This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft File: kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json) Hash identifier: 2Bm0NrgFCr7MTLry6xGiNPaLqum/mC+7T5wH8niwatU= Subject key identifier: E9:DB:59:34:A0:04:02:E8:7A:27:D2:F8:A8:3D:0C:45:83:FE:02:82 Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 Certificate issuer: /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Certificate serial: 1050 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft Manifest number: 1044 Signing time: Mon 22 Dec 2025 17:06:10 +0000 Manifest this update: Mon 22 Dec 2025 17:06:09 +0000 Manifest next update: Mon 29 Dec 2025 17:06:09 +0000 Files and hashes: 1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: Q6dPllGbs8HR4UYYkDpEPaqfUPqBnZQTx0hhZqz5IKw=) 2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: h2Z0WowEDdcT+vihpwqc3ZmmFIzfzbEzcf903yWEHbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4176 (0x1050) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Validity Not Before: Dec 22 17:06:09 2025 GMT Not After : Dec 29 17:06:09 2025 GMT Subject: CN=69497a82-aa1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:0b:8f:db:3f:27:1d:e4:8a:28:f8:55:b6: 45:36:7b:c1:9f:64:dc:a6:22:b3:26:38:1f:02:ae: 85:21:ca:c7:2c:73:a4:21:ae:79:65:8f:54:78:4e: 73:b9:32:f1:23:f6:53:c8:6b:10:c7:34:35:cc:e0: fe:cd:d2:1e:d4:1c:ff:96:6b:77:d3:c4:03:cd:4a: 02:fe:f0:cf:8e:f2:b8:f6:86:a7:02:af:f5:5b:02: 2f:0e:68:8e:3b:09:59:b1:c2:b9:05:b1:44:b1:e7: a4:f4:c2:a8:46:c3:74:2f:3e:28:7a:2c:fb:73:56: 45:f4:a0:8b:74:dd:5b:50:30:36:92:e7:17:d1:d3: 27:4b:9d:b0:9c:93:aa:a4:ce:db:a9:43:d0:e2:97: b0:3c:a6:3d:63:ce:48:63:62:ab:45:96:92:64:cc: ff:14:c9:68:6f:fc:96:bd:85:af:87:5b:99:88:cf: 7a:f1:2b:26:74:61:41:d4:ed:d3:ee:2a:89:c5:a8: 52:45:7b:48:bd:a0:36:0c:7a:7e:69:d4:6f:db:8b: ce:83:36:ec:11:3b:50:d4:bb:9c:2a:69:a7:2e:3a: 41:ed:9e:c0:66:42:bb:8c:12:75:ac:78:3f:55:e0: b0:b8:4e:e0:a1:51:92:cf:2f:ba:be:8d:a9:87:51: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DB:59:34:A0:04:02:E8:7A:27:D2:F8:A8:3D:0C:45:83:FE:02:82 X509v3 Authority Key Identifier: keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a4:be:c0:00:11:44:1a:d5:7e:87:f5:7a:b6:2c:1f:a9:65: 8b:32:ed:f1:9f:f1:d9:66:f6:16:f5:3d:33:b1:9f:55:c4:ee: 59:08:b9:2e:8a:17:48:38:25:a2:d7:89:dd:fa:e6:c2:b0:1d: 19:8f:61:41:ef:4a:a5:ea:44:bf:f4:d4:82:76:94:19:0d:12: dd:96:01:f5:21:c6:c7:a4:27:85:bf:cd:b7:35:d5:06:6b:05: 59:31:35:7f:a4:0c:ba:b9:eb:7e:a4:f1:33:ec:4b:53:6b:6e: b5:59:08:1b:18:09:71:02:07:88:68:e3:da:66:8c:ce:61:d2: c6:7a:6b:6d:35:fe:bb:ea:06:d1:90:87:eb:74:2f:5e:67:cc: dc:41:ba:12:3e:97:2f:cb:07:91:8f:c6:1e:02:06:e2:6c:57: 3e:36:0b:6a:67:10:30:9c:ec:c8:df:35:10:b4:0f:03:67:43: 5e:e2:f8:0a:d6:a1:37:d8:60:b8:c1:42:83:ec:5e:09:8f:08: e4:d4:3f:61:44:76:b1:fa:81:52:53:7b:01:85:e5:97:17:81: 72:ca:b6:1c:4c:06:e1:a0:52:35:dc:f0:4a:66:0c:43:09:8b: e2:71:3e:98:20:76:f8:be:0e:6b:19:f3:d0:76:a1:f2:e5:62: f0:e2:8f:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QkMxMTAvBgNVBAUTKDkxMzdBODlGNDYxMERBRTJDODhDNjk0REM5NTJDRTU4 MzU1MjcwNzkwHhcNMjUxMjIyMTcwNjA5WhcNMjUxMjI5MTcwNjA5WjAYMRYwFAYD VQQDDA02OTQ5N2E4Mi1hYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA410Lj9s/Jx3kiij4VbZFNnvBn2TcpiKzJjgfAq6FIcrHLHOkIa55ZY9UeE5z uTLxI/ZTyGsQxzQ1zOD+zdIe1Bz/lmt308QDzUoC/vDPjvK49oanAq/1WwIvDmiO OwlZscK5BbFEseek9MKoRsN0Lz4oeiz7c1ZF9KCLdN1bUDA2kucX0dMnS52wnJOq pM7bqUPQ4pewPKY9Y85IY2KrRZaSZMz/FMlob/yWvYWvh1uZiM968SsmdGFB1O3T 7iqJxahSRXtIvaA2DHp+adRv24vOgzbsETtQ1LucKmmnLjpB7Z7AZkK7jBJ1rHg/ VeCwuE7goVGSzy+6vo2ph1EF1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnbWTSg BALoeifS+Kg9DEWD/gKCMB8GA1UdIwQYMBaAFJE3qJ9GENriyIxpTclSzlg1UnB5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCQy80RTEzRjQwQzUy MDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1TElqR2xOeVZMT1dEVlNj SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUZW9uMFlRMnVMSWpHbE55VkxPV0RWU2NIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCQy80RTEzRjQwQzUyMDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1 TElqR2xOeVZMT1dEVlNjSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBspL7AABFEGtV+h/V6tiwfqWWLMu3xn/HZZvYW9T0zsZ9VxO5ZCLku ihdIOCWi14nd+ubCsB0Zj2FB70ql6kS/9NSCdpQZDRLdlgH1IcbHpCeFv823NdUG awVZMTV/pAy6uet+pPEz7EtTa261WQgbGAlxAgeIaOPaZozOYdLGemttNf676gbR kIfrdC9eZ8zcQboSPpcvyweRj8YeAgbibFc+NgtqZxAwnOzI3zUQtA8DZ0Ne4vgK 1qE32GC4wUKD7F4Jjwjk1D9hRHax+oFSU3sBheWXF4FyyrYcTAbhoFI13PBKZgxD CYvicT6YIHb4vg5rGfPQdqHy5WLw4o+G -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:21 2025 by rpki-client