This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: o0lVmN5B8SxoP6C5rhNk84wrysOU0EkhwDj4mRDP71s= Subject key identifier: 68:6C:C4:25:E3:96:13:53:EE:A5:9B:40:FC:26:66:CE:28:6C:8B:46 Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: 70 Signing time: Wed 03 Dec 2025 05:08:20 +0000 Manifest this update: Wed 03 Dec 2025 05:08:20 +0000 Manifest next update: Wed 10 Dec 2025 05:08:20 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: KouIRSbkYFi+diwzqSsKCKucxn5VrtLjIVTJBawpmY0=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: xB68FJMR3JM3Cs61xN748kWOuQa0imSlnpLBddD+vsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Dec 3 05:08:20 2025 GMT Not After : Dec 10 05:08:20 2025 GMT Subject: CN=692fc5c4-04eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:bc:d9:39:c9:51:2f:9c:b6:c0:ce:e9:29: f3:19:56:31:04:a6:24:f1:f5:35:7a:cb:f2:98:01: c1:46:9a:b9:7a:3b:e9:c7:ea:94:2f:95:5b:43:43: 06:0b:2b:38:86:f6:20:92:2c:57:f0:f2:5c:71:04: 13:c3:9b:1f:a2:46:63:a8:25:ff:71:0f:de:03:4e: 19:67:d1:b3:a6:7c:2b:2c:5a:2c:7d:7c:83:c4:33: 1e:2f:c4:4d:59:b1:56:00:4f:28:2c:64:13:f8:c2: 78:d7:cd:d3:13:3b:e9:b4:1a:d8:86:90:c1:e6:fa: 53:bb:23:05:35:1d:a0:c3:4f:d2:30:ea:9a:ec:5e: 53:d6:70:4e:a7:da:8d:2f:f1:f3:d0:02:78:fb:36: a9:dc:da:de:b9:92:41:39:19:e5:49:07:27:2f:08: bb:b9:ff:9b:dc:36:09:5a:54:04:39:49:20:bd:33: ec:87:3e:aa:bc:1e:8c:4f:84:79:ae:94:97:d8:e4: 85:7c:33:d9:15:f3:3d:f7:86:a6:c9:8c:82:a0:f0: 25:8c:82:6d:6f:cf:d7:a8:3f:00:3f:bd:dd:8b:41: 3d:0d:b7:c2:23:d6:c0:d2:85:fb:ff:4e:24:94:ed: 4d:8e:fa:17:70:0d:a0:a8:28:08:0a:d2:1c:3c:ac: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:C4:25:E3:96:13:53:EE:A5:9B:40:FC:26:66:CE:28:6C:8B:46 X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:47:35:4f:c1:81:99:48:90:54:44:dd:9b:c7:1b:ef:40:9c: 88:4c:56:6d:34:83:95:7e:5d:76:f6:e6:f9:89:40:d8:5f:d5: 93:9a:10:ed:2d:17:26:53:c7:9e:9b:e0:26:67:23:38:3e:7c: eb:c0:ee:44:1e:f7:e7:fc:4c:ff:2d:d2:d5:8d:23:bf:c1:dc: 0f:9d:6f:c3:78:39:6b:c4:98:78:92:c8:a5:46:55:98:ed:34: 13:47:ea:ab:cf:49:ce:be:4f:2a:5f:5e:cd:ee:ec:7f:11:02: 26:33:68:a6:1c:d3:82:88:3c:94:71:4b:20:61:41:8d:c1:90: 8d:75:1b:8a:9f:24:11:9c:c0:82:55:91:07:8c:46:b4:85:d4: 52:11:1d:a4:7c:00:de:4d:1c:9a:e9:d7:0a:2b:7e:9b:05:ea: e7:2b:76:9e:8b:e4:0f:47:8e:c8:d4:9d:ec:95:2f:8c:b9:1f: 57:1a:5d:bd:d8:7b:8b:ea:84:ec:0d:61:60:6f:87:e0:f7:05: 12:13:43:97:f4:4b:3c:58:2a:c2:08:c2:8b:05:df:49:30:17: 3c:97:38:2e:66:1d:80:97:a5:73:64:39:8d:c6:46:c5:fd:ec: 6a:ac:72:f8:52:40:8b:aa:c9:fc:15:69:71:9b:19:d4:01:ad: 41:64:ba:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoMkEwMEZENUQ1RUFFRjgxRjMyQjAwQjJFNUM4MkM1RUNE QUMxMjY5MzAeFw0yNTEyMDMwNTA4MjBaFw0yNTEyMTAwNTA4MjBaMBgxFjAUBgNV BAMTDTY5MmZjNWM0LTA0ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwlrzZOclRL5y2wM7pKfMZVjEEpiTx9TV6y/KYAcFGmrl6O+nH6pQvlVtDQwYL KziG9iCSLFfw8lxxBBPDmx+iRmOoJf9xD94DThln0bOmfCssWix9fIPEMx4vxE1Z sVYATygsZBP4wnjXzdMTO+m0GtiGkMHm+lO7IwU1HaDDT9Iw6prsXlPWcE6n2o0v 8fPQAnj7Nqnc2t65kkE5GeVJBycvCLu5/5vcNglaVAQ5SSC9M+yHPqq8HoxPhHmu lJfY5IV8M9kV8z33hqbJjIKg8CWMgm1vz9eoPwA/vd2LQT0Nt8Ij1sDShfv/TiSU 7U2O+hdwDaCoKAgK0hw8rFDnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaGzEJeOW E1PupZtA/CZmzihsi0YwHwYDVR0jBBgwFoAUKgD9XV6u+B8ysAsuXILF7NrBJpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0JCNDJDMURFMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2dEOVhWNnUtQjh5c0FzdVhJTEY3TnJCSnBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0JCNDJDMURFMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4 eXNBc3VYSUxGN05yQkpwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALdHNU/BgZlIkFRE3ZvHG+9AnIhMVm00g5V+XXb25vmJQNhf1ZOaEO0t FyZTx56b4CZnIzg+fOvA7kQe9+f8TP8t0tWNI7/B3A+db8N4OWvEmHiSyKVGVZjt NBNH6qvPSc6+TypfXs3u7H8RAiYzaKYc04KIPJRxSyBhQY3BkI11G4qfJBGcwIJV kQeMRrSF1FIRHaR8AN5NHJrp1worfpsF6ucrdp6L5A9HjsjUneyVL4y5H1caXb3Y e4vqhOwNYWBvh+D3BRITQ5f0SzxYKsIIwosF30kwFzyXOC5mHYCXpXNkOY3GRsX9 7GqscvhSQIuqyfwVaXGbGdQBrUFkuu8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:47 2025 by rpki-client