This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: OK6xR9uFbKXcGf7B2ZMHXUZXJWHi8gDKTcGW4OrS8uY= Subject key identifier: FD:4E:E6:D4:5B:5A:1D:57:9C:9D:7E:1F:12:ED:22:AC:FE:80:9F:09 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: 0140 Signing time: Fri 05 Dec 2025 02:29:18 +0000 Manifest this update: Fri 05 Dec 2025 02:29:18 +0000 Manifest next update: Fri 12 Dec 2025 02:29:18 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: 0zDaR93wM2LMRXYrILAI1PJEQkHoakLr+G2ajwFjW9I=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Dec 5 02:29:18 2025 GMT Not After : Dec 12 02:29:18 2025 GMT Subject: CN=6932437e-e1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:d3:c7:bc:60:4b:79:89:b4:c5:ed:13:87: 15:1e:1c:1d:9f:b5:4c:8a:86:6a:e4:63:20:1d:9a: 7f:36:de:c7:b7:8d:8e:32:38:2a:2e:28:41:52:61: 7b:72:f6:b7:d4:f0:74:8f:ef:85:87:c3:fc:c5:65: bd:1c:a3:43:de:96:00:eb:ac:a0:90:6b:b1:bf:2b: 84:92:0e:47:f2:eb:65:0a:75:43:b4:d2:05:95:97: 3b:a4:58:20:00:71:6e:28:2b:74:c3:f3:b5:1a:0b: 60:24:4a:c1:77:db:fb:18:76:67:63:b6:38:c7:91: 70:73:51:a8:de:0f:53:6e:70:0a:f8:14:b7:5d:0a: e5:54:b8:36:da:98:02:6b:84:9e:9a:37:91:32:a3: a8:9a:ec:00:2a:b1:e1:14:5e:69:35:9b:d9:d0:19: 6c:04:9a:22:f6:0a:d8:c0:1d:71:e0:d3:9a:a5:4d: e4:1a:0a:4f:59:e7:c0:e5:fb:d2:83:7e:1f:ce:22: 4a:f1:d1:23:3a:1c:19:1b:1c:d7:aa:71:b7:f0:64: 0a:b1:0a:65:2e:6f:9b:42:43:c3:40:0b:30:74:e3: c3:70:92:c1:c7:bc:89:24:9f:89:a5:58:0e:b8:01: 3d:bb:75:93:ab:e0:a4:a8:9e:90:a2:00:d9:8d:76: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:E6:D4:5B:5A:1D:57:9C:9D:7E:1F:12:ED:22:AC:FE:80:9F:09 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:f7:16:46:7d:6c:d0:9b:e2:5a:f1:4f:63:bd:b9:44:d3: b9:08:21:a1:c2:3f:08:97:3d:24:34:2c:8d:7b:4e:d3:a9:ab: e6:64:5a:a1:bf:69:14:23:b7:80:1e:66:9b:95:6c:80:79:8c: d4:e1:ba:58:19:10:e0:9e:d5:97:22:9d:d5:f5:6d:33:9b:0c: 0b:62:aa:17:5e:3a:5a:fd:84:62:db:91:d9:9b:97:3b:03:f7: fa:00:32:81:22:75:d2:9a:39:36:54:9c:bb:bd:bc:b4:94:60: 1d:83:b3:ef:5a:de:d2:82:ac:59:5a:76:43:5f:f2:ca:b0:fa: 9b:cb:28:9f:cc:b7:38:db:43:98:0a:64:cd:17:2d:dc:4d:5b: 43:b2:ed:06:1f:f2:8b:16:c5:df:be:04:09:dc:22:b2:fa:7a: 37:09:ac:62:f5:27:c0:8a:b3:9b:93:24:63:46:0e:6f:89:3c: f7:29:af:9f:77:9c:93:14:9e:9c:f0:18:19:a1:c6:39:52:d8: 89:06:86:ad:c8:a4:b6:7e:31:35:54:93:cc:a1:5b:00:9e:39: 7e:38:1d:72:b9:c9:0b:0e:1d:91:6d:f8:40:4c:6c:00:ab:d6: a2:9f:e5:7d:ca:f3:93:30:a4:3c:d2:28:7e:43:45:15:78:06: ea:b3:59:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUxMjA1MDIyOTE4WhcNMjUxMjEyMDIyOTE4WjAYMRYwFAYD VQQDEw02OTMyNDM3ZS1lMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4X/Tx7xgS3mJtMXtE4cVHhwdn7VMioZq5GMgHZp/Nt7Ht42OMjgqLihBUmF7 cva31PB0j++Fh8P8xWW9HKND3pYA66ygkGuxvyuEkg5H8utlCnVDtNIFlZc7pFgg AHFuKCt0w/O1GgtgJErBd9v7GHZnY7Y4x5Fwc1Go3g9TbnAK+BS3XQrlVLg22pgC a4SemjeRMqOomuwAKrHhFF5pNZvZ0BlsBJoi9grYwB1x4NOapU3kGgpPWefA5fvS g34fziJK8dEjOhwZGxzXqnG38GQKsQplLm+bQkPDQAswdOPDcJLBx7yJJJ+JpVgO uAE9u3WTq+CkqJ6QogDZjXYOWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1O5tRb Wh1XnJ1+HxLtIqz+gJ8JMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFxPcWRn1s0JviWvFPY725RNO5CCGhwj8Ilz0kNCyNe07TqavmZFqh v2kUI7eAHmablWyAeYzU4bpYGRDgntWXIp3V9W0zmwwLYqoXXjpa/YRi25HZm5c7 A/f6ADKBInXSmjk2VJy7vby0lGAdg7PvWt7SgqxZWnZDX/LKsPqbyyifzLc420OY CmTNFy3cTVtDsu0GH/KLFsXfvgQJ3CKy+no3Caxi9SfAirObkyRjRg5viTz3Ka+f d5yTFJ6c8BgZocY5UtiJBoatyKS2fjE1VJPMoVsAnjl+OB1yuckLDh2RbfhATGwA q9ain+V9yvOTMKQ80ih+Q0UVeAbqs1lj -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:10 2025 by rpki-client