This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: gAdJ0vw/8BzXjt7d9rdPsZS8FL2/STg9wIlkjo5Y8+U= Subject key identifier: DA:30:28:EB:86:38:9F:DD:2C:8C:75:7E:F5:B4:46:3F:7F:67:21:6B Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 0244 Signing time: Tue 23 Dec 2025 00:48:34 +0000 Manifest this update: Tue 23 Dec 2025 00:48:34 +0000 Manifest next update: Tue 30 Dec 2025 00:48:34 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: Qcq0UNKA7Zhlkoi2xOhaWhGO+kcPGCrRyAkIwSNTw1s=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: hbdkOUT0eBQ98Cc0oj/9P37h6+6Kubs6FMec8+3wPTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Dec 23 00:48:34 2025 GMT Not After : Dec 30 00:48:34 2025 GMT Subject: CN=6949e6e2-be85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:61:55:12:2f:1e:8c:fb:56:a3:ee:cb:7c: 46:23:b3:a0:33:51:8a:9b:1e:ca:c9:d7:ff:27:27: 63:6e:59:9d:e9:2c:a0:ee:76:9e:f0:be:f5:2f:fe: 5a:05:b6:89:86:30:21:75:b6:0d:d7:47:11:03:70: 50:c3:f2:9d:4e:58:bb:2c:cf:cf:78:51:29:81:0a: 33:4c:f8:37:89:3b:66:02:a1:a4:cb:8e:8a:e0:8d: 8e:94:6f:f1:7e:4c:dd:f4:d9:1c:f9:bf:4e:86:8c: 66:27:07:b5:d1:ab:32:bb:09:cb:4c:d9:ce:26:6c: 74:46:fa:45:46:d7:1a:30:eb:41:7d:aa:15:34:31: f0:bb:a6:00:f1:e6:a9:e1:a4:36:2f:bc:2e:30:bd: 27:80:e7:be:61:51:74:f6:3c:75:d3:18:ae:ec:26: c5:00:ea:9c:e2:8b:0d:3b:94:8d:ca:68:cd:99:fb: d2:44:81:44:ae:37:b5:16:cf:2f:07:b8:db:e1:6a: 53:f6:0f:99:70:f7:32:ff:b0:c7:a7:70:94:92:44: 9d:17:3a:4e:f0:a9:52:92:ba:60:cd:b6:f1:f6:ab: c8:ff:01:e7:90:75:2f:5c:bf:00:38:a2:de:2b:f1: 4d:ca:0b:93:0a:48:39:2c:6c:9d:8b:df:7a:a0:0d: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:30:28:EB:86:38:9F:DD:2C:8C:75:7E:F5:B4:46:3F:7F:67:21:6B X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:60:8e:c0:a6:57:08:b5:fe:3d:a4:e3:4b:8f:8f:14:77:7e: 21:a1:dd:74:76:35:f9:a7:74:37:09:4d:d5:65:b4:e2:55:6b: a9:5a:91:a9:8b:d4:f1:a2:3f:07:b7:1a:06:c4:b6:77:3d:8f: 2e:7b:ef:b8:c0:b7:30:3f:03:dc:4c:b9:cb:51:9e:8a:6a:60: 0a:9b:6a:e8:33:7d:9a:af:fd:c4:df:12:2e:6e:82:e9:ab:47: 65:94:25:e0:63:5b:6e:86:4f:bc:01:8c:1d:1d:f4:e1:17:c9: 45:e7:1a:f1:ea:a9:5a:d0:87:6e:cd:64:4b:27:84:65:e2:b5: 36:b3:ab:1f:b9:90:38:7a:b5:e1:12:49:79:ab:b7:84:f6:9a: ed:4e:56:f7:9d:9e:79:d3:f2:09:ca:05:8e:5a:7c:9b:b4:a4: 1f:1c:dd:53:a9:26:c8:5a:b1:84:5a:50:70:2f:0d:7a:49:9d: 32:16:b9:41:66:41:96:b3:d9:fa:01:d1:e9:80:14:0d:1b:fa: 70:49:f4:ff:99:b0:8e:78:52:54:b3:41:8b:3d:9e:3f:b0:d2: d2:d0:45:5f:3e:69:98:18:62:52:9c:df:d3:15:d5:96:56:ee: 91:c8:22:92:4b:e2:b7:71:40:50:58:ca:8f:a8:81:d3:35:0f: 65:b6:13:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjUxMjIzMDA0ODM0WhcNMjUxMjMwMDA0ODM0WjAYMRYwFAYD VQQDDA02OTQ5ZTZlMi1iZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+xhVRIvHoz7VqPuy3xGI7OgM1GKmx7Kydf/Jydjblmd6Syg7nae8L71L/5a BbaJhjAhdbYN10cRA3BQw/KdTli7LM/PeFEpgQozTPg3iTtmAqGky46K4I2OlG/x fkzd9Nkc+b9OhoxmJwe10asyuwnLTNnOJmx0RvpFRtcaMOtBfaoVNDHwu6YA8eap 4aQ2L7wuML0ngOe+YVF09jx10xiu7CbFAOqc4osNO5SNymjNmfvSRIFErje1Fs8v B7jb4WpT9g+ZcPcy/7DHp3CUkkSdFzpO8KlSkrpgzbbx9qvI/wHnkHUvXL8AOKLe K/FNyguTCkg5LGydi996oA0qSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNowKOuG OJ/dLIx1fvW0Rj9/ZyFrMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9YI7AplcItf49pONLj48Ud34hod10djX5p3Q3CU3VZbTiVWupWpGp i9Txoj8HtxoGxLZ3PY8ue++4wLcwPwPcTLnLUZ6KamAKm2roM32ar/3E3xIuboLp q0dllCXgY1tuhk+8AYwdHfThF8lF5xrx6qla0IduzWRLJ4Rl4rU2s6sfuZA4erXh Ekl5q7eE9prtTlb3nZ550/IJygWOWnybtKQfHN1TqSbIWrGEWlBwLw16SZ0yFrlB ZkGWs9n6AdHpgBQNG/pwSfT/mbCOeFJUs0GLPZ4/sNLS0EVfPmmYGGJSnN/TFdWW Vu6RyCKSS+K3cUBQWMqPqIHTNQ9lthMi -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:08 2025 by rpki-client