This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: lwNk/PBvUoxmyxjr6YJqg23wMoQ1Q57J9rN2kxZsgx4= Subject key identifier: 0E:98:C7:89:57:A7:DD:68:30:AB:94:B7:B0:60:C9:73:31:B6:41:3F Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: 93 Signing time: Sun 07 Dec 2025 04:38:04 +0000 Manifest this update: Sun 07 Dec 2025 04:38:04 +0000 Manifest next update: Sun 14 Dec 2025 04:38:04 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: 3d41NhFHiQJchrGTNOKlSWFQ2e4DhtiNgwENND7fDuM=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: Dec 7 04:38:04 2025 GMT Not After : Dec 14 04:38:04 2025 GMT Subject: CN=693504ac-ce1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c7:6e:a3:e6:04:54:59:82:41:74:b8:0c:b7: 00:69:92:05:dd:2e:6f:16:7d:34:d7:9b:c2:08:dd: f4:43:36:8e:fb:ae:22:67:ef:07:93:25:66:dc:5a: 8e:dd:4e:21:e8:73:b8:d3:0a:fa:cb:79:c5:fd:ef: 4e:53:1f:e7:f1:89:17:21:7d:e4:b9:39:77:66:0e: cb:0c:f9:ff:6b:02:e1:7b:bc:7d:d2:a3:f6:02:b7: 70:18:6c:65:66:16:f8:55:a5:d6:36:2c:e6:b1:33: 02:e2:e9:49:91:89:82:a6:22:92:f2:93:24:5d:ff: 4b:c2:d2:30:a9:45:57:b7:41:e5:cc:1b:55:6e:b6: c3:a8:07:91:61:c5:aa:95:88:92:1e:af:3c:aa:7a: c8:7a:f2:ef:89:e9:62:ed:52:5c:5a:0d:b1:e5:80: 83:7a:b3:11:12:1e:67:bc:c4:c6:f7:ad:83:01:d0: bd:b7:52:21:be:58:b0:ba:97:20:0b:f4:29:c4:11: e0:fb:7c:4f:95:12:d6:69:85:48:d4:75:03:37:43: 6b:73:56:9c:6b:5a:88:4d:87:0c:10:09:49:e7:51: dd:fe:7e:25:1b:ec:20:10:6c:01:5b:96:4f:6d:74: ff:68:65:04:2b:2c:f8:2f:9b:0f:5a:ea:f4:17:7f: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:98:C7:89:57:A7:DD:68:30:AB:94:B7:B0:60:C9:73:31:B6:41:3F X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d7:7f:bf:b8:30:aa:34:a9:f0:23:fb:b5:94:ab:f2:ad:f7: 6d:b1:c3:44:f6:c0:5c:08:4b:1a:9d:4a:da:78:ed:ee:a7:92: 3d:95:15:de:c3:89:3d:ea:c9:37:64:a4:c2:e3:5d:a9:23:a8: d7:28:77:97:a1:5b:a6:b1:40:fe:ab:d4:e1:b4:18:a4:ab:75: 01:21:3a:83:e0:aa:5b:ad:57:6a:6b:09:b6:23:b2:c5:36:22: a9:95:41:5b:fa:f5:ed:4a:6a:ef:89:bf:81:1b:a3:d4:c5:7f: d6:52:ea:fb:78:3c:d3:f7:25:68:3c:5f:24:5b:a1:48:b9:bf: e9:3e:03:7a:19:c2:e9:5b:0a:c5:a2:8b:60:24:2e:ac:df:69: 4e:92:c3:8d:b9:f1:b6:12:3b:ad:e4:81:a6:a6:38:a6:7b:d9: 6f:07:50:e4:a7:44:68:7f:78:12:05:85:15:39:e7:84:38:4c: 66:b9:60:42:81:67:c2:2b:53:55:8f:48:c9:b1:4e:44:2d:3d: e2:b4:8a:07:0c:10:4b:1a:3d:70:9e:f1:73:61:90:99:52:78: e0:a5:0f:d0:d1:36:d3:8e:c1:57:e3:c4:94:8c:b9:78:36:f0: 4b:7e:4e:ed:c5:c2:c6:f8:67:ab:1c:da:75:d0:da:de:47:4d: d8:d7:b7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzQUExMTAvBgNVBAUTKDBCNDJBODQ0MEYxQThFNjdGREU1NUU0MzY1QzdFM0ZC OUM2Q0ZFQzMwHhcNMjUxMjA3MDQzODA0WhcNMjUxMjE0MDQzODA0WjAYMRYwFAYD VQQDEw02OTM1MDRhYy1jZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28duo+YEVFmCQXS4DLcAaZIF3S5vFn0015vCCN30QzaO+64iZ+8HkyVm3FqO 3U4h6HO40wr6y3nF/e9OUx/n8YkXIX3kuTl3Zg7LDPn/awLhe7x90qP2ArdwGGxl Zhb4VaXWNizmsTMC4ulJkYmCpiKS8pMkXf9LwtIwqUVXt0HlzBtVbrbDqAeRYcWq lYiSHq88qnrIevLvieli7VJcWg2x5YCDerMREh5nvMTG962DAdC9t1Ihvliwupcg C/QpxBHg+3xPlRLWaYVI1HUDN0Nrc1aca1qITYcMEAlJ51Hd/n4lG+wgEGwBW5ZP bXT/aGUEKyz4L5sPWur0F39yvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6Yx4lX p91oMKuUt7BgyXMxtkE/MB8GA1UdIwQYMBaAFAtCqEQPGo5n/eVeQ2XH4/ucbP7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzNBQS9EQzBGM0VEMkY1 NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWptZjk1VjVEWmNmai01eHNf c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzNBQS9EQzBGM0VEMkY1NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWpt Zjk1VjVEWmNmai01eHNfc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW13+/uDCqNKnwI/u1lKvyrfdtscNE9sBcCEsanUraeO3up5I9lRXe w4k96sk3ZKTC412pI6jXKHeXoVumsUD+q9ThtBikq3UBITqD4KpbrVdqawm2I7LF NiKplUFb+vXtSmrvib+BG6PUxX/WUur7eDzT9yVoPF8kW6FIub/pPgN6GcLpWwrF ootgJC6s32lOksONufG2Ejut5IGmpjime9lvB1Dkp0Rof3gSBYUVOeeEOExmuWBC gWfCK1NVj0jJsU5ELT3itIoHDBBLGj1wnvFzYZCZUnjgpQ/Q0TbTjsFX48SUjLl4 NvBLfk7txcLG+GerHNp10NreR03Y17dp -----END CERTIFICATE-----Generated at Mon Dec 8 06:19:25 2025 by rpki-client