This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json) Hash identifier: u7+VzVlQ7lq6sxVZhHmFrjUyna5HFBp0trkYAba4QYo= Subject key identifier: 1A:13:BD:D9:DA:7C:DE:8A:D7:E3:28:7E:1E:86:4C:A0:8F:8B:8D:02 Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft Manifest number: 4C Signing time: Tue 23 Dec 2025 06:11:43 +0000 Manifest this update: Tue 23 Dec 2025 06:11:43 +0000 Manifest next update: Tue 30 Dec 2025 06:11:43 +0000 Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: l3y0YSlO2gjB3uzRNtp+qCcuh/4BM9OQ1TUH1A8Tbuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Validity Not Before: Dec 23 06:11:43 2025 GMT Not After : Dec 30 06:11:43 2025 GMT Subject: CN=694a329f-4918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bd:92:77:a5:3f:6c:d4:c6:23:ee:4f:c8:84: f5:3a:33:d9:01:63:31:33:78:35:0a:ab:f0:a1:b3: 43:02:a1:45:14:ed:bf:73:5b:e6:78:ce:89:f6:c2: 40:dd:6d:61:8c:cf:f0:68:0a:06:06:76:34:4e:c0: f8:9b:59:85:20:d9:c5:20:be:51:1c:86:28:5d:b8: 63:17:cf:2c:a1:90:0b:c7:7c:44:1a:4a:d5:5b:da: 2c:d2:d0:51:1a:fe:e9:53:42:97:57:b6:5b:bf:6f: 7a:f6:76:84:a7:0b:9f:06:bb:da:3a:c6:5a:3b:f5: fb:5a:10:e1:ec:f9:f7:38:9a:e7:c4:51:c0:37:76: 8e:1b:66:cd:9b:ae:38:a3:40:28:fe:62:2b:da:77: 9e:af:86:68:c8:84:78:20:a1:59:b2:43:cc:eb:90: 87:15:a2:41:9d:6e:62:99:a1:01:44:4e:91:75:74: 16:0b:06:6b:9f:67:83:22:00:ae:db:e8:40:ea:a3: 7b:0e:a0:d5:ae:53:fa:95:0f:cc:74:c5:c8:29:08: 40:08:c2:5d:7a:46:ea:63:59:7a:da:50:b4:37:22: 0c:2c:42:71:c1:e9:f8:d4:5d:c6:a5:5a:a6:cf:15: 6a:30:90:b9:4b:83:7d:3b:4e:3e:a2:a0:dc:ee:dc: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:BD:D9:DA:7C:DE:8A:D7:E3:28:7E:1E:86:4C:A0:8F:8B:8D:02 X509v3 Authority Key Identifier: keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:4a:06:52:16:09:8f:e9:59:77:38:4c:7b:c0:16:66:ae:12: 40:2f:8d:12:00:5f:e2:bc:0b:4e:35:6c:c1:8b:cf:89:74:0c: 9e:f5:b5:7b:8c:bc:81:a1:2b:bc:f1:6a:a0:84:36:f6:15:67: 4f:78:b2:4c:58:26:bd:cd:ae:13:05:52:c8:71:fe:3c:1d:77: f2:d2:87:45:a6:d2:b7:2a:47:41:67:e3:59:19:b5:51:c1:07: c9:f0:eb:2f:00:13:49:78:0e:58:14:8c:c1:79:9a:94:70:66: b9:7e:8d:e8:85:95:07:2a:51:52:13:49:63:16:db:de:1b:d8: bb:2f:e5:f3:03:78:11:6a:39:2e:84:c5:9c:20:46:4e:5f:57: d1:00:d2:4e:e0:1e:d2:3d:89:a5:96:b0:d0:33:3d:27:1c:3c: f8:c3:df:af:cc:86:8b:c1:d7:b8:0c:4f:6b:4b:3a:3b:82:b7: be:9b:51:2c:d9:d0:6f:36:65:98:80:5c:f5:93:aa:a4:ca:dd: f4:14:77:4a:8f:01:19:3e:c1:ec:11:be:dd:16:b6:e3:e9:62: fd:11:3c:3d:cf:08:83:c4:6e:3d:e5:84:b7:f2:cb:bf:23:89: 36:d3:de:6d:2c:33:80:af:9f:03:bc:76:76:f2:35:be:d6:72: 2c:58:0b:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoOTBDQjdGQTEzNzk2OUM0MzU2QTRDQTUyRjcwNURDQTFB QjIyNUZEMDAeFw0yNTEyMjMwNjExNDNaFw0yNTEyMzAwNjExNDNaMBgxFjAUBgNV BAMMDTY5NGEzMjlmLTQ5MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmvZJ3pT9s1MYj7k/IhPU6M9kBYzEzeDUKq/Chs0MCoUUU7b9zW+Z4zon2wkDd bWGMz/BoCgYGdjROwPibWYUg2cUgvlEchihduGMXzyyhkAvHfEQaStVb2izS0FEa /ulTQpdXtlu/b3r2doSnC58Gu9o6xlo79ftaEOHs+fc4mufEUcA3do4bZs2brjij QCj+Yivad56vhmjIhHggoVmyQ8zrkIcVokGdbmKZoQFETpF1dBYLBmufZ4MiAK7b 6EDqo3sOoNWuU/qVD8x0xcgpCEAIwl16RupjWXraULQ3IgwsQnHB6fjUXcalWqbP FWowkLlLg307Tj6ioNzu3Ed3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGhO92dp8 3orX4yh+HoZMoI+LjQIwHwYDVR0jBBgwFoAUkMt/oTeWnENWpMpS9wXcoasiX9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzQxOUU3RTEyNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVOV3BNcFM5d1hjb2FzaVg5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva010X29UZVduRU5XcE1wUzl3WGNvYXNpWDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzQxOUU3RTEyNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVO V3BNcFM5d1hjb2FzaVg5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAChKBlIWCY/pWXc4THvAFmauEkAvjRIAX+K8C041bMGLz4l0DJ71tXuM vIGhK7zxaqCENvYVZ094skxYJr3NrhMFUshx/jwdd/LSh0Wm0rcqR0Fn41kZtVHB B8nw6y8AE0l4DlgUjMF5mpRwZrl+jeiFlQcqUVITSWMW294b2Lsv5fMDeBFqOS6E xZwgRk5fV9EA0k7gHtI9iaWWsNAzPSccPPjD36/MhovB17gMT2tLOjuCt76bUSzZ 0G82ZZiAXPWTqqTK3fQUd0qPARk+wewRvt0WtuPpYv0RPD3PCIPEbj3lhLfyy78j iTbT3m0sM4CvnwO8dnbyNb7WcixYC0I= -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:34 2025 by rpki-client