19:ff:1d: 22:9e:5d:17:c9:05:7a:23:64:70:f3:d2:cc:7a:dc: 75:c8:b3:ef:20:1a:31:b9:5f:46:66:cb:0d:ba:24: 2f:5a:97:2d:20:fd:74:8d:93:20:d6:d6:bb:e9:10: 9d:3a:8b:c0:5f:09:3e:a6:65:b5:cb:13:cb:4b:c3: 76:2b:32:29:79:a9:15:86:cc:03:3a:df:1c:5b:a2: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:7B:9D:DA:8C:EC:49:D8:01:CC:F2:E1:B4:04:93:59:0A:99:99 X509v3 Authority Key Identifier: keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:11:0d:ac:ac:71:6d:db:bb:36:d3:b4:f5:33:b4:75:e6:10: 29:bf:f2:86:36:34:60:18:f9:f1:ce:41:fc:ac:d0:81:28:20: 4a:11:73:6a:e0:44:00:8e:95:b6:91:bd:21:62:ab:fc:92:fd: 43:59:b6:77:1b:c0:9c:d3:d8:c4:86:92:c5:76:b0:df:29:74: 2b:91:60:39:68:5c:a8:98:06:1f:40:58:f5:ff:5b:59:86:7e: f9:c2:ed:6a:76:d6:b0:b4:85:5c:7e:31:06:e7:e3:29:95:fd: 87:6b:bf:c7:43:85:1e:c6:5f:f8:e2:1c:a5:df:6c:93:94:2b: c2:a4:68:7a:7d:6b:0d:9a:91:ad:bc:dc:8f:d2:76:33:cc:2c: a0:ed:ad:46:0e:81:71:e1:93:cb:fd:bf:fa:47:1b:fb:79:db: 22:be:a9:47:24:6b:f9:87:fb:d3:cd:c5:8b:96:47:75:ab:86: bb:74:98:4c:d8:30:8a:fe:e1:0b:5b:58:85:58:c8:22:03:4c: b8:16:d6:9e:6b:4c:db:62:39:85:f4:21:b7:54:fe:53:aa:89: 70:8e:0d:5d:83:e4:e4:d0:3c:16:b6:9d:00:24:50:da:66:cd: 71:b9:7d:fe:b0:1d:0d:d6:b5:5c:81:f0:9b:d8:2b:51:ac:1d: c5:db:5f:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoQUVERjhBMjExODI4NkVDNzkwMUZBMkE4OTRCOTRDQTEw MEEzRkQ3ODAeFw0yNTEyMDUwNTA1MjhaFw0yNTEyMTIwNTA1MjhaMBgxFjAUBgNV BAMTDTY5MzI2ODE4LTBkNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIJunozZ5fqko5El3ESL7sZDWF2wTrxQcU0dTcQQ3UffC8WQhMEyrJEXCZgw4h VfGjyVVq5+zIMd82tZgKuIYYb0bkrx67me1MGDn8M6CrO062KFj9y7H4VSOYyWUn cs9mm757178xBU3RtI7tlvHFzqpWeeXzgmbxJPRPLcaVD0mRh567iRGDlg3JpBxP o2eEGDgMCh3WpZxcmAKAHRo7YcZWx/rjkq3SY7XLPRg7bRn/HSKeXRfJBXojZHDz 0sx63HXIs+8gGjG5X0Zmyw26JC9aly0g/XSNkyDW1rvpEJ06i8BfCT6mZbXLE8tL w3YrMil5qRWGzAM63xxboiKzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUseJ7ndqM 7EnYAczy4bQEk1kKmZkwHwYDVR0jBBgwFoAUrt+KIRgobseQH6KolLlMoQCj/Xgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzk2NkQ3MUVBNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNlUUg2S29sTGxNb1FDal9Y Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnQtS0lSZ29ic2VRSDZLb2xMbE1vUUNqX1hnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzk2NkQ3MUVBNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNl UUg2S29sTGxNb1FDal9YZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwRDayscW3buzbTtPUztHXmECm/8oY2NGAY+fHOQfys0IEoIEoRc2rg RACOlbaRvSFiq/yS/UNZtncbwJzT2MSGksV2sN8pdCuRYDloXKiYBh9AWPX/W1mG fvnC7Wp21rC0hVx+MQbn4ymV/Ydrv8dDhR7GX/jiHKXfbJOUK8KkaHp9aw2aka28 3I/SdjPMLKDtrUYOgXHhk8v9v/pHG/t52yK+qUcka/mH+9PNxYuWR3Wrhrt0mEzY MIr+4QtbWIVYyCIDTLgW1p5rTNtiOYX0IbdU/lOqiXCODV2D5OTQPBa2nQAkUNpm zXG5ff6wHQ3WtVyB8JvYK1GsHcXbX6A= -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:06 2025 by rpki-client