This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft File: k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json) Hash identifier: cKDxUK00KEVEDLRwIh54W0u04l41DqpEj0unh+zB7BI= Subject key identifier: A9:1E:96:C0:25:3D:2C:AF:34:32:10:23:EE:97:FD:34:3A:37:35:E6 Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF Certificate issuer: /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft Manifest number: 0D Signing time: Wed 03 Dec 2025 06:07:52 +0000 Manifest this update: Wed 03 Dec 2025 06:07:51 +0000 Manifest next update: Wed 10 Dec 2025 06:07:51 +0000 Files and hashes: 1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: Qjq7RMerBAjKSfXgL1zuF9LcAutiAbCRlCsTAUse7BE=) 2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: WMpjwelneu59KCwsFhtoJENKBFdbJa7sC91eiRfTIfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF Validity Not Before: Dec 3 06:07:51 2025 GMT Not After : Dec 10 06:07:51 2025 GMT Subject: CN=692fd3b8-15b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:98:d8:82:e9:ff:d1:39:10:e5:5f:12:6a:51: 4a:02:9e:a5:e6:04:32:5f:05:7e:68:3f:26:37:44: 0f:f9:fb:b3:1b:53:fb:d8:2e:88:e3:13:fd:26:a5: 42:ab:fe:f4:62:a4:d3:d1:41:c6:ef:5c:c3:44:6b: 73:fa:27:8b:6f:84:81:a7:66:e4:6d:83:f1:b3:81: 35:6b:d4:97:c2:67:10:8b:01:a1:71:fa:24:8d:00: 69:e5:f6:03:2e:00:8d:25:46:30:df:52:1f:2d:0c: 12:dd:0f:a6:24:9f:78:3b:cd:1b:b7:b0:c6:87:cf: cf:ed:b2:87:49:11:80:10:42:52:a0:4d:ee:97:e3: 9f:3b:72:2d:70:8a:8c:8e:99:e4:93:dd:fe:dd:db: db:a3:99:65:0b:a9:88:a8:99:cf:3e:2e:38:08:d1: 4d:2c:5a:fa:16:f3:a5:6b:c1:e6:d7:6d:f9:fa:98: 28:89:bd:85:fc:90:2a:7d:ee:65:24:e4:ee:a2:a0: 1a:c8:04:6a:df:5a:b2:49:01:53:7d:0d:9b:e8:84: 9f:10:ef:c8:ac:23:f1:22:3b:9d:32:41:d9:61:20: 6b:a2:cb:c8:f4:08:33:19:aa:41:0a:be:b4:fa:7f: 2c:75:60:69:08:2a:5a:3d:71:7b:a2:df:f2:1c:71: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1E:96:C0:25:3D:2C:AF:34:32:10:23:EE:97:FD:34:3A:37:35:E6 X509v3 Authority Key Identifier: keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:39:c3:d0:77:cf:6f:09:fa:96:71:7b:d6:e9:eb:ee:4e:48: 2d:55:b0:cd:37:46:22:ad:04:42:dc:79:a2:6e:c4:c4:a8:52: 12:35:9a:18:73:4e:75:1f:09:c7:68:6d:d9:f9:56:1b:32:32: 1c:78:c0:1b:38:2a:80:b3:2b:6a:db:0c:1a:b4:d0:74:c6:47: 77:e9:ab:32:ed:de:dc:ea:52:ff:10:10:b9:b8:31:42:62:41: 8a:78:37:4e:5d:83:e8:e1:d4:eb:9f:38:00:94:97:3b:54:33: 3e:00:e6:13:84:ff:e5:9d:2b:d8:e5:ec:d4:a9:37:01:4e:34: bd:1d:96:10:bb:32:ab:53:90:5f:b7:f8:8c:85:8e:5d:4e:4c: 80:26:32:8c:5b:11:c5:3a:9b:8a:ad:d0:7c:4c:f0:93:e9:08: d3:5f:c8:6c:60:3c:1c:a2:94:9d:f8:64:30:c3:37:1b:45:2d: 3a:dc:c0:61:e7:46:ca:7b:79:15:70:7b:84:ff:f4:51:32:e1: 19:1d:50:81:46:31:3c:a4:ee:72:df:26:f9:87:bf:c1:05:e6: 86:11:51:2b:a4:0b:47:49:bf:ba:4c:2c:cc:66:a9:17:31:6a: 60:41:83:4d:5a:54:48:f7:33:6a:ab:e4:14:56:fb:c7:7f:42: 7c:de:2b:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTdGQzExMC8GA1UEBRMoOTNFNkNDOUNCQzk0QzZCNEU4QzdEOTg2NDE4MzBERTY2 MzkxQjlERjAeFw0yNTEyMDMwNjA3NTFaFw0yNTEyMTAwNjA3NTFaMBgxFjAUBgNV BAMTDTY5MmZkM2I4LTE1YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsmNiC6f/RORDlXxJqUUoCnqXmBDJfBX5oPyY3RA/5+7MbU/vYLojjE/0mpUKr /vRipNPRQcbvXMNEa3P6J4tvhIGnZuRtg/GzgTVr1JfCZxCLAaFx+iSNAGnl9gMu AI0lRjDfUh8tDBLdD6Ykn3g7zRu3sMaHz8/tsodJEYAQQlKgTe6X4587ci1wioyO meST3f7d29ujmWULqYiomc8+LjgI0U0sWvoW86VrwebXbfn6mCiJvYX8kCp97mUk 5O6ioBrIBGrfWrJJAVN9DZvohJ8Q78isI/EiO50yQdlhIGuiy8j0CDMZqkEKvrT6 fyx1YGkIKlo9cXui3/IccZjnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqR6WwCU9 LK80MhAj7pf9NDo3NeYwHwYDVR0jBBgwFoAUk+bMnLyUxrTox9mGQYMN5mORud8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1N0ZDLzg4NDU3MkQ0QkRG OTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlVeHJUb3g5bUdRWU1ONW1PUnVk OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvay1iTW5MeVV4clRveDltR1FZTU41bU9SdWQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 N0ZDLzg4NDU3MkQ0QkRGOTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlVeHJU b3g5bUdRWU1ONW1PUnVkOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANY5w9B3z28J+pZxe9bp6+5OSC1VsM03RiKtBELceaJuxMSoUhI1mhhz TnUfCcdobdn5VhsyMhx4wBs4KoCzK2rbDBq00HTGR3fpqzLt3tzqUv8QELm4MUJi QYp4N05dg+jh1OufOACUlztUMz4A5hOE/+WdK9jl7NSpNwFONL0dlhC7MqtTkF+3 +IyFjl1OTIAmMoxbEcU6m4qt0HxM8JPpCNNfyGxgPByilJ34ZDDDNxtFLTrcwGHn Rsp7eRVwe4T/9FEy4RkdUIFGMTyk7nLfJvmHv8EF5oYRUSukC0dJv7pMLMxmqRcx amBBg01aVEj3M2qr5BRW+8d/QnzeK4A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:07 2025 by rpki-client