This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: 3MABc8LIjMA08IgHr7wf7D9YCzFL4QMGC+KEPTN5pLc= Subject key identifier: 95:7E:73:22:E7:05:4C:3F:D9:DF:98:A5:E4:B5:E3:AB:A9:85:5F:4E Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: F8 Signing time: Tue 23 Dec 2025 04:14:09 +0000 Manifest this update: Tue 23 Dec 2025 04:14:09 +0000 Manifest next update: Tue 30 Dec 2025 04:14:09 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: zmsXcisT4BfimddKdJzs2zGFqnkCWeslnQITpvxo15U=) 2: C37A8D80DC9411F0B18EF655406F56BC.roa (hash: qnCZU7C59oQWFeEtmfxzdPCrAt6hK/fzPVfYtt26rIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: Dec 23 04:14:09 2025 GMT Not After : Dec 30 04:14:09 2025 GMT Subject: CN=694a1711-ed4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:b1:ea:82:92:26:35:94:bb:a8:f0:16:a3: f4:cf:88:87:33:e7:f8:e6:a0:85:af:e5:f1:72:74: a0:20:16:92:24:f6:c4:fd:ab:25:22:5f:f7:89:d2: 60:0e:5f:d1:18:d1:a1:96:fc:c4:6b:2c:31:60:28: 6c:62:2e:38:9d:0c:a3:1c:50:96:7c:02:22:36:6d: 54:f0:35:45:20:d4:3e:91:bf:c0:0f:10:2b:e2:c4: 91:80:3c:73:45:4a:c3:91:58:5e:7d:9e:1d:d4:e3: 3d:a3:fe:e6:20:3e:57:d9:55:09:fe:48:96:ca:ce: 62:44:75:78:74:5c:76:8f:fe:9a:0b:9f:72:b3:ad: e1:79:df:55:ee:46:6f:47:ba:5c:9f:b8:76:e8:91: 66:3c:74:4c:9c:7d:67:db:bb:61:7e:25:ea:a2:de: 5c:00:5e:56:b0:35:eb:8f:ca:4c:32:36:02:dc:c6: 04:b7:a3:a9:91:c8:23:f6:46:68:d1:27:26:a8:ef: d0:a2:50:88:ad:1e:43:6a:a9:6d:4f:80:e5:8a:68: 24:af:f8:d0:51:4e:ed:1b:62:69:a4:ea:42:07:3d: bf:2a:2d:c5:b6:a4:fd:ec:a6:8d:c5:a1:37:79:80: e6:25:9a:27:08:e8:30:0f:4b:c5:85:a8:da:1e:f3: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7E:73:22:E7:05:4C:3F:D9:DF:98:A5:E4:B5:E3:AB:A9:85:5F:4E X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:86:04:c1:58:5a:6c:e6:6e:6e:fe:31:9f:b3:9d:d4:65:88: 02:b0:9f:3e:60:b8:7b:c3:5b:b1:8c:de:6f:f3:b4:ae:5a:ca: 6b:27:a3:a3:f8:b3:69:25:d1:cb:20:a1:b9:1b:2c:fc:6c:8d: 86:97:bf:6f:cb:aa:70:b5:6a:1d:b0:c9:94:66:40:5f:50:79: 87:e6:17:db:6d:44:be:1c:10:09:35:7e:c5:48:3d:3f:96:05: bf:e1:a6:5e:d8:3e:a0:ad:0c:e1:c2:d8:17:5e:f4:50:b9:3d: e6:a1:9f:6c:e8:62:fa:0f:47:4a:f5:31:5f:27:d3:8f:f2:5d: d3:4a:38:6a:1a:c0:aa:55:34:fb:27:95:f1:f2:ac:90:90:8f: 4b:b6:d9:f4:38:ac:19:6c:b5:2a:5e:c7:43:00:7c:ed:0c:7a: 21:12:91:92:0c:87:61:9c:7d:1e:e1:41:09:a2:2e:1c:c0:e7: 2e:1c:b7:45:1d:53:bf:62:3b:03:e5:a3:5f:f0:1b:0b:82:46: b1:9f:78:01:8b:bc:e9:23:1b:35:e2:ed:05:f7:ac:80:0e:82: 7e:f4:ec:84:57:33:e3:89:f4:0b:09:64:90:30:37:04:81:ae: 77:25:d5:d6:2f:11:11:68:f0:f2:ef:b2:a8:79:cd:45:c7:be: 13:0b:7c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjUxMjIzMDQxNDA5WhcNMjUxMjMwMDQxNDA5WjAYMRYwFAYD VQQDDA02OTRhMTcxMS1lZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowax6oKSJjWUu6jwFqP0z4iHM+f45qCFr+XxcnSgIBaSJPbE/aslIl/3idJg Dl/RGNGhlvzEaywxYChsYi44nQyjHFCWfAIiNm1U8DVFINQ+kb/ADxAr4sSRgDxz RUrDkVhefZ4d1OM9o/7mID5X2VUJ/kiWys5iRHV4dFx2j/6aC59ys63hed9V7kZv R7pcn7h26JFmPHRMnH1n27thfiXqot5cAF5WsDXrj8pMMjYC3MYEt6Opkcgj9kZo 0ScmqO/QolCIrR5DaqltT4Dlimgkr/jQUU7tG2JppOpCBz2/Ki3FtqT97KaNxaE3 eYDmJZonCOgwD0vFhajaHvM4WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV+cyLn BUw/2d+YpeS146uphV9OMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBshgTBWFps5m5u/jGfs53UZYgCsJ8+YLh7w1uxjN5v87SuWsprJ6Oj +LNpJdHLIKG5Gyz8bI2Gl79vy6pwtWodsMmUZkBfUHmH5hfbbUS+HBAJNX7FSD0/ lgW/4aZe2D6grQzhwtgXXvRQuT3moZ9s6GL6D0dK9TFfJ9OP8l3TSjhqGsCqVTT7 J5Xx8qyQkI9Lttn0OKwZbLUqXsdDAHztDHohEpGSDIdhnH0e4UEJoi4cwOcuHLdF HVO/YjsD5aNf8BsLgkaxn3gBi7zpIxs14u0F96yADoJ+9OyEVzPjifQLCWSQMDcE ga53JdXWLxERaPDy77Koec1Fx74TC3zc -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:06 2025 by rpki-client