This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft File: kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json) Hash identifier: IfbBERl3LJo+FjMixyT6NwhJqa9Ny1wPaUSUUqgaM38= Subject key identifier: C7:1E:EA:D2:44:F8:9A:B0:05:46:50:78:5F:86:C4:17:D6:6C:65:49 Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft Manifest number: 0C71 Signing time: Sat 06 Dec 2025 17:55:57 +0000 Manifest this update: Sat 06 Dec 2025 17:55:56 +0000 Manifest next update: Sat 13 Dec 2025 17:55:56 +0000 Files and hashes: 1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: D8of3WzA8Rlq5640jzn7sTtKt0oVQbVdCCD8nBP0o34=) 2: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (hash: G+U7uQFgAb2U+N/txdaeFUXvdA97Z5VnhrdZ+BD6M4c=) 3: E6144BC6F52011EFB886A255C4F9AE02.roa (hash: aEMS3M29hCCeByUCXZ+uvfYFpf4/VBfRmYpl07QvYhY=) 4: C9989D9EF52011EF88416555C4F9AE02.roa (hash: J1Y3R18xnrLrxVnTd6dnJAcJxU9kFVJTgj8vMihGb8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: Dec 6 17:55:56 2025 GMT Not After : Dec 13 17:55:56 2025 GMT Subject: CN=69346e2c-167a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:c1:f3:0b:6f:ad:d4:a5:fd:9d:09:85:96: 93:d4:1f:32:e1:71:50:5e:c9:e4:33:67:c8:5b:10: 4e:b4:5f:42:c0:8f:c6:90:3c:fc:33:2c:86:55:b1: 18:e7:3c:7a:5f:9b:c6:b7:b9:b0:ad:b9:08:22:69: f8:b3:ba:39:28:22:f7:78:ee:7a:30:09:cd:3d:a5: 10:c9:4a:c5:8e:e9:d7:c8:29:81:e3:19:e5:81:59: d6:76:80:04:72:35:b7:38:32:dd:cd:1a:77:80:52: 45:91:2e:50:23:26:95:5b:25:c0:eb:00:1d:09:8c: 27:c9:9f:c3:d4:5c:98:05:a7:cf:ee:6a:75:42:33: 2d:7d:ff:64:87:01:0a:62:e7:03:cc:e9:04:1b:cb: 02:cd:80:48:94:89:75:a7:85:64:c2:5d:aa:09:f3: d1:60:94:ca:71:ba:57:37:70:07:2d:52:d7:e7:03: 2e:d8:23:30:e5:8d:bf:a5:58:24:d9:19:15:8a:2e: 18:77:ec:07:ec:ee:63:a9:48:3d:0e:02:b2:c8:bf: 12:5b:31:a4:77:57:20:e0:57:0e:f0:19:21:d8:47: 3d:46:93:4e:9d:c5:36:fa:01:e5:b7:eb:59:4d:5d: 5a:8f:ca:e4:da:99:c6:85:e3:ec:01:49:51:1a:b4: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1E:EA:D2:44:F8:9A:B0:05:46:50:78:5F:86:C4:17:D6:6C:65:49 X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6d:ea:23:e6:dd:a7:7c:d6:cc:25:ab:59:47:8e:64:77:9b: 0e:9b:91:82:51:e8:37:99:c0:1c:28:14:6c:d0:50:48:4a:a1: 7a:d6:90:bb:81:72:a0:e1:2f:59:99:5b:5f:32:09:c0:a0:78: 98:91:c2:11:4a:f7:77:9f:79:b0:f9:f8:c2:1f:ee:da:2a:a1: fc:22:7d:d6:7a:d2:ab:e6:d1:8e:5d:ab:e4:4c:8e:d3:d1:6a: 05:7d:02:0c:cb:14:cd:a5:45:4b:25:93:1c:e0:25:db:d7:5d: 8b:20:24:ab:bd:02:60:2d:e6:28:c0:17:60:b5:ea:b6:e3:ff: e8:1e:dc:a6:e1:79:c2:35:a7:27:f0:ed:a1:47:e4:ec:39:87: c2:d7:9c:8e:2d:84:81:a5:96:4b:15:28:cc:2d:e5:f4:50:6a: ff:ea:72:9b:01:04:df:74:24:1a:18:44:88:b3:91:b2:90:94: af:45:e1:75:76:8f:33:7d:22:c6:5c:59:91:5c:54:ea:d9:54: db:66:48:96:12:1e:0f:ad:46:eb:78:f9:8c:c7:fb:cb:81:ba: 87:54:c4:5b:3d:88:63:38:fc:76:29:8e:08:e8:05:c4:62:dd: 65:39:94:45:02:fc:51:5f:a6:b0:c1:ae:66:e6:d0:fc:01:16: 0c:01:56:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjUxMjA2MTc1NTU2WhcNMjUxMjEzMTc1NTU2WjAYMRYwFAYD VQQDEw02OTM0NmUyYy0xNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYvB8wtvrdSl/Z0JhZaT1B8y4XFQXsnkM2fIWxBOtF9CwI/GkDz8MyyGVbEY 5zx6X5vGt7mwrbkIImn4s7o5KCL3eO56MAnNPaUQyUrFjunXyCmB4xnlgVnWdoAE cjW3ODLdzRp3gFJFkS5QIyaVWyXA6wAdCYwnyZ/D1FyYBafP7mp1QjMtff9khwEK YucDzOkEG8sCzYBIlIl1p4Vkwl2qCfPRYJTKcbpXN3AHLVLX5wMu2CMw5Y2/pVgk 2RkVii4Yd+wH7O5jqUg9DgKyyL8SWzGkd1cg4FcO8Bkh2Ec9RpNOncU2+gHlt+tZ TV1aj8rk2pnGhePsAUlRGrRPcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMce6tJE +JqwBUZQeF+GxBfWbGVJMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTJDQy9GMjZFMDZDRTExRjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0 RVlvdFd0VTAySUtQUzVSalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBobeoj5t2nfNbMJatZR45kd5sOm5GCUeg3mcAcKBRs0FBISqF61pC7 gXKg4S9ZmVtfMgnAoHiYkcIRSvd3n3mw+fjCH+7aKqH8In3WetKr5tGOXavkTI7T 0WoFfQIMyxTNpUVLJZMc4CXb112LICSrvQJgLeYowBdgteq24//oHtym4XnCNacn 8O2hR+TsOYfC15yOLYSBpZZLFSjMLeX0UGr/6nKbAQTfdCQaGESIs5GykJSvReF1 do8zfSLGXFmRXFTq2VTbZkiWEh4PrUbrePmMx/vLgbqHVMRbPYhjOPx2KY4I6AXE Yt1lOZRFAvxRX6awwa5m5tD8ARYMAVb1 -----END CERTIFICATE-----Generated at Sun Dec 7 06:34:26 2025 by rpki-client