This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: yK5VR5vUJRqZP/Pe6+ddq3WVzjZVO9dM1jZF5T8snvU= Subject key identifier: 22:08:D0:54:CC:76:A5:DD:D9:AF:F4:02:7E:80:D7:4A:19:50:E7:85 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 0B Signing time: Fri 05 Dec 2025 05:50:02 +0000 Manifest this update: Fri 05 Dec 2025 05:50:01 +0000 Manifest next update: Fri 12 Dec 2025 05:50:01 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: MAaJKVpE7HiSBEWO9AKbm2GCJ7i8melDYrS/sTANyDQ=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: uZ9eyof3QzVDzi9BWRf2zBi6dJBoVZqfZeDAKMhvj2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Dec 5 05:50:01 2025 GMT Not After : Dec 12 05:50:01 2025 GMT Subject: CN=69327289-a79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:ac:03:44:a2:c3:44:9d:0f:a3:a9:04:3b: ce:77:d0:82:9a:aa:73:e6:25:dc:08:fa:35:d2:dd: 1b:c3:50:1e:08:28:1a:21:64:2d:47:d7:21:94:eb: 58:5f:53:ec:ae:4b:37:b9:1d:6b:ac:09:28:a9:e6: f3:29:c9:ed:06:ab:0c:ed:86:ab:51:63:09:5a:7f: 00:87:6f:b8:1b:a5:63:77:a5:74:da:41:a7:f0:82: 6a:9c:f6:0d:fe:f8:10:f2:d4:01:9b:44:b5:5c:31: 90:ea:1b:b2:f0:ad:c1:72:05:91:98:8f:fb:f0:e7: ad:d1:a6:57:02:0d:4d:6d:84:af:ad:1c:34:c6:1e: 13:36:a4:b5:81:e4:f9:30:a7:5f:5a:78:5c:30:d7: c2:f1:e8:19:17:b6:83:d3:62:28:23:fb:40:5f:bb: da:b3:96:69:15:ef:99:bd:6b:ef:d0:1b:19:c9:bc: b7:62:8e:ac:09:fb:1b:01:5f:7b:49:fd:f0:b6:39: e5:cc:ea:12:db:ab:24:be:94:0b:6a:2e:ba:64:05: 59:a6:c2:c0:3a:86:39:38:2b:71:99:09:84:d2:d7: 49:cf:a3:66:a6:a1:d4:e2:45:78:83:21:62:70:fb: 08:42:ca:2e:2f:7c:b9:34:b8:e0:32:e3:d9:32:91: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:08:D0:54:CC:76:A5:DD:D9:AF:F4:02:7E:80:D7:4A:19:50:E7:85 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ce:d7:cf:44:7b:5a:12:8a:6c:3f:a8:57:e0:0d:d4:b1:b0: 9e:72:97:d3:2d:e1:d4:7e:9d:58:cc:ce:f2:ca:c3:1f:35:83: dc:ea:46:f1:7c:64:30:d3:c5:a4:a5:21:32:14:ba:17:7e:ce: 36:48:d5:8c:33:34:3b:d4:5f:4c:55:cd:cb:3f:0a:4b:4a:46: 37:0d:8d:45:04:0e:e2:55:5d:9a:d0:91:65:15:8e:00:ca:d1: 75:41:c1:af:c1:64:5c:d4:b3:3e:8c:d9:ea:57:1e:aa:a0:e9: bb:29:ae:86:9a:71:0c:39:61:cc:85:fb:b1:0e:aa:8b:d6:90: ae:93:58:b1:f4:ed:ff:55:1a:f1:d1:b5:8a:d0:f2:dd:d5:e0: df:79:61:27:19:78:91:6c:67:c7:b1:61:6e:ed:e7:fc:bb:a1: b7:96:2d:a2:31:cb:4b:ac:81:91:fb:3c:4e:5a:44:e7:91:7a: 13:28:cb:02:c9:b0:cd:86:1c:f3:f9:f3:86:38:89:a5:51:e7: 06:88:55:68:4c:e3:88:56:2f:35:b6:34:5f:1b:c3:67:e8:4a: 57:70:f0:e5:0e:e8:ef:61:23:b0:c8:cb:a6:8b:66:29:70:aa: 8b:69:a1:bb:f3:27:ef:41:f4:3b:c8:d4:c1:e5:07:0a:80:97: d8:6d:16:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNTEyMDUwNTUwMDFaFw0yNTEyMTIwNTUwMDFaMBgxFjAUBgNV BAMTDTY5MzI3Mjg5LWE3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhY6wDRKLDRJ0Po6kEO8530IKaqnPmJdwI+jXS3RvDUB4IKBohZC1H1yGU61hf U+yuSze5HWusCSip5vMpye0GqwzthqtRYwlafwCHb7gbpWN3pXTaQafwgmqc9g3+ +BDy1AGbRLVcMZDqG7LwrcFyBZGYj/vw563RplcCDU1thK+tHDTGHhM2pLWB5Pkw p19aeFww18Lx6BkXtoPTYigj+0Bfu9qzlmkV75m9a+/QGxnJvLdijqwJ+xsBX3tJ /fC2OeXM6hLbqyS+lAtqLrpkBVmmwsA6hjk4K3GZCYTS10nPo2amodTiRXiDIWJw +whCyi4vfLk0uOAy49kykU7XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIgjQVMx2 pd3Zr/QCfoDXShlQ54UwHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdO b2FiTzZnUXdrV3paT1E4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjO189Ee1oSimw/qFfgDdSxsJ5yl9Mt4dR+nVjMzvLKwx81g9zqRvF8 ZDDTxaSlITIUuhd+zjZI1YwzNDvUX0xVzcs/CktKRjcNjUUEDuJVXZrQkWUVjgDK 0XVBwa/BZFzUsz6M2epXHqqg6bsproaacQw5YcyF+7EOqovWkK6TWLH07f9VGvHR tYrQ8t3V4N95YScZeJFsZ8exYW7t5/y7obeWLaIxy0usgZH7PE5aROeRehMoywLJ sM2GHPP584Y4iaVR5waIVWhM44hWLzW2NF8bw2foSldw8OUO6O9hI7DIy6aLZilw qotpobvzJ+9B9DvI1MHlBwqAl9htFvk= -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:33 2025 by rpki-client