This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json) Hash identifier: XmCXqZn+6TviTVNiIzKB/z68nXqhVwkZ7oHo3ZQwYV8= Subject key identifier: 72:AE:39:29:CE:34:2D:A5:67:6B:DF:12:0B:FA:9C:76:2E:25:18:29 Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Certificate serial: 1FE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft Manifest number: 1FD2 Signing time: Sat 06 Dec 2025 15:41:42 +0000 Manifest this update: Sat 06 Dec 2025 15:41:41 +0000 Manifest next update: Sat 13 Dec 2025 15:41:41 +0000 Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: 3oXfK87eywRcH6RBZ5rrhUbdjNBb3iEG9YSA+OecHcw=) 2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: bpwG3qWkZqt3c9e2parZM85DcFLWLncfBgOv3ugwly0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8160 (0x1fe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Validity Not Before: Dec 6 15:41:41 2025 GMT Not After : Dec 13 15:41:41 2025 GMT Subject: CN=69344eb5-d175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:56:41:ca:fd:50:a4:2f:cc:cb:c0:8f:60: 9e:bf:8b:f5:86:71:af:08:e2:6f:2d:1f:73:50:d0: 4c:e6:98:bc:03:30:7d:f9:b0:70:5f:1d:d1:1e:07: 26:55:ed:d6:cc:a7:4c:72:7d:c3:b8:4d:5b:91:66: 6e:67:3f:29:53:ee:eb:38:c1:0d:c4:47:0b:5f:48: 55:51:f9:b3:c1:c1:d4:6c:74:04:fc:f3:28:08:d8: 53:bc:07:a4:9a:b0:5a:39:05:03:47:8a:e1:d5:e5: c2:21:7a:b8:ea:bb:37:0e:eb:fb:54:e5:51:6d:41: 35:69:c6:78:2a:f2:d2:4e:3f:b1:74:63:1d:55:31: f5:af:f8:d0:1a:46:6d:ce:da:ee:fa:d0:69:db:d6: b5:d9:e7:3a:55:76:2a:ee:4b:67:4d:a6:d3:c5:9d: 3a:a4:1a:ce:bd:3f:42:12:d6:5d:8e:f0:4b:2f:52: 9e:ae:1d:a8:4c:c2:f6:84:1f:64:08:bf:a2:b6:1a: 62:9f:78:1d:de:0a:a7:61:bf:01:1f:d4:96:41:14: 9b:be:41:3f:f1:3f:64:cd:c7:27:ef:40:23:90:0c: af:8d:d9:64:74:c8:5a:68:72:78:db:7e:58:da:5d: 5f:a5:af:1e:02:4c:1b:e1:7b:53:1c:cb:0c:2c:a1: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:39:29:CE:34:2D:A5:67:6B:DF:12:0B:FA:9C:76:2E:25:18:29 X509v3 Authority Key Identifier: keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:03:a8:15:a3:ec:03:9d:83:7d:72:83:8b:55:18:87:7c:58: 29:95:52:ae:cd:55:ab:e8:6c:42:b7:15:5c:5b:dd:e0:7a:ff: 49:5c:8a:d6:c4:7f:80:4a:ec:5a:12:2a:82:ec:87:7c:27:11: 15:71:95:83:aa:d9:28:ee:1a:7d:67:43:5a:f5:37:c6:e7:25: 23:06:43:36:4b:bc:d9:8b:ea:96:e5:95:bb:7e:1a:90:f8:db: 0d:78:9e:f9:1b:33:3a:00:06:1e:e0:bb:76:fb:d2:ba:90:c5: 26:64:28:4e:d9:db:a4:2d:b8:56:df:7e:bc:00:63:da:b4:6f: e2:19:f7:b7:0d:7e:ba:c3:9e:30:1d:7e:ca:7c:79:03:9f:b2: a2:1f:48:ab:88:0e:a0:07:c7:a7:ec:c3:0c:72:a7:36:c7:e9: ae:13:26:71:f0:ea:84:82:98:f0:88:ba:77:73:45:ad:e1:77: 74:5c:b1:97:23:51:58:e3:46:9e:6b:71:b7:69:73:ef:e8:c4: 8d:95:59:9f:2a:58:5d:9a:42:98:50:61:53:22:62:25:21:d7: 23:b2:b5:c2:7e:2f:54:4c:49:6a:23:b2:cd:1c:37:b3:13:23: 82:ae:e7:12:bb:df:12:4f:ab:be:d7:ba:8e:86:a1:70:f4:cc: 36:f3:dd:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF NjYyRDk5Q0EwHhcNMjUxMjA2MTU0MTQxWhcNMjUxMjEzMTU0MTQxWjAYMRYwFAYD VQQDEw02OTM0NGViNS1kMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD9WQcr9UKQvzMvAj2Cev4v1hnGvCOJvLR9zUNBM5pi8AzB9+bBwXx3RHgcm Ve3WzKdMcn3DuE1bkWZuZz8pU+7rOMENxEcLX0hVUfmzwcHUbHQE/PMoCNhTvAek mrBaOQUDR4rh1eXCIXq46rs3Duv7VOVRbUE1acZ4KvLSTj+xdGMdVTH1r/jQGkZt ztru+tBp29a12ec6VXYq7ktnTabTxZ06pBrOvT9CEtZdjvBLL1Kerh2oTML2hB9k CL+ithpin3gd3gqnYb8BH9SWQRSbvkE/8T9kzccn70AjkAyvjdlkdMhaaHJ4235Y 2l1fpa8eAkwb4XtTHMsMLKFH5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKuOSnO NC2lZ2vfEgv6nHYuJRgpMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjQwQi81QjczNkQ5MjQzMzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQ bl9KTTBGMWV6MG5tWXRtY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqA6gVo+wDnYN9coOLVRiHfFgplVKuzVWr6GxCtxVcW93gev9JXIrW xH+ASuxaEiqC7Id8JxEVcZWDqtko7hp9Z0Na9TfG5yUjBkM2S7zZi+qW5ZW7fhqQ +NsNeJ75GzM6AAYe4Lt2+9K6kMUmZChO2dukLbhW3368AGPatG/iGfe3DX66w54w HX7KfHkDn7KiH0iriA6gB8en7MMMcqc2x+muEyZx8OqEgpjwiLp3c0Wt4Xd0XLGX I1FY40aea3G3aXPv6MSNlVmfKlhdmkKYUGFTImIlIdcjsrXCfi9UTElqI7LNHDez EyOCrucSu98ST6u+17qOhqFw9Mw2893t -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:39 2025 by rpki-client