This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json) Hash identifier: 5dHZQkTJOgImCkLqGpRyRx8Xd90zyJr9NynyuRCsAx4= Subject key identifier: C5:E8:53:7F:DA:97:1A:C3:24:01:91:52:44:AE:1A:A8:95:1E:82:1A Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft Manifest number: 5D Signing time: Tue 23 Dec 2025 05:58:59 +0000 Manifest this update: Tue 23 Dec 2025 05:58:59 +0000 Manifest next update: Tue 30 Dec 2025 05:58:59 +0000 Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: pKb9UsDnqpg1QI7x8E/fRQdv5ViUdZcDbOQolHJ6gsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Validity Not Before: Dec 23 05:58:59 2025 GMT Not After : Dec 30 05:58:59 2025 GMT Subject: CN=694a2fa3-5ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:68:e5:e8:4f:3d:a4:6d:b2:82:44:eb:47: bf:53:50:6f:a3:87:22:55:52:e6:7a:ed:a1:b9:fd: e0:59:f9:0e:cf:af:c6:f2:61:54:b7:7d:7f:b6:2a: d9:6e:d8:f5:af:6a:a3:d5:29:66:a6:05:35:c4:f1: db:63:ad:07:a5:f5:f6:74:1a:17:e2:51:d1:2c:8a: 95:9a:fa:1e:08:bf:b4:f0:f1:cd:f2:ab:45:b2:93: 4e:ba:b8:59:a7:9f:aa:be:62:4d:e7:56:5b:48:9f: 6e:10:c5:00:b0:00:e4:01:6d:53:41:48:94:93:36: 81:65:83:04:aa:54:1b:94:cf:12:0d:e5:a4:db:36: 2a:74:fa:26:38:54:82:b1:25:ee:ed:6d:21:82:97: 9c:bb:3a:26:ef:8a:56:f5:76:b2:1e:a7:28:ed:09: 5c:d0:1c:62:72:f5:cf:70:52:81:dd:9b:78:fc:d6: 77:b4:cb:4d:55:40:bf:be:27:d7:e6:c4:46:3a:e3: ca:89:31:45:97:ec:6e:47:72:23:2d:d8:65:6e:50: 69:05:09:aa:ab:2a:78:1e:6b:88:f1:16:19:98:43: e2:0f:46:6f:52:4b:86:2d:d2:b2:95:38:b1:79:e9: 03:6e:81:30:b1:2d:ca:6a:54:94:bd:1e:68:18:83: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:53:7F:DA:97:1A:C3:24:01:91:52:44:AE:1A:A8:95:1E:82:1A X509v3 Authority Key Identifier: keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fa:35:69:26:6d:4f:fe:d0:25:c5:a5:5c:21:64:ad:fe:68: 80:0e:65:44:57:15:5c:25:49:2d:ac:e7:a0:2f:0a:1f:33:99: 13:c2:cb:0c:4b:fa:0c:7d:15:5b:ce:f5:b0:39:87:94:c0:61: 0a:be:49:92:9f:1c:32:dd:02:9a:2c:61:88:52:b4:64:a3:d5: f3:a2:01:22:65:77:8a:d5:9c:8f:61:f2:fa:97:7e:f7:50:1e: f6:e6:d5:39:0c:e7:2b:61:83:63:d7:4f:f8:9c:c3:f3:67:60: 80:03:55:dc:aa:11:39:54:cc:1b:43:0d:37:01:3e:09:da:d5: 16:c2:e5:51:01:b9:f2:01:c3:86:b9:3b:d3:04:bf:b4:4c:3e: 8a:ed:a5:54:e4:62:32:58:b1:45:d2:0f:1c:2e:c6:45:d7:19: b9:df:ff:f0:e2:c7:fc:af:55:60:a2:97:66:bb:a2:0f:97:3f: da:b9:e8:47:9e:49:eb:ac:86:b5:fd:08:02:fe:97:00:35:20: cb:e1:fe:b6:a9:c1:33:05:7b:e4:99:ba:98:44:8b:4e:ca:94: 33:a8:eb:a4:d6:8a:93:33:85:9a:28:77:46:4a:10:09:15:52: 0a:5d:9c:e7:5b:45:9f:45:0f:56:c1:f2:63:25:e5:7c:a8:73: f8:4b:91:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkZCQzExMC8GA1UEBRMoOTExRDUwNTU4RDlGRjA5MkI5QzczOUVBMTBBNUI1MzNF MkU5RkUzQjAeFw0yNTEyMjMwNTU4NTlaFw0yNTEyMzAwNTU4NTlaMBgxFjAUBgNV BAMMDTY5NGEyZmEzLTVmZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw82jl6E89pG2ygkTrR79TUG+jhyJVUuZ67aG5/eBZ+Q7Pr8byYVS3fX+2Ktlu 2PWvaqPVKWamBTXE8dtjrQel9fZ0GhfiUdEsipWa+h4Iv7Tw8c3yq0Wyk066uFmn n6q+Yk3nVltIn24QxQCwAOQBbVNBSJSTNoFlgwSqVBuUzxIN5aTbNip0+iY4VIKx Je7tbSGCl5y7Oibvilb1drIepyjtCVzQHGJy9c9wUoHdm3j81ne0y01VQL++J9fm xEY648qJMUWX7G5HciMt2GVuUGkFCaqrKngea4jxFhmYQ+IPRm9SS4Yt0rKVOLF5 6QNugTCxLcpqVJS9HmgYgwNzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxehTf9qX GsMkAZFSRK4aqJUeghowHwYDVR0jBBgwFoAUkR1QVY2f8JK5xznqEKW1M+Lp/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRkJDL0E5RTEzMjU2NTJG NzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpLNXh6bnFFS1cxTS1McF9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1IxUVZZMmY4Sks1eHpucUVLVzFNLUxwX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RkJDL0E5RTEzMjU2NTJGNzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpL NXh6bnFFS1cxTS1McF9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADv6NWkmbU/+0CXFpVwhZK3+aIAOZURXFVwlSS2s56AvCh8zmRPCywxL +gx9FVvO9bA5h5TAYQq+SZKfHDLdAposYYhStGSj1fOiASJld4rVnI9h8vqXfvdQ Hvbm1TkM5ythg2PXT/icw/NnYIADVdyqETlUzBtDDTcBPgna1RbC5VEBufIBw4a5 O9MEv7RMPortpVTkYjJYsUXSDxwuxkXXGbnf//Dix/yvVWCil2a7og+XP9q56Eee SeushrX9CAL+lwA1IMvh/rapwTMFe+SZuphEi07KlDOo66TWipMzhZood0ZKEAkV UgpdnOdbRZ9FD1bB8mMl5Xyoc/hLkTo= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:49 2025 by rpki-client