This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: 384W0ggi9se6PBHukk+n9qFXJoos2ny/ypkWn+xdTm4= Subject key identifier: A9:54:68:52:98:50:64:B0:F0:1A:B4:6B:B6:38:BA:86:F8:47:6E:9E Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 08F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 08D3 Signing time: Mon 22 Dec 2025 19:48:18 +0000 Manifest this update: Mon 22 Dec 2025 19:48:18 +0000 Manifest next update: Mon 29 Dec 2025 19:48:18 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: C/hJ2TO6O5JICpcbv7CYII1P4UC36Dhe0Ji9Hpn/Xjg=) 2: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: /rsO1xFmt4Wd2M5OBk3RGt2QvbZOZFnfqTaQeAfy5hE=) 3: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: tqRni/vRCybcm/Qe5j/RJ1ji818pRaDVNQ0/GTu1HOQ=) 4: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: mTee11vC2WHUjxpYpzX5Cx2s5T+zTjrHiz6j8S4XOXs=) 5: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: Ug8T2jAnxBEFXcI9OyfxIdrB1/QKIOy0uEZRs/AiI9w=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RJDI3i7hM1nBIPS/73ED0LFQix8Jwqczz+z+Slz7wW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Dec 22 19:48:18 2025 GMT Not After : Dec 29 19:48:18 2025 GMT Subject: CN=6949a082-8d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:1e:5e:92:22:15:13:f3:2a:f4:45:f1:77: 01:29:b1:db:8e:fa:64:35:47:ae:85:bc:ce:e4:52: 35:b7:71:55:c1:3d:8b:e0:22:0a:ce:f1:e6:94:d7: 16:48:b2:c1:91:08:d6:3d:fb:c9:09:c5:33:6e:80: 1b:73:a5:10:32:02:49:b8:15:b8:71:e6:62:82:10: 20:ab:ec:bc:ca:df:a0:22:62:b6:9e:4d:b8:90:41: 8b:cb:62:8b:23:5d:b8:63:27:53:6f:08:b1:ed:fc: 29:3f:d3:d1:05:26:87:e9:e4:7c:97:78:b8:e2:b7: 46:52:ab:25:53:f3:b3:d0:9b:8f:7a:08:b0:5f:a9: 27:51:44:8b:0d:13:53:9a:53:02:91:35:09:b3:a8: cb:a1:b2:4b:e9:b9:6d:39:56:82:6a:1e:31:04:3f: cf:0b:5c:bb:c0:78:18:69:f1:92:a1:f0:bd:db:ba: 4c:b3:82:03:1a:73:8b:a9:ec:15:88:ec:b8:c3:32: f4:47:8b:48:7a:97:a4:60:c2:f2:b6:da:c1:01:fb: 92:26:31:47:85:26:d6:78:7a:17:54:7d:c2:92:62: 6b:50:b6:b5:9b:ce:1a:85:a4:bd:f4:67:80:ca:96: cf:f7:9f:16:b5:22:40:8a:3e:79:36:d5:5e:4a:5e: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:54:68:52:98:50:64:B0:F0:1A:B4:6B:B6:38:BA:86:F8:47:6E:9E X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:3d:4d:61:00:85:6f:21:5d:22:3a:c4:56:31:95:b9:d2:05: cc:33:46:17:45:26:b1:78:c4:6d:0c:3c:c6:c0:88:06:42:02: eb:34:83:6b:58:92:f3:b8:6b:7a:82:c7:a2:77:82:07:59:d7: f1:8b:db:7e:57:e1:84:19:43:cc:64:14:f5:69:61:d0:63:e8: b6:16:57:f7:59:66:44:87:5d:69:8b:62:99:08:d5:af:0a:7b: 2e:49:0a:3b:59:2b:5c:1c:65:4b:d2:69:d2:8a:6c:3e:7e:1f: 9e:26:01:d7:ce:1f:9f:35:3c:d9:9b:b9:13:65:6e:54:b2:f8: b8:a3:61:31:a7:66:e5:5a:64:94:7e:7a:38:cb:99:f3:78:76: c5:d8:a1:9d:f5:c0:8d:a2:93:24:cd:1f:95:af:dc:08:23:48: 8d:18:92:3e:70:33:2c:22:34:66:d0:97:28:d0:e2:00:f3:b4: 08:82:4b:4b:f1:f3:86:f0:d1:ee:0a:46:60:b3:25:90:68:45: 4d:95:31:1f:f4:78:67:9b:ca:87:85:5f:10:e3:0b:b8:70:de: 4f:01:81:07:bf:7c:50:a9:7d:02:2c:e5:dc:81:83:df:32:b3: 74:6d:41:94:6a:d1:13:68:cc:26:f0:e8:99:5b:02:92:df:db: 70:76:20:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUxMjIyMTk0ODE4WhcNMjUxMjI5MTk0ODE4WjAYMRYwFAYD VQQDDA02OTQ5YTA4Mi04ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZ4eXpIiFRPzKvRF8XcBKbHbjvpkNUeuhbzO5FI1t3FVwT2L4CIKzvHmlNcW SLLBkQjWPfvJCcUzboAbc6UQMgJJuBW4ceZighAgq+y8yt+gImK2nk24kEGLy2KL I124YydTbwix7fwpP9PRBSaH6eR8l3i44rdGUqslU/Oz0JuPegiwX6knUUSLDRNT mlMCkTUJs6jLobJL6bltOVaCah4xBD/PC1y7wHgYafGSofC927pMs4IDGnOLqewV iOy4wzL0R4tIepekYMLyttrBAfuSJjFHhSbWeHoXVH3CkmJrULa1m84ahaS99GeA ypbP958WtSJAij55NtVeSl4AhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlUaFKY UGSw8Bq0a7Y4uob4R26eMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQPU1hAIVvIV0iOsRWMZW50gXMM0YXRSaxeMRtDDzGwIgGQgLrNINr WJLzuGt6gseid4IHWdfxi9t+V+GEGUPMZBT1aWHQY+i2Flf3WWZEh11pi2KZCNWv CnsuSQo7WStcHGVL0mnSimw+fh+eJgHXzh+fNTzZm7kTZW5Usvi4o2Exp2blWmSU fno4y5nzeHbF2KGd9cCNopMkzR+Vr9wII0iNGJI+cDMsIjRm0Jco0OIA87QIgktL 8fOG8NHuCkZgsyWQaEVNlTEf9Hhnm8qHhV8Q4wu4cN5PAYEHv3xQqX0CLOXcgYPf MrN0bUGUatETaMwm8OiZWwKS39twdiDv -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:08 2025 by rpki-client