This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: 4yS/1O7GRdjjclq7lwGoRPeMZzHQLXda226ohblYzEE= Subject key identifier: 68:EC:AC:6F:D3:96:C7:10:1F:4D:36:F2:53:68:9F:3A:70:71:4A:91 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: 60 Signing time: Tue 23 Dec 2025 05:58:36 +0000 Manifest this update: Tue 23 Dec 2025 05:58:35 +0000 Manifest next update: Tue 30 Dec 2025 05:58:35 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: 9pEVg4yYljn6gQ96m0b/psFL0wfhjK/3zZdqsXp6RA4=) 2: EAAC1A669E5C11F0B2B86856C4F9AE02.roa (hash: 3ivuXSavI1grPWsZeIczoxpu8ztBxvr+RSbjIfz05CY=) 3: E9ACBC4C9E5C11F0B2B86856C4F9AE02.roa (hash: 9HHR5FNxgt2P/Pdw8ubx9aLKafeL5xLqLydwvJefiRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Dec 23 05:58:35 2025 GMT Not After : Dec 30 05:58:35 2025 GMT Subject: CN=694a2f8b-6a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:01:a3:b6:2a:64:a8:42:93:a4:81:f2:4c: 33:c8:bb:3d:cb:71:74:42:f5:25:58:e0:ec:ac:2a: 78:b0:2f:b2:a8:f5:a6:2a:f0:a3:e0:64:cc:1b:1a: c2:e9:0e:96:0e:a5:4e:25:f6:bf:0c:f1:7b:47:ad: 60:4d:0e:fc:8c:39:95:97:53:2c:00:d2:2f:81:5d: 79:f8:e5:cc:d5:6c:9f:08:c9:6d:9e:0e:83:0c:4d: 16:c7:fc:ee:4f:c4:45:fe:4e:a6:f7:47:56:2f:a2: 3c:e3:f7:ab:c4:fe:d5:d6:a9:40:74:66:6e:3d:59: 00:1e:38:7d:64:d3:ee:c9:24:d1:81:db:35:62:fb: ab:94:a4:d4:77:dc:03:1a:48:e0:02:72:5e:77:47: 29:3f:b2:bd:da:0e:75:4d:82:2e:2e:47:28:ab:17: 00:fe:59:b7:81:a1:a9:bc:18:d8:61:cc:cd:4f:c4: 6b:e0:76:29:97:ff:e7:11:fd:30:83:b5:91:9e:43: e0:a0:1c:f7:ac:8b:1f:97:13:b7:d1:67:ea:9a:40: 93:4b:f8:1f:8c:13:ed:21:c7:70:70:9d:74:e0:5d: b3:1f:c7:1b:7a:5a:46:da:93:7a:39:16:26:03:c8: 8e:83:46:97:be:e8:9f:15:6d:1b:41:12:72:5b:1a: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:AC:6F:D3:96:C7:10:1F:4D:36:F2:53:68:9F:3A:70:71:4A:91 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f4:29:1e:42:6d:38:2f:ad:4f:eb:21:1f:44:e4:a1:63:c1: 0b:d9:ec:ba:94:c7:15:3b:58:27:d4:2b:11:43:14:12:7a:2f: 2a:d5:24:8d:16:62:75:3a:42:f8:14:90:53:fe:0d:32:ba:8c: 0e:ab:4e:5b:0a:db:08:d5:4c:06:04:99:af:9d:cf:e3:bb:ec: e6:6c:59:2a:13:eb:d1:b1:9b:a5:66:70:31:e8:15:ae:41:66: f2:69:af:a4:c7:bc:d8:e8:26:30:c7:77:d7:9e:dc:ce:2e:0c: 87:01:96:6f:9d:a9:69:05:14:ac:2d:ad:83:7f:88:3d:7c:a5: b4:98:50:f4:73:8c:f8:d4:71:3b:e3:0b:ea:5d:84:71:b7:6f: 22:d3:82:b4:c3:77:85:b9:5f:d0:77:c0:df:f6:ce:bf:3e:c1: e5:c3:00:45:1b:99:32:e6:ad:a6:ee:0f:20:34:40:b0:62:8e: d6:c3:f8:9f:5f:ff:4e:58:88:5f:9c:4f:d0:e6:aa:c8:53:60: 7c:39:ac:56:25:b8:a6:0c:c1:5a:08:e7:4a:de:28:ce:5e:b0: ec:40:05:97:4a:62:62:ca:73:cc:9d:87:3e:23:43:c4:c9:aa: b3:93:db:17:af:fc:b4:27:21:ea:b5:8d:5a:5b:99:5d:01:ae: 23:3f:95:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTEyMjMwNTU4MzVaFw0yNTEyMzAwNTU4MzVaMBgxFjAUBgNV BAMMDTY5NGEyZjhiLTZhNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCMwGjtipkqEKTpIHyTDPIuz3LcXRC9SVY4OysKniwL7Ko9aYq8KPgZMwbGsLp DpYOpU4l9r8M8XtHrWBNDvyMOZWXUywA0i+BXXn45czVbJ8IyW2eDoMMTRbH/O5P xEX+Tqb3R1Yvojzj96vE/tXWqUB0Zm49WQAeOH1k0+7JJNGB2zVi+6uUpNR33AMa SOACcl53Ryk/sr3aDnVNgi4uRyirFwD+WbeBoam8GNhhzM1PxGvgdimX/+cR/TCD tZGeQ+CgHPesix+XE7fRZ+qaQJNL+B+ME+0hx3BwnXTgXbMfxxt6Wkbak3o5FiYD yI6DRpe+6J8VbRtBEnJbGk9FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaOysb9OW xxAfTTbyU2ifOnBxSpEwHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RTlGLzIzMDI3MTI0NTE3MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEt Z0FOUTJocHJnOFhicTZUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAID0KR5CbTgvrU/rIR9E5KFjwQvZ7LqUxxU7WCfUKxFDFBJ6LyrVJI0W YnU6QvgUkFP+DTK6jA6rTlsK2wjVTAYEma+dz+O77OZsWSoT69Gxm6VmcDHoFa5B ZvJpr6THvNjoJjDHd9ee3M4uDIcBlm+dqWkFFKwtrYN/iD18pbSYUPRzjPjUcTvj C+pdhHG3byLTgrTDd4W5X9B3wN/2zr8+weXDAEUbmTLmrabuDyA0QLBijtbD+J9f /05YiF+cT9DmqshTYHw5rFYluKYMwVoI50reKM5esOxABZdKYmLKc8ydhz4jQ8TJ qrOT2xev/LQnIeq1jVpbmV0BriM/lSo= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:39 2025 by rpki-client