This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: tGPNckRml6Ya9oOhfsXmhGVLJssJY7BctJKYhkpot04= Subject key identifier: 8F:9E:C3:1B:C1:45:A2:F9:BE:DC:E0:18:6B:0E:71:4E:1A:A6:77:D3 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 0733 Signing time: Thu 04 Dec 2025 20:41:15 +0000 Manifest this update: Thu 04 Dec 2025 20:41:15 +0000 Manifest next update: Thu 11 Dec 2025 20:41:15 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: jIs/bQOKlvusBNDUo69v8V17gE8I5wz9bAOzcyHFv4E=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Dec 4 20:41:15 2025 GMT Not After : Dec 11 20:41:15 2025 GMT Subject: CN=6931f1eb-ac43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f4:b9:a7:92:0b:cc:60:94:1c:68:f2:d1:52: 25:af:cd:cd:f5:fc:30:27:94:b3:c9:b4:02:6d:af: 0c:3c:8a:d4:54:74:32:be:1b:4e:09:82:02:3c:fa: 29:64:23:4d:c3:e4:11:f3:82:88:93:43:70:3c:0f: 65:3d:76:24:19:ef:4a:71:87:5a:8a:80:a7:a3:81: 8c:db:3e:35:b8:65:f3:71:68:9c:21:02:fa:3d:9d: 0e:41:a6:29:86:1a:d4:bc:3f:e2:4a:a9:d1:d8:e8: a6:fb:9b:2e:ad:6f:a8:cf:dd:30:48:39:fe:0f:91: 8d:5b:82:b3:ee:b6:2a:f3:24:5d:5c:a1:2f:96:19: 69:c9:40:db:46:75:c9:74:02:45:0d:5e:e0:97:0f: e1:67:29:9a:cf:6d:92:56:e9:65:50:a2:8b:48:03: bc:68:97:93:92:a1:61:39:1d:d7:0a:7d:6c:9d:88: 01:43:41:b5:a1:24:51:5e:c7:a3:1c:11:65:47:ba: 23:68:87:3b:a5:17:82:45:92:93:4a:2d:6e:b6:8d: bb:3c:39:35:d4:ff:3d:25:de:12:43:9a:76:a3:3a: e6:cf:8e:41:d5:36:a2:31:63:55:c1:86:af:5a:87: 2a:5a:71:bb:24:2f:ac:fb:86:3f:f7:50:bf:1f:95: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:C3:1B:C1:45:A2:F9:BE:DC:E0:18:6B:0E:71:4E:1A:A6:77:D3 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:34:1f:b6:b2:9c:f6:32:a9:e7:24:1d:a1:4f:48:ac:c2:00: 43:33:f4:92:92:af:ac:f9:36:42:be:44:35:d8:de:6d:93:7b: 56:6b:e3:0e:e8:e3:a9:33:59:06:42:57:66:c8:3e:70:09:94: 20:0c:39:73:f6:d7:e1:e4:e5:40:fb:1d:f7:29:6c:4e:fd:98: 2c:ad:67:da:51:95:ac:ed:bd:b2:f9:61:95:29:e4:1e:93:1d: 28:91:22:3b:20:ad:9d:4b:1d:77:42:d9:97:01:94:38:73:6b: 8f:5e:db:1d:9e:0e:db:ff:01:87:e6:1b:2c:5a:15:e4:4a:d1: 77:b3:58:5f:7a:53:cf:af:d5:c9:93:28:bc:0b:bd:39:45:17: ed:a4:4b:d5:9f:2d:51:5c:7e:31:36:92:a2:fe:91:da:20:49: 8e:40:9c:19:fa:b8:cc:40:bf:84:84:15:54:90:f3:bc:f6:5f: 19:7d:6e:8f:de:c2:a8:fd:0a:ed:36:bc:7c:90:9d:ca:94:23: d3:a3:00:41:a6:b1:dd:83:fe:95:53:5c:79:f1:4d:45:3a:e3: 1c:c2:f3:10:2a:e3:ef:04:22:bd:e8:2b:d9:ec:17:dd:e6:b2: f5:a4:c7:e3:ea:56:8e:a9:2b:9a:ab:8a:94:79:91:42:e7:58: e7:79:fc:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUxMjA0MjA0MTE1WhcNMjUxMjExMjA0MTE1WjAYMRYwFAYD VQQDEw02OTMxZjFlYi1hYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PS5p5ILzGCUHGjy0VIlr83N9fwwJ5SzybQCba8MPIrUVHQyvhtOCYICPPop ZCNNw+QR84KIk0NwPA9lPXYkGe9KcYdaioCno4GM2z41uGXzcWicIQL6PZ0OQaYp hhrUvD/iSqnR2Oim+5surW+oz90wSDn+D5GNW4Kz7rYq8yRdXKEvlhlpyUDbRnXJ dAJFDV7glw/hZymaz22SVullUKKLSAO8aJeTkqFhOR3XCn1snYgBQ0G1oSRRXsej HBFlR7ojaIc7pReCRZKTSi1uto27PDk11P89Jd4SQ5p2ozrmz45B1TaiMWNVwYav WocqWnG7JC+s+4Y/91C/H5XvkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+ewxvB RaL5vtzgGGsOcU4apnfTMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKNB+2spz2MqnnJB2hT0iswgBDM/SSkq+s+TZCvkQ12N5tk3tWa+MO 6OOpM1kGQldmyD5wCZQgDDlz9tfh5OVA+x33KWxO/ZgsrWfaUZWs7b2y+WGVKeQe kx0okSI7IK2dSx13QtmXAZQ4c2uPXtsdng7b/wGH5hssWhXkStF3s1hfelPPr9XJ kyi8C705RRftpEvVny1RXH4xNpKi/pHaIEmOQJwZ+rjMQL+EhBVUkPO89l8ZfW6P 3sKo/QrtNrx8kJ3KlCPTowBBprHdg/6VU1x58U1FOuMcwvMQKuPvBCK96CvZ7Bfd 5rL1pMfj6laOqSuaq4qUeZFC51jnefyk -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:26 2025 by rpki-client