This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json) Hash identifier: m/fFxPVVpYdc64E61D1JIxLNcsNDG9o2upWSWpPqILA= Subject key identifier: 1E:56:37:7D:EF:51:3D:80:21:C5:BA:7D:4C:12:CA:AB:A0:F6:82:37 Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft Manifest number: B2 Signing time: Sun 21 Dec 2025 05:11:17 +0000 Manifest this update: Sun 21 Dec 2025 05:11:17 +0000 Manifest next update: Sun 28 Dec 2025 05:11:17 +0000 Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: KUS0Zw+sQMGPh9M9QBGNfW33PEjkKbaPPQ6+74QN7ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Validity Not Before: Dec 21 05:11:17 2025 GMT Not After : Dec 28 05:11:17 2025 GMT Subject: CN=69478175-9e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:94:b7:2f:24:fc:cc:1e:a1:f3:2e:b6:20: 60:96:2f:58:60:f0:a9:c4:e1:78:f5:40:02:50:4f: 1a:8a:da:85:11:48:50:3e:ee:3a:4f:e3:7b:d9:6e: c9:e0:60:84:67:f9:ba:ad:9f:49:94:e9:b1:29:57: 18:75:a1:a8:7a:4f:a9:3b:bc:f7:02:3d:d5:dd:86: d9:87:ab:70:73:55:02:03:f9:c4:80:6c:bd:e0:d4: a4:3f:ca:97:ff:84:80:e4:8f:f2:a3:4d:87:2b:ad: 58:07:0a:12:2a:60:43:75:72:d2:f8:27:a8:2d:70: 99:87:c1:0f:8a:f9:2e:19:ba:ad:ad:2d:0e:06:fe: e3:49:e2:07:a4:27:bc:53:49:15:c5:1e:df:b2:7d: 8d:f2:22:2a:bd:cc:49:4d:a2:ae:0c:9b:cf:8f:99: 36:76:d5:3c:12:2b:b3:ad:d4:d7:48:10:f5:be:3d: 24:d1:5b:9d:14:d6:9a:51:f2:8c:e9:5c:9b:8f:a6: f7:57:bf:bf:77:b2:04:9e:14:2e:dd:d9:ad:17:08: 2c:06:13:2c:3d:1c:a2:38:d5:34:4e:94:cf:b8:82: c8:94:c3:a2:02:43:44:1a:7f:be:99:9c:4c:19:05: 8e:df:8c:32:24:4e:4b:4c:b5:d7:27:29:d9:7d:51: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:56:37:7D:EF:51:3D:80:21:C5:BA:7D:4C:12:CA:AB:A0:F6:82:37 X509v3 Authority Key Identifier: keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:ba:a7:8d:c1:f4:e4:5e:cc:fe:98:b6:68:0b:44:03:d8:c5: b4:e0:34:0b:dc:62:58:d3:7d:14:18:5b:5a:79:70:2c:1b:5e: d1:6d:d2:e1:37:f3:2c:eb:0e:f1:98:ec:07:bf:41:f5:a5:62: dc:a7:0a:3f:be:49:cf:83:4e:05:58:9b:25:ae:b7:5e:27:32: 42:bb:fb:8a:96:b0:cb:c4:b2:65:24:5b:f2:4d:e4:3b:99:d2: e4:94:5f:4d:76:75:c7:dc:65:57:b4:5f:e3:7e:27:bb:9a:e1: 99:2d:e0:ea:db:93:eb:7a:a3:8e:72:65:a5:e8:6d:59:17:16: 12:d5:50:dc:6e:47:77:e3:dd:5f:d0:ba:b6:17:ae:d7:42:b6: 03:13:65:47:4c:99:c4:56:30:7a:b1:fe:d0:fc:1e:55:db:57: c6:51:f4:b2:fe:b6:eb:d5:1a:a6:8c:f0:91:52:89:ed:0d:3e: 08:b2:03:3b:8d:6e:a0:97:c4:be:d3:1d:b3:71:3d:f7:2c:0e: 2e:50:82:72:1f:4f:6c:8f:13:f8:3b:d2:f5:f9:54:cf:9d:1e: 88:be:a7:cd:9d:5d:d0:9d:b7:a2:56:b4:87:26:cd:f7:b3:a7: 4b:ff:ac:cc:d3:aa:12:d2:14:17:2a:79:c8:c0:18:31:c9:d7: 64:ba:d3:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzNzcxMTAvBgNVBAUTKDkwODBEQjUwRkYwQjc0M0ZGQTMyQjc5RDBERDVDMzE5 MDIxRDZFMjQwHhcNMjUxMjIxMDUxMTE3WhcNMjUxMjI4MDUxMTE3WjAYMRYwFAYD VQQDDA02OTQ3ODE3NS05ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu6Uty8k/MweofMutiBgli9YYPCpxOF49UACUE8aitqFEUhQPu46T+N72W7J 4GCEZ/m6rZ9JlOmxKVcYdaGoek+pO7z3Aj3V3YbZh6twc1UCA/nEgGy94NSkP8qX /4SA5I/yo02HK61YBwoSKmBDdXLS+CeoLXCZh8EPivkuGbqtrS0OBv7jSeIHpCe8 U0kVxR7fsn2N8iIqvcxJTaKuDJvPj5k2dtU8EiuzrdTXSBD1vj0k0VudFNaaUfKM 6Vybj6b3V7+/d7IEnhQu3dmtFwgsBhMsPRyiONU0TpTPuILIlMOiAkNEGn++mZxM GQWO34wyJE5LTLXXJynZfVHvUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5WN33v UT2AIcW6fUwSyqug9oI3MB8GA1UdIwQYMBaAFJCA21D/C3Q/+jK3nQ3VwxkCHW4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTM3Ny9GM0M0NEE3OEND NTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGREXzZNcmVkRGRYREdRSWRi aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJRGJVUDhMZERfNk1yZWREZFhER1FJZGJpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTM3Ny9GM0M0NEE3OENDNTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGRE XzZNcmVkRGRYREdRSWRiaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUuqeNwfTkXsz+mLZoC0QD2MW04DQL3GJY030UGFtaeXAsG17RbdLh N/Ms6w7xmOwHv0H1pWLcpwo/vknPg04FWJslrrdeJzJCu/uKlrDLxLJlJFvyTeQ7 mdLklF9NdnXH3GVXtF/jfie7muGZLeDq25PreqOOcmWl6G1ZFxYS1VDcbkd3491f 0Lq2F67XQrYDE2VHTJnEVjB6sf7Q/B5V21fGUfSy/rbr1RqmjPCRUontDT4IsgM7 jW6gl8S+0x2zcT33LA4uUIJyH09sjxP4O9L1+VTPnR6IvqfNnV3QnbeiVrSHJs33 s6dL/6zM06oS0hQXKnnIwBgxyddkutMg -----END CERTIFICATE-----Generated at Mon Dec 22 02:07:01 2025 by rpki-client