This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: lr0pEKCYq2IPn78bjXdn4bnDQeackCJXDFMEZGjJhiY= Subject key identifier: 42:10:D2:B8:63:C7:E9:1C:42:3F:64:0E:42:8C:F0:46:1C:0D:7F:A5 Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 0402 Signing time: Sat 20 Dec 2025 23:41:48 +0000 Manifest this update: Sat 20 Dec 2025 23:41:47 +0000 Manifest next update: Sat 27 Dec 2025 23:41:47 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: xawEGkUbDe07WMpT6cZa58Zjcn4PlQIVZJTW2ThYeKM=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Dec 20 23:41:47 2025 GMT Not After : Dec 27 23:41:47 2025 GMT Subject: CN=6947343b-c079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:e9:05:1e:a6:26:81:71:47:ea:32:df:04: c8:2a:d1:1a:6e:46:18:c6:23:9c:83:8b:23:13:d5: 96:40:ed:15:2f:cd:f1:91:2e:27:9a:d1:b5:9a:f4: 3e:a6:aa:d7:31:c2:92:c9:c0:25:a6:f0:52:20:c9: dc:98:ef:e7:f8:32:d6:e6:4f:54:ae:93:dd:1d:b5: 2a:90:52:b0:de:55:78:4c:cc:bb:32:94:86:70:cb: 18:96:e3:dd:34:37:08:bb:9b:82:40:e5:1d:eb:08: 13:15:e8:e4:6f:dc:c2:b3:21:72:cb:86:2f:1a:ce: 51:b0:36:73:79:0f:ed:7c:1a:a1:d3:2e:7f:01:21: 1b:76:f9:5a:62:80:ab:d5:a4:43:c0:cf:ea:ab:61: 83:20:ff:e1:a8:c6:16:27:60:84:bd:29:d3:61:93: 51:fc:41:93:b2:c9:c2:0f:84:6a:9e:3e:8a:53:2e: 23:47:82:16:96:1e:60:80:1a:70:2c:09:8a:35:04: 1a:3f:b8:28:33:b8:97:2b:7b:27:52:f9:fd:ca:ac: c3:f5:02:93:cd:31:d7:2e:74:a5:6e:48:5b:70:8e: 75:bd:e2:b8:6e:38:cc:0f:b3:e1:de:a5:af:53:3c: f1:90:69:30:49:98:a0:b4:4e:8e:3b:e4:39:b1:91: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:10:D2:B8:63:C7:E9:1C:42:3F:64:0E:42:8C:F0:46:1C:0D:7F:A5 X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:40:6b:58:03:8a:7f:f9:c4:46:ca:3e:23:d5:cc:2b:34:4e: 6f:23:03:5d:8a:1b:d0:b1:b2:f9:c2:8c:9a:4c:1c:36:4b:b1: ee:a8:1c:ef:c8:78:9c:2a:44:27:2a:90:3a:d0:dd:65:c8:f7: 4d:3f:b0:7d:7c:ef:1d:56:5e:e4:9d:be:ca:38:fa:4a:04:34: 5f:70:d3:81:bc:9e:20:73:b9:d4:90:79:9f:5c:a2:fb:81:22: bb:9a:e6:e5:18:9c:55:91:17:66:4e:6e:28:4d:2e:ce:38:d4: 0c:23:7f:26:02:ca:23:17:f0:e5:c9:d6:5e:ec:f7:6a:a9:fc: e4:a9:a2:fc:a5:0f:f6:65:b2:27:61:32:92:ba:9e:52:0d:4e: 1e:bc:9f:f9:3f:c0:42:e2:4a:8d:9e:23:b2:33:97:6b:c3:01: f7:d6:af:cd:70:a3:3b:d9:c9:09:b4:78:a5:a7:d1:98:80:67: 90:3b:db:85:d7:d7:d8:ea:85:1e:cc:35:b4:e7:fd:3e:b9:9e: b3:53:17:3f:31:f0:79:f1:40:3b:5a:ea:9a:2d:25:24:f2:b7: 7d:ca:d3:f7:09:55:62:73:ff:48:1b:23:04:59:30:fc:86:5e: 1e:72:b4:41:61:aa:1f:3f:07:07:ee:36:9c:da:eb:aa:0c:73: d3:4f:fb:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUxMjIwMjM0MTQ3WhcNMjUxMjI3MjM0MTQ3WjAYMRYwFAYD VQQDDA02OTQ3MzQzYi1jMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGDpBR6mJoFxR+oy3wTIKtEabkYYxiOcg4sjE9WWQO0VL83xkS4nmtG1mvQ+ pqrXMcKSycAlpvBSIMncmO/n+DLW5k9UrpPdHbUqkFKw3lV4TMy7MpSGcMsYluPd NDcIu5uCQOUd6wgTFejkb9zCsyFyy4YvGs5RsDZzeQ/tfBqh0y5/ASEbdvlaYoCr 1aRDwM/qq2GDIP/hqMYWJ2CEvSnTYZNR/EGTssnCD4Rqnj6KUy4jR4IWlh5ggBpw LAmKNQQaP7goM7iXK3snUvn9yqzD9QKTzTHXLnSlbkhbcI51veK4bjjMD7Ph3qWv UzzxkGkwSZigtE6OO+Q5sZE92QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIQ0rhj x+kcQj9kDkKM8EYcDX+lMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnQGtYA4p/+cRGyj4j1cwrNE5vIwNdihvQsbL5woyaTBw2S7HuqBzv yHicKkQnKpA60N1lyPdNP7B9fO8dVl7knb7KOPpKBDRfcNOBvJ4gc7nUkHmfXKL7 gSK7mublGJxVkRdmTm4oTS7OONQMI38mAsojF/DlydZe7PdqqfzkqaL8pQ/2ZbIn YTKSup5SDU4evJ/5P8BC4kqNniOyM5drwwH31q/NcKM72ckJtHilp9GYgGeQO9uF 19fY6oUezDW05/0+uZ6zUxc/MfB58UA7WuqaLSUk8rd9ytP3CVVic/9IGyMEWTD8 hl4ecrRBYaofPwcH7jac2uuqDHPTT/u3 -----END CERTIFICATE-----Generated at Sun Dec 21 10:08:35 2025 by rpki-client