This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: IjJDoBYvArGdl7vyXTOvY5eJERApFS3/gCyINjrrEjo= Subject key identifier: BC:C7:C0:1A:20:52:DB:31:79:C5:43:EE:07:D4:A7:35:90:4D:3B:A2 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 1722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 1709 Signing time: Sat 06 Dec 2025 16:13:03 +0000 Manifest this update: Sat 06 Dec 2025 16:13:03 +0000 Manifest next update: Sat 13 Dec 2025 16:13:03 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: ab7Vqo2iOgHoUenAMQN3GjPGC24zS/rTlW1boqunbEQ=) 2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=) 3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5922 (0x1722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Dec 6 16:13:03 2025 GMT Not After : Dec 13 16:13:03 2025 GMT Subject: CN=6934560f-5f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b0:17:58:05:d7:da:fe:76:79:cb:bc:00:a9: 81:7c:15:61:13:2a:20:fc:94:18:d5:ae:e6:4b:51: 4b:b8:f3:7b:42:f1:f6:5b:48:5d:3b:30:0e:b7:31: 11:e9:fe:5c:18:11:37:ca:71:41:ee:24:cc:46:f8: 87:c8:d6:ce:98:c1:28:a8:46:1a:b7:68:fe:33:51: 15:60:81:60:f9:85:05:ec:96:88:46:96:a1:ab:b1: 84:5a:58:21:58:c4:5d:93:ad:13:e2:24:82:4b:39: fd:2f:f4:07:f6:f0:70:00:54:14:aa:8c:2c:f8:8f: f8:56:30:2f:f6:a0:8a:dd:40:5c:ac:86:c9:92:81: bf:5d:2e:27:35:81:ae:7a:ef:fc:22:88:b5:aa:d8: a0:f8:27:a3:fc:6f:1e:f3:0d:30:94:e0:05:4e:1f: a0:9e:4d:4a:1b:03:b2:51:b1:77:15:6b:e4:a4:f9: ab:b0:c5:b4:31:59:c9:41:7d:54:98:f9:95:1d:30: 1b:d0:d0:8a:8a:1c:c5:94:5d:02:ad:c0:8e:22:f6: cf:2a:a7:03:62:10:94:89:0e:24:ec:d8:0a:4b:bf: e5:02:16:85:f8:15:ae:bb:b9:4b:6f:de:df:b0:7e: 97:6f:04:65:46:49:43:6b:5f:1b:4b:64:36:05:78: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C7:C0:1A:20:52:DB:31:79:C5:43:EE:07:D4:A7:35:90:4D:3B:A2 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:9f:4f:ca:07:42:ad:36:38:70:cb:fa:9e:38:84:18:33:5c: c4:e7:0e:96:bb:b1:23:30:75:30:0c:fd:6a:04:4d:6f:7a:8b: 9f:33:2f:1e:10:60:33:a6:27:5d:fc:bb:ad:d1:28:85:b0:4c: 43:72:17:93:de:a2:94:5d:d8:aa:e7:2b:10:ea:02:16:46:22: 33:15:62:c1:af:f1:88:70:b1:f1:e4:a4:c1:70:95:f0:63:c5: a1:fe:d7:b1:49:be:2c:43:42:25:2e:c4:fd:77:27:8d:ea:74: 42:a9:21:c6:50:88:0e:16:e0:c1:46:ac:60:df:0e:83:5b:3d: a0:a7:de:61:16:e3:60:89:35:b0:b4:bd:88:cd:fa:2e:f1:62: e8:53:71:92:2f:4f:16:75:cb:5f:43:f7:61:61:0e:52:ed:01: d7:d9:97:dd:84:16:96:66:e1:4f:10:d9:25:3d:2d:63:b1:1f: fb:6c:59:1c:b8:ad:4b:0e:ea:8f:67:fa:8c:1f:4e:22:6a:c9: 77:f0:27:7e:e9:57:56:3c:f7:0d:72:2f:c4:ad:6c:ab:eb:26: 90:a0:e7:c9:af:13:cd:3a:1b:8e:5e:2f:12:b6:d1:91:e1:ba: 73:b8:cf:40:3f:f2:b0:97:5a:46:6a:ac:43:a5:8d:32:30:66: a0:ad:2a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjUxMjA2MTYxMzAzWhcNMjUxMjEzMTYxMzAzWjAYMRYwFAYD VQQDEw02OTM0NTYwZi01Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67AXWAXX2v52ecu8AKmBfBVhEyog/JQY1a7mS1FLuPN7QvH2W0hdOzAOtzER 6f5cGBE3ynFB7iTMRviHyNbOmMEoqEYat2j+M1EVYIFg+YUF7JaIRpahq7GEWlgh WMRdk60T4iSCSzn9L/QH9vBwAFQUqows+I/4VjAv9qCK3UBcrIbJkoG/XS4nNYGu eu/8Ioi1qtig+Cej/G8e8w0wlOAFTh+gnk1KGwOyUbF3FWvkpPmrsMW0MVnJQX1U mPmVHTAb0NCKihzFlF0CrcCOIvbPKqcDYhCUiQ4k7NgKS7/lAhaF+BWuu7lLb97f sH6XbwRlRklDa18bS2Q2BXizcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzHwBog UtsxecVD7gfUpzWQTTuiMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1n0/KB0KtNjhwy/qeOIQYM1zE5w6Wu7EjMHUwDP1qBE1veoufMy8e EGAzpidd/Lut0SiFsExDcheT3qKUXdiq5ysQ6gIWRiIzFWLBr/GIcLHx5KTBcJXw Y8Wh/texSb4sQ0IlLsT9dyeN6nRCqSHGUIgOFuDBRqxg3w6DWz2gp95hFuNgiTWw tL2Izfou8WLoU3GSL08WdctfQ/dhYQ5S7QHX2ZfdhBaWZuFPENklPS1jsR/7bFkc uK1LDuqPZ/qMH04iasl38Cd+6VdWPPcNci/ErWyr6yaQoOfJrxPNOhuOXi8SttGR 4bpzuM9AP/Kwl1pGaqxDpY0yMGagrSoN -----END CERTIFICATE-----Generated at Sun Dec 7 03:23:47 2025 by rpki-client