This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: vX+D3R+miWuN4Hi2dapxo2SmutZohXkxBuzLfP/1hPE= Subject key identifier: 11:E3:37:97:C1:B3:37:1F:66:AE:FE:18:C6:59:B3:63:AB:78:C5:51 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 0154 Signing time: Tue 23 Dec 2025 03:09:49 +0000 Manifest this update: Tue 23 Dec 2025 03:09:49 +0000 Manifest next update: Tue 30 Dec 2025 03:09:49 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: StaBW75Oa2OoXC2PX3iAz14Yq0x8sXSMkUygKxyFN6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Dec 23 03:09:49 2025 GMT Not After : Dec 30 03:09:49 2025 GMT Subject: CN=694a07fd-1fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:d1:fb:d6:d5:f3:3e:5b:d7:08:e3:08:82: aa:d5:07:e3:c7:0f:82:f4:a7:45:03:9d:c1:95:65: d8:b8:a4:eb:e7:66:3a:0d:19:e0:1d:ae:86:52:14: 36:27:82:30:c0:7f:f7:43:78:60:76:e4:6b:04:07: 18:3c:39:23:9f:db:80:17:14:1d:48:80:5e:92:0e: 61:10:ea:b7:0c:24:97:b4:48:ed:b6:ce:ec:7c:dd: 00:14:46:ac:dc:bb:b2:b4:84:59:1d:c1:4d:c8:25: 06:ae:d0:6e:b3:f9:3a:b1:b5:ce:d7:2c:03:d2:4e: 25:62:55:f0:75:26:7d:15:3d:42:f4:d1:12:c2:a6: 93:e5:96:98:8c:70:08:12:2a:48:72:0f:f1:30:36: 04:92:5f:02:13:4e:9e:21:0e:e0:f4:56:b7:48:e5: 4e:6e:f4:df:13:49:c2:2b:ef:89:7d:c2:d7:83:94: ba:2f:63:75:92:fe:67:3d:b3:c3:e3:e1:7f:5a:5a: 33:8b:dc:7a:3f:4c:78:55:75:9f:c4:ab:fd:89:61: 91:4a:c2:ca:70:20:4e:27:4c:99:0c:5b:77:ab:65: 14:e3:42:6c:e7:b8:73:71:d1:9d:f3:3a:88:a5:8d: bf:1d:02:52:f6:f3:62:0d:07:ec:3e:4d:14:28:2a: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E3:37:97:C1:B3:37:1F:66:AE:FE:18:C6:59:B3:63:AB:78:C5:51 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:81:84:ba:7e:96:7f:a7:45:6c:fd:bd:81:51:db:77:3c:c7: 52:df:34:0e:94:a2:8f:c2:8b:ae:35:e4:76:bd:86:5e:a3:06: ce:34:92:03:58:d1:6c:96:14:3a:65:57:bb:ed:4c:8c:60:bc: b2:60:9f:eb:e6:39:00:37:a9:b4:4c:74:86:20:f6:e7:c9:f7: 47:87:f8:1b:48:7e:c2:e2:22:36:be:e8:23:12:83:e2:cc:85: a3:6d:a9:c1:00:92:70:ea:a6:c7:42:46:29:23:51:72:35:f5: d9:4d:c2:e8:e2:da:19:b3:b8:92:80:88:3a:34:3b:c7:54:cc: 77:63:0d:00:c9:11:ed:5d:ec:69:6e:82:18:40:a7:20:26:5c: 09:81:b3:1a:8c:e6:a2:76:d3:83:a1:d1:28:50:ca:d2:af:27: 98:73:c4:89:21:c5:2b:08:68:a4:15:0d:09:c7:f8:cc:6b:b1: f2:1a:22:84:58:61:58:b9:ef:bb:da:e7:87:5b:2b:a6:51:98: f7:f0:26:f1:70:7b:b2:ab:09:23:06:c9:97:79:69:1c:8f:28: b8:75:df:76:09:6c:54:30:a7:0b:53:37:b9:bf:b2:27:35:ca: e7:66:00:73:f3:42:86:89:1f:09:f9:6f:34:88:2f:2d:b7:c2: 85:ca:27:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUxMjIzMDMwOTQ5WhcNMjUxMjMwMDMwOTQ5WjAYMRYwFAYD VQQDDA02OTRhMDdmZC0xZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzfR+9bV8z5b1wjjCIKq1Qfjxw+C9KdFA53BlWXYuKTr52Y6DRngHa6GUhQ2 J4IwwH/3Q3hgduRrBAcYPDkjn9uAFxQdSIBekg5hEOq3DCSXtEjtts7sfN0AFEas 3LuytIRZHcFNyCUGrtBus/k6sbXO1ywD0k4lYlXwdSZ9FT1C9NESwqaT5ZaYjHAI EipIcg/xMDYEkl8CE06eIQ7g9Fa3SOVObvTfE0nCK++JfcLXg5S6L2N1kv5nPbPD 4+F/Wlozi9x6P0x4VXWfxKv9iWGRSsLKcCBOJ0yZDFt3q2UU40Js57hzcdGd8zqI pY2/HQJS9vNiDQfsPk0UKCrofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHjN5fB szcfZq7+GMZZs2OreMVRMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgYS6fpZ/p0Vs/b2BUdt3PMdS3zQOlKKPwouuNeR2vYZeowbONJID WNFslhQ6ZVe77UyMYLyyYJ/r5jkAN6m0THSGIPbnyfdHh/gbSH7C4iI2vugjEoPi zIWjbanBAJJw6qbHQkYpI1FyNfXZTcLo4toZs7iSgIg6NDvHVMx3Yw0AyRHtXexp boIYQKcgJlwJgbMajOaidtODodEoUMrSryeYc8SJIcUrCGikFQ0Jx/jMa7HyGiKE WGFYue+72ueHWyumUZj38CbxcHuyqwkjBsmXeWkcjyi4dd92CWxUMKcLUze5v7In NcrnZgBz80KGiR8J+W80iC8tt8KFyifm -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:17 2025 by rpki-client