This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: e2IXWK8q7aT9W8XV7RGmIE2NeiOG4SjMP+ES1RVOreM= Subject key identifier: 0E:38:2F:E9:B4:1B:0A:13:EA:0B:AD:9D:A1:FD:A8:51:F1:A2:8C:FA Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A8C Signing time: Mon 22 Dec 2025 19:01:09 +0000 Manifest this update: Mon 22 Dec 2025 19:01:08 +0000 Manifest next update: Mon 29 Dec 2025 19:01:08 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: AHCztOv/8jzmRohW7bzhH7aPqHf0bx2VRGkNiU/qVoo=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2707 (0xa93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Dec 22 19:01:08 2025 GMT Not After : Dec 29 19:01:08 2025 GMT Subject: CN=69499575-e6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:96:d5:16:bd:e8:9d:8c:5c:98:f5:56:e8: 88:42:bd:3e:d5:15:7b:60:8c:f9:1d:24:48:de:07: ea:2b:a2:d2:cd:10:80:4f:95:66:9e:4b:f5:ef:3b: cb:cb:20:f4:ed:da:87:12:e8:91:32:c9:cb:f3:6c: 35:ce:ba:16:d8:fb:88:32:f5:4a:97:e2:bb:74:4d: 88:44:b4:f7:38:0d:f9:c1:39:95:58:d3:fe:50:e4: 83:ae:2b:bd:61:4b:f9:0c:97:81:49:1e:1f:ec:b9: 3e:cf:5b:0e:26:64:35:e8:91:b7:29:e3:f3:97:23: 23:b7:0e:2e:3e:8b:b3:59:56:73:31:36:2a:48:29: dc:36:47:c0:97:00:4d:6c:9f:4c:9d:35:6b:a0:a3: 75:5f:4b:b8:32:1a:f9:3c:44:56:4d:e3:c0:56:22: d8:67:07:87:56:38:78:7f:f8:72:b1:7f:f3:ad:76: 70:82:d6:1d:2e:96:f2:7c:1a:cb:05:de:75:04:9c: f2:e3:b9:aa:2d:60:f8:3d:ba:9f:d6:20:77:7a:c5: d7:b5:a1:7b:76:4c:f5:cc:0e:3a:e8:39:85:91:50: 18:fa:50:04:33:7c:be:51:8f:72:3e:82:f7:07:ce: ba:8a:51:4e:44:23:e1:db:9b:b1:f7:4b:9d:1c:02: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:38:2F:E9:B4:1B:0A:13:EA:0B:AD:9D:A1:FD:A8:51:F1:A2:8C:FA X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5c:70:07:f3:fa:08:31:4d:63:3f:b5:7a:ff:77:71:a8:68: 6d:d1:09:ef:da:6f:d2:e7:db:d4:a6:56:06:81:95:c7:83:60: b0:ac:7c:33:fc:b0:c6:77:ac:8c:cc:39:92:91:72:28:be:25: d3:0a:7d:13:9c:b6:eb:a9:7f:cd:5d:b0:a6:a0:aa:1e:de:61: de:41:b7:44:33:7e:18:cc:22:58:14:e1:a4:b6:09:29:a0:8c: f9:18:d7:80:b8:76:5d:4c:5b:06:93:72:fb:95:63:75:7d:3e: 40:8a:4f:09:a9:88:a9:ec:cb:d2:2b:b2:07:46:ad:65:e8:dd: 6a:3f:de:dd:24:aa:fc:54:5d:96:4c:dd:27:d9:a4:b3:09:2e: ee:b6:a2:5c:48:d7:31:0e:13:ed:4e:3f:b3:fd:89:43:81:38: 2f:40:2d:eb:0a:0b:4d:d6:ab:94:79:b0:f2:75:06:51:c0:fb: 17:58:51:d3:bb:9b:d6:c7:67:74:fa:69:38:e0:2a:ef:ef:58: 50:8f:95:01:ad:b4:68:ad:05:2d:46:4a:d6:83:82:11:95:bd: a0:dc:0d:68:4b:aa:d7:d0:8e:69:ad:85:63:13:04:a3:f1:f9: a1:e2:a1:59:de:d5:b1:ea:ba:a6:bc:6b:3c:7a:a5:fd:a3:17: ca:0a:37:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUxMjIyMTkwMTA4WhcNMjUxMjI5MTkwMTA4WjAYMRYwFAYD VQQDDA02OTQ5OTU3NS1lNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttmW1Ra96J2MXJj1VuiIQr0+1RV7YIz5HSRI3gfqK6LSzRCAT5Vmnkv17zvL yyD07dqHEuiRMsnL82w1zroW2PuIMvVKl+K7dE2IRLT3OA35wTmVWNP+UOSDriu9 YUv5DJeBSR4f7Lk+z1sOJmQ16JG3KePzlyMjtw4uPouzWVZzMTYqSCncNkfAlwBN bJ9MnTVroKN1X0u4Mhr5PERWTePAViLYZweHVjh4f/hysX/zrXZwgtYdLpbyfBrL Bd51BJzy47mqLWD4Pbqf1iB3esXXtaF7dkz1zA466DmFkVAY+lAEM3y+UY9yPoL3 B866ilFORCPh25ux90udHAIskQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA44L+m0 GwoT6gutnaH9qFHxooz6MB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJXHAH8/oIMU1jP7V6/3dxqGht0Qnv2m/S59vUplYGgZXHg2CwrHwz /LDGd6yMzDmSkXIoviXTCn0TnLbrqX/NXbCmoKoe3mHeQbdEM34YzCJYFOGktgkp oIz5GNeAuHZdTFsGk3L7lWN1fT5Aik8JqYip7MvSK7IHRq1l6N1qP97dJKr8VF2W TN0n2aSzCS7utqJcSNcxDhPtTj+z/YlDgTgvQC3rCgtN1quUebDydQZRwPsXWFHT u5vWx2d0+mk44Crv71hQj5UBrbRorQUtRkrWg4IRlb2g3A1oS6rX0I5prYVjEwSj 8fmh4qFZ3tWx6rqmvGs8eqX9oxfKCjeY -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:36 2025 by rpki-client