This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: bfmoNiiT019LMVc1BO6JYYja7uDACt63jn3kG3MSlxs= Subject key identifier: F1:DC:99:22:58:9F:C5:58:F3:7B:BB:3B:D6:13:F7:A7:42:B8:2D:55 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0683 Signing time: Sat 20 Dec 2025 21:48:28 +0000 Manifest this update: Sat 20 Dec 2025 21:48:27 +0000 Manifest next update: Sat 27 Dec 2025 21:48:27 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: dJycZik26V8ecJUwr3PySlCs4DeaAWIgPiV2t4XY6Uo=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: awVjv21LrUykJjD6b6nan1fibgTR8vl36mPtfLgV0k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Dec 20 21:48:27 2025 GMT Not After : Dec 27 21:48:27 2025 GMT Subject: CN=694719ac-1f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:83:f1:49:0e:d8:23:9b:1a:6f:43:df:24: 65:83:8e:76:3e:88:9b:dd:59:33:6c:2a:56:2a:9e: a9:5e:4f:c7:d6:7c:63:9c:2b:80:f5:c0:6a:70:10: a1:39:f5:15:02:66:d3:b5:fb:aa:16:87:9c:e3:01: 20:b5:23:6a:7c:c3:84:21:bb:21:9f:a8:47:b9:99: ed:24:3e:5e:a6:d8:39:b7:47:b9:b4:29:83:a9:70: f3:4c:02:bd:61:f2:c1:02:9b:a7:53:df:8b:43:0b: d3:51:a4:cd:3d:0c:fa:58:63:34:a8:60:54:b1:26: 4d:21:87:62:0b:14:5f:74:4a:93:c2:b7:d2:7d:c5: 6f:9b:fd:94:d3:e5:9b:0b:dd:aa:f9:eb:4f:1e:f8: e2:ed:41:d0:88:89:6f:f8:f7:bd:02:d2:f5:01:ad: 8b:49:b1:06:80:64:b2:70:a3:95:d2:27:b2:9d:f0: fb:8b:5d:00:eb:74:3f:4e:14:44:0b:06:d8:93:93: d5:94:20:4b:d5:66:db:2f:67:f5:c6:58:36:e0:d9: 62:c6:aa:de:a3:98:db:22:3d:2a:53:53:68:fc:bc: 3f:64:fb:83:fd:47:ce:a8:97:aa:98:e5:ac:35:ff: b6:a6:51:58:d5:30:39:9b:bc:89:b7:30:c4:fe:f4: 33:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:99:22:58:9F:C5:58:F3:7B:BB:3B:D6:13:F7:A7:42:B8:2D:55 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:69:ea:b9:2a:81:92:0b:cc:0d:56:f4:0b:5f:17:0d:a5:6e: ae:d1:de:9a:9e:50:a0:ef:5f:47:58:4e:2b:20:dd:b5:df:83: 08:8c:ec:f4:e8:3a:04:b6:9e:d9:b9:51:88:16:ae:75:aa:f4: fb:43:e1:89:09:e0:25:b6:fa:52:a7:bf:ef:72:a2:fb:0e:76: 16:23:36:2f:52:b1:41:da:21:b2:b5:93:97:f8:34:36:24:86: 0f:ac:95:a1:04:06:1e:fb:4e:8a:e2:97:60:40:3b:d1:dd:54: ab:02:08:26:8a:10:a1:70:f6:13:f2:6f:a3:a6:02:c7:53:ee: f9:07:49:24:3a:31:5b:ec:bc:7a:66:16:f7:97:2a:ab:ad:98: 2c:c0:44:69:a2:8c:07:17:d1:2c:b4:66:a9:e6:4f:23:92:b0: d2:69:f6:aa:c9:39:a3:13:92:c9:b9:8a:88:d0:e2:3f:aa:c5: 5d:a8:72:30:d5:87:00:43:ee:ed:4a:67:fa:db:f8:0e:1e:15: 71:c2:ca:b4:5f:68:86:8c:3b:a7:7a:12:3f:ee:05:92:57:4c: da:22:13:9b:22:6d:eb:8c:78:1c:cb:46:f5:80:88:d8:7a:1f: 88:6e:86:fd:ae:b7:e1:eb:06:7e:20:97:03:c5:b7:df:08:ef: 7d:76:39:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUxMjIwMjE0ODI3WhcNMjUxMjI3MjE0ODI3WjAYMRYwFAYD VQQDDA02OTQ3MTlhYy0xZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnd2D8UkO2CObGm9D3yRlg452Poib3VkzbCpWKp6pXk/H1nxjnCuA9cBqcBCh OfUVAmbTtfuqFoec4wEgtSNqfMOEIbshn6hHuZntJD5eptg5t0e5tCmDqXDzTAK9 YfLBApunU9+LQwvTUaTNPQz6WGM0qGBUsSZNIYdiCxRfdEqTwrfSfcVvm/2U0+Wb C92q+etPHvji7UHQiIlv+Pe9AtL1Aa2LSbEGgGSycKOV0ieynfD7i10A63Q/ThRE CwbYk5PVlCBL1WbbL2f1xlg24Nlixqreo5jbIj0qU1No/Lw/ZPuD/UfOqJeqmOWs Nf+2plFY1TA5m7yJtzDE/vQzgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHcmSJY n8VY83u7O9YT96dCuC1VMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXaeq5KoGSC8wNVvQLXxcNpW6u0d6anlCg719HWE4rIN2134MIjOz0 6DoEtp7ZuVGIFq51qvT7Q+GJCeAltvpSp7/vcqL7DnYWIzYvUrFB2iGytZOX+DQ2 JIYPrJWhBAYe+06K4pdgQDvR3VSrAggmihChcPYT8m+jpgLHU+75B0kkOjFb7Lx6 Zhb3lyqrrZgswERpoowHF9EstGap5k8jkrDSafaqyTmjE5LJuYqI0OI/qsVdqHIw 1YcAQ+7tSmf62/gOHhVxwsq0X2iGjDunehI/7gWSV0zaIhObIm3rjHgcy0b1gIjY eh+Ibob9rrfh6wZ+IJcDxbffCO99djnB -----END CERTIFICATE-----Generated at Mon Dec 22 11:08:08 2025 by rpki-client