This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: GCAmo8xeoz1pTepXJvgrgNv9pkgrJjDMIiS47/LRRME= Subject key identifier: CA:9A:0A:F1:9B:BD:22:2C:B6:2A:51:D7:D6:6A:94:DB:C5:7A:6E:F4 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 0157 Signing time: Fri 05 Dec 2025 02:19:41 +0000 Manifest this update: Fri 05 Dec 2025 02:19:40 +0000 Manifest next update: Fri 12 Dec 2025 02:19:40 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: G+nPcUm4LsupUDDMD/amps7yLn355X4WRGln63M9CjU=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Dec 5 02:19:40 2025 GMT Not After : Dec 12 02:19:40 2025 GMT Subject: CN=6932413c-5c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:02:30:de:36:42:e3:8e:dc:92:c6:3c:34: 9d:92:eb:a8:6d:f3:47:95:34:2a:a9:c9:0b:b4:68: 4c:50:27:9e:2c:c9:d7:63:db:b0:eb:ff:2f:54:d9: f9:44:d5:fd:06:7e:f1:73:ef:e3:62:db:bf:68:a2: 47:0b:11:79:7d:73:81:6e:86:b4:32:98:1c:dc:14: 0b:8d:59:9a:38:45:68:8f:42:97:ae:69:4d:01:4a: 5e:61:da:b4:4a:50:ae:5a:5d:7e:ad:64:5c:c4:a7: 76:16:99:4b:fb:dd:9d:4d:7f:7f:e3:b6:f4:95:23: 60:d3:eb:43:93:68:c5:65:34:a9:c9:50:ee:e9:52: 9b:b2:f0:50:8d:e5:26:2c:03:58:23:15:83:af:21: 49:ec:e7:83:25:f2:cb:f3:10:a9:31:f9:45:6e:c1: 23:8c:b1:a6:30:88:8e:9d:20:92:5a:48:dd:af:9f: 8b:93:1b:bb:0a:47:d8:8f:a5:8e:fc:54:6e:a5:14: 00:9d:8a:eb:48:74:70:4e:91:b0:48:f7:ec:c0:7e: d8:a7:1b:ca:7b:03:a0:50:b9:3d:54:1d:c1:46:04: 45:f0:ef:cd:33:a2:cf:8c:66:b6:a1:88:f4:ea:70: 19:8d:1e:37:da:26:8d:cf:7a:80:0e:b8:e1:ef:4f: 11:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:0A:F1:9B:BD:22:2C:B6:2A:51:D7:D6:6A:94:DB:C5:7A:6E:F4 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a2:6a:a9:30:82:4c:64:66:12:f4:01:08:6f:1b:d2:43:50: 66:f3:7c:db:33:14:7d:7d:a5:1a:08:c1:11:97:1e:60:86:12: ce:9c:84:5b:d3:88:03:d9:49:72:3f:e6:b7:99:cb:d0:8e:4c: 66:27:d3:af:cc:1d:cc:b3:0a:a4:b5:d7:e7:b3:95:50:1f:20: 3a:04:15:98:fc:49:da:b7:e1:8d:07:da:a2:1f:66:04:5e:39: 95:f2:47:8b:f5:f6:99:3a:a9:29:89:09:61:e9:e6:13:dc:02: b3:da:5e:4b:96:68:d0:ab:e9:d2:8e:52:52:bb:45:de:23:e3: 00:9a:eb:fc:2c:d0:ca:c6:8e:fb:92:3e:1a:08:f8:66:f5:d7: 21:69:4c:13:b8:62:e5:53:92:88:65:a9:dc:26:37:f5:3b:93: 43:42:b2:71:4c:59:a3:ba:f1:8c:5e:cb:88:51:2c:3d:e4:04: 69:8c:bd:d3:ee:e3:b0:6e:1d:a7:29:11:bc:a4:1d:c7:8d:2a: 0f:81:16:d7:63:69:14:82:63:58:de:9e:1d:d6:f2:cc:bc:ef: e1:65:fa:d6:6a:14:53:8d:01:2b:9b:eb:2c:5c:a9:1a:ae:b8: e6:a4:5f:62:ef:ab:eb:25:fa:0b:ff:8c:5c:d4:04:18:d3:c6: ab:3d:d9:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUxMjA1MDIxOTQwWhcNMjUxMjEyMDIxOTQwWjAYMRYwFAYD VQQDEw02OTMyNDEzYy01YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAko8CMN42QuOO3JLGPDSdkuuobfNHlTQqqckLtGhMUCeeLMnXY9uw6/8vVNn5 RNX9Bn7xc+/jYtu/aKJHCxF5fXOBboa0Mpgc3BQLjVmaOEVoj0KXrmlNAUpeYdq0 SlCuWl1+rWRcxKd2FplL+92dTX9/47b0lSNg0+tDk2jFZTSpyVDu6VKbsvBQjeUm LANYIxWDryFJ7OeDJfLL8xCpMflFbsEjjLGmMIiOnSCSWkjdr5+Lkxu7CkfYj6WO /FRupRQAnYrrSHRwTpGwSPfswH7YpxvKewOgULk9VB3BRgRF8O/NM6LPjGa2oYj0 6nAZjR432iaNz3qADrjh708RHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqaCvGb vSIstipR19ZqlNvFem70MB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCComqpMIJMZGYS9AEIbxvSQ1Bm83zbMxR9faUaCMERlx5ghhLOnIRb 04gD2UlyP+a3mcvQjkxmJ9OvzB3Mswqktdfns5VQHyA6BBWY/Enat+GNB9qiH2YE XjmV8keL9faZOqkpiQlh6eYT3AKz2l5LlmjQq+nSjlJSu0XeI+MAmuv8LNDKxo77 kj4aCPhm9dchaUwTuGLlU5KIZancJjf1O5NDQrJxTFmjuvGMXsuIUSw95ARpjL3T 7uOwbh2nKRG8pB3HjSoPgRbXY2kUgmNY3p4d1vLMvO/hZfrWahRTjQErm+ssXKka rrjmpF9i76vrJfoL/4xc1AQY08arPdm3 -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:07 2025 by rpki-client