This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: MCuOxMfjnsl/Uo3af98m/UC4jzvuruWJQBGMwhk0Sxc= Subject key identifier: B6:66:D0:52:08:43:32:3F:C8:B2:1B:26:1D:69:B5:7E:4E:95:34:84 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 0A Signing time: Wed 03 Dec 2025 06:11:08 +0000 Manifest this update: Wed 03 Dec 2025 06:11:07 +0000 Manifest next update: Wed 10 Dec 2025 06:11:07 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: OVlbFg6TNaNZtQlIokOLYeYkdm77T10+o2CifPZ/mNY=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: uZ9eyof3QzVDzi9BWRf2zBi6dJBoVZqfZeDAKMhvj2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Dec 3 06:11:07 2025 GMT Not After : Dec 10 06:11:07 2025 GMT Subject: CN=692fd47c-1c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d8:35:ce:d6:e6:f3:aa:1e:17:68:58:77:39: cc:27:06:35:f7:e8:90:3f:ec:16:9b:f7:79:08:b8: 2d:1d:40:65:98:47:3c:17:93:e8:d7:10:be:4c:d8: 16:05:39:82:a5:9a:64:5e:e8:8b:82:25:25:fc:22: 68:41:0e:f8:fe:58:fa:d6:b4:07:85:1f:89:06:87: 19:9e:c7:94:b3:21:30:92:f3:0e:0c:61:6f:66:64: e8:b2:0d:98:f1:4c:b5:65:fa:ea:66:8a:41:f3:27: 75:42:37:72:ea:0c:68:83:83:a0:68:dd:e2:db:f6: ad:77:ae:82:dd:99:00:70:df:33:9d:78:76:49:dd: b4:ce:c7:2f:43:af:c0:5c:9f:1a:8b:c1:9f:27:93: 84:bd:eb:7a:02:00:83:9b:69:69:77:1a:58:84:d0: 66:ce:f7:48:20:95:19:2f:6e:dc:04:fd:32:44:38: c6:ba:57:34:f2:38:10:18:68:1b:9b:58:e1:61:f5: ad:57:c9:48:a6:e6:a6:60:3d:ae:de:13:5d:13:0c: dc:b8:27:02:af:be:d2:18:f1:ad:f0:a5:71:e3:2a: f0:db:74:21:99:02:f0:d8:e8:52:b6:04:7d:32:8b: 95:ae:fc:53:ec:5e:82:ea:1a:6c:37:64:8b:57:3c: b3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:D0:52:08:43:32:3F:C8:B2:1B:26:1D:69:B5:7E:4E:95:34:84 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:bd:f1:e8:9c:9e:db:41:24:75:54:0c:23:9c:c7:a2:af:2f: 3c:d2:2a:d3:69:d7:8a:99:47:3b:a0:e5:c1:3e:2f:06:db:53: b2:cd:7f:d1:44:b2:fb:dc:60:89:1f:17:50:5f:d2:5a:a9:8b: e1:38:1d:69:f5:64:f9:7d:89:64:43:99:0a:80:42:da:57:c7: 1b:c8:0e:03:e2:25:f0:82:1d:0b:1e:f5:77:59:fe:0f:ef:5f: 4d:53:37:85:c3:66:c8:6a:37:00:be:87:bc:09:66:b2:56:9c: 39:02:94:8e:73:6e:54:24:c0:23:68:79:12:74:c8:a8:80:45: da:6e:ce:a3:4d:f7:5f:0b:ba:78:d8:48:a5:2a:4e:e9:f8:f7: cd:23:be:4a:03:17:10:7a:ff:1b:f1:0e:62:71:86:01:9d:1a: 2e:a8:38:6f:bd:9e:6b:f9:c5:d1:a3:5a:0b:6b:09:dc:91:02: b4:17:ed:4b:c2:c8:18:64:23:3d:8c:4e:55:bd:75:3b:e1:69: 51:3d:28:a9:10:e4:7f:25:1f:01:a9:51:30:c4:ae:af:3a:4e: d5:43:c8:90:61:52:31:1b:a9:e3:de:b3:54:47:39:f4:1f:26: eb:a9:8d:28:da:e2:20:5d:ac:ba:53:0d:d3:57:ba:2c:2e:b4: bd:3e:48:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNTEyMDMwNjExMDdaFw0yNTEyMTAwNjExMDdaMBgxFjAUBgNV BAMTDTY5MmZkNDdjLTFjMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDy2DXO1ubzqh4XaFh3OcwnBjX36JA/7Bab93kIuC0dQGWYRzwXk+jXEL5M2BYF OYKlmmRe6IuCJSX8ImhBDvj+WPrWtAeFH4kGhxmex5SzITCS8w4MYW9mZOiyDZjx TLVl+upmikHzJ3VCN3LqDGiDg6Bo3eLb9q13roLdmQBw3zOdeHZJ3bTOxy9Dr8Bc nxqLwZ8nk4S963oCAIObaWl3GliE0GbO90gglRkvbtwE/TJEOMa6VzTyOBAYaBub WOFh9a1XyUim5qZgPa7eE10TDNy4JwKvvtIY8a3wpXHjKvDbdCGZAvDY6FK2BH0y i5Wu/FPsXoLqGmw3ZItXPLMhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtmbQUghD Mj/IshsmHWm1fk6VNIQwHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdO b2FiTzZnUXdrV3paT1E4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAS98eicnttBJHVUDCOcx6KvLzzSKtNp14qZRzug5cE+LwbbU7LNf9FE svvcYIkfF1Bf0lqpi+E4HWn1ZPl9iWRDmQqAQtpXxxvIDgPiJfCCHQse9XdZ/g/v X01TN4XDZshqNwC+h7wJZrJWnDkClI5zblQkwCNoeRJ0yKiARdpuzqNN918LunjY SKUqTun4980jvkoDFxB6/xvxDmJxhgGdGi6oOG+9nmv5xdGjWgtrCdyRArQX7UvC yBhkIz2MTlW9dTvhaVE9KKkQ5H8lHwGpUTDErq86TtVDyJBhUjEbqePes1RHOfQf JuupjSja4iBdrLpTDdNXuiwutL0+SJo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:25 2025 by rpki-client