This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: XZp+zOPCdKvGpaOViohDnNgW+9H+39B7v52deyJg/s4= Subject key identifier: 1F:BB:19:0A:9A:BF:5B:85:F9:48:82:78:8A:EC:27:C6:67:A5:AF:C9 Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 09E4 Signing time: Thu 04 Dec 2025 18:43:52 +0000 Manifest this update: Thu 04 Dec 2025 18:43:51 +0000 Manifest next update: Thu 11 Dec 2025 18:43:51 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: clu3m48p5UkGwNb5o3CKioFAMgSfYM0HKkOf9vNrLm8=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Dec 4 18:43:51 2025 GMT Not After : Dec 11 18:43:51 2025 GMT Subject: CN=6931d667-ddbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:99:16:a7:9f:a4:97:6f:e7:f3:74:bc:34: e3:d4:46:32:dc:2e:92:b7:66:54:74:f4:20:cd:74: f9:dd:1b:d1:13:61:f3:3d:34:c5:93:72:45:6e:03: b0:cd:78:de:38:d5:99:16:c2:00:d4:7d:48:3d:37: ef:ec:8c:ff:0c:82:53:cc:40:14:f1:0a:9f:fe:e2: 41:5e:a1:86:34:25:9b:08:91:6a:f2:2e:9e:ca:ba: f1:d7:6c:a0:bd:c3:6b:37:f5:2b:4f:55:1c:3f:cb: f7:3c:b3:a2:3b:56:70:ce:9c:3a:e5:c8:61:68:35: 53:48:33:1a:29:bc:ba:89:49:8c:5d:45:17:cb:b4: e0:07:80:3e:37:be:28:54:a3:46:15:3d:bd:e1:c7: ba:a6:7e:0c:0e:7c:eb:dc:59:d7:a9:64:51:26:e4: 87:12:7f:80:09:d6:42:01:67:f7:11:d1:26:26:4d: a8:4e:0c:e4:38:91:1c:af:7e:80:90:9b:ec:b8:28: b2:af:04:1f:77:33:40:df:bd:e0:81:30:f8:9a:da: 2f:a2:b1:de:4e:bb:94:b7:cb:51:9f:eb:73:0b:0b: b4:89:cb:0f:d3:e0:c8:62:42:d8:ac:de:fc:35:90: ed:b6:fd:d5:f7:99:3f:01:d3:c9:e5:62:e5:df:95: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BB:19:0A:9A:BF:5B:85:F9:48:82:78:8A:EC:27:C6:67:A5:AF:C9 X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:26:b1:71:3b:07:50:79:d3:ba:b1:f8:f3:80:fa:27:85:14: c9:af:c3:d4:3b:87:51:3f:b7:6e:fe:8e:4f:ca:85:01:cc:6e: f2:31:f3:2a:e4:10:53:37:3f:2f:d9:7c:5b:dc:ed:a7:a2:4c: c4:db:6a:a8:61:9a:f1:f3:9b:46:77:df:63:9e:8c:2c:91:cf: 1a:65:6e:36:e5:bd:c9:e2:84:7f:f0:f2:23:bf:3f:ef:b7:7d: f5:23:27:d0:31:61:43:50:2d:c4:6f:09:b6:09:cf:aa:04:9f: ca:5a:93:96:7a:6e:29:6e:dd:45:9a:bf:95:b8:64:08:35:34: c2:39:1d:31:57:39:3d:6c:4d:2f:19:71:e7:2f:71:90:4a:15: b4:08:51:49:a5:6c:af:b8:85:5d:2a:d9:42:e4:df:be:29:f5: f7:94:1a:07:05:a5:62:23:fb:2f:0d:f4:14:fb:a1:ce:9d:d3: b1:64:69:70:d8:66:89:fc:f0:8d:6c:89:be:ad:44:ed:5a:d6: 83:a5:b3:47:c3:54:64:be:13:64:93:59:06:06:9c:e5:6b:a4: 6f:dd:d6:b7:d1:a1:69:47:51:2e:dc:76:83:1c:60:da:48:0b: 6f:65:60:90:37:bd:be:0c:4e:49:79:c9:93:3e:a7:8c:e8:c0: dd:b8:63:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUxMjA0MTg0MzUxWhcNMjUxMjExMTg0MzUxWjAYMRYwFAYD VQQDEw02OTMxZDY2Ny1kZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApieZFqefpJdv5/N0vDTj1EYy3C6St2ZUdPQgzXT53RvRE2HzPTTFk3JFbgOw zXjeONWZFsIA1H1IPTfv7Iz/DIJTzEAU8Qqf/uJBXqGGNCWbCJFq8i6eyrrx12yg vcNrN/UrT1UcP8v3PLOiO1Zwzpw65chhaDVTSDMaKby6iUmMXUUXy7TgB4A+N74o VKNGFT294ce6pn4MDnzr3FnXqWRRJuSHEn+ACdZCAWf3EdEmJk2oTgzkOJEcr36A kJvsuCiyrwQfdzNA373ggTD4mtovorHeTruUt8tRn+tzCwu0icsP0+DIYkLYrN78 NZDttv3V95k/AdPJ5WLl35VAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+7GQqa v1uF+UiCeIrsJ8Znpa/JMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4JrFxOwdQedO6sfjzgPonhRTJr8PUO4dRP7du/o5PyoUBzG7yMfMq 5BBTNz8v2Xxb3O2nokzE22qoYZrx85tGd99jnowskc8aZW425b3J4oR/8PIjvz/v t331IyfQMWFDUC3Ebwm2Cc+qBJ/KWpOWem4pbt1Fmr+VuGQINTTCOR0xVzk9bE0v GXHnL3GQShW0CFFJpWyvuIVdKtlC5N++KfX3lBoHBaViI/svDfQU+6HOndOxZGlw 2GaJ/PCNbIm+rUTtWtaDpbNHw1RkvhNkk1kGBpzla6Rv3da30aFpR1Eu3HaDHGDa SAtvZWCQN72+DE5JecmTPqeM6MDduGNd -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:28 2025 by rpki-client