This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: 5lMUYCYfC1QUrzxV5grXRGMWFIKLgPdXTxW8EWrL36E= Subject key identifier: E3:D9:A3:FB:12:D8:DB:6A:F6:56:33:B2:52:FF:31:F7:52:A7:29:91 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 01A7 Signing time: Fri 19 Dec 2025 02:25:16 +0000 Manifest this update: Fri 19 Dec 2025 02:25:15 +0000 Manifest next update: Fri 26 Dec 2025 02:25:15 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: +EfPOJrCohXarAJKJ6CHz5RkohQPQWIN7g4sI8OZk/E=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: BXgvpIKBLGyFXlTbrcn5D97Cd/AVN/R0856bn7qg3E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Dec 19 02:25:15 2025 GMT Not After : Dec 26 02:25:15 2025 GMT Subject: CN=6944b78c-29f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:01:04:e9:40:28:72:63:32:38:70:e4:a2: 33:62:57:12:56:ee:fa:b6:b7:ab:2c:8c:e8:7d:79: 95:fc:61:5f:23:c8:07:01:56:06:75:c9:92:f8:8f: 46:98:73:4b:1c:e3:c7:5f:2a:7f:60:7f:d1:8b:86: 34:5b:6d:bf:6b:06:1d:d8:e0:ab:37:7e:7b:5f:a4: 86:6f:3a:b6:a6:50:fb:b8:fd:ce:6c:1d:40:88:f0: b8:ba:7f:26:9f:d3:d6:7e:b6:80:8c:1e:ed:c4:0a: 89:2c:47:d5:eb:f9:de:d7:3c:1d:56:b8:99:7b:a0: 2c:a1:cc:8b:91:f0:fd:86:46:0e:d9:5d:d1:79:31: fc:b9:79:ad:7c:33:e8:8b:0d:76:d1:53:a9:b3:0c: df:4a:c5:f5:29:f0:31:2c:f2:84:a5:87:7d:e0:04: 71:81:6a:4f:47:26:1c:11:be:e9:c6:65:99:4e:76: 29:5a:36:f7:1a:cc:d3:1b:fa:9d:e2:ab:1f:ec:fc: ae:5f:0f:da:98:c6:0d:0d:4e:6b:14:e0:b5:2c:52: 58:05:3c:28:94:c0:75:4d:b3:81:13:bb:b7:ee:77: 72:d8:b6:06:c7:eb:de:13:e0:ca:7b:77:3a:5d:71: 47:34:3f:3a:61:ac:84:a6:0a:3d:12:cc:ed:d7:67: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:A3:FB:12:D8:DB:6A:F6:56:33:B2:52:FF:31:F7:52:A7:29:91 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8d:9e:0b:57:8a:f8:c0:27:45:cc:9e:10:06:46:01:8c:1d: 48:c6:99:64:7b:50:fc:76:b7:30:e1:4b:96:68:e0:0c:62:1c: c4:cc:4a:72:41:2f:fc:20:67:90:9c:0c:89:5c:bd:8c:05:35: 12:07:30:c8:47:7f:ca:68:57:38:3c:f8:8d:1a:2a:e1:41:68: 06:f3:6b:ab:1e:de:90:57:f5:2d:2f:1d:d3:52:10:88:60:ed: 59:90:8f:97:21:4c:2b:db:ab:6c:45:74:c0:dd:cf:0d:59:f2: a1:74:83:1e:83:1d:de:b3:d1:18:4f:7d:78:98:d6:4f:71:cd: 9f:43:90:17:29:4e:f7:8c:7f:72:83:04:91:c3:4e:4d:a6:88: 70:89:96:47:19:d9:fc:b5:81:75:2a:0f:95:b5:12:32:52:94: fb:82:9e:e1:61:2f:ba:ad:b4:ba:4f:c0:22:49:3a:4a:66:c9: 4a:2b:b7:0c:d8:8c:b2:63:c0:3d:33:d8:ff:89:0e:6a:99:e9: 44:1f:85:33:52:57:35:38:ff:54:ce:63:6f:d5:fa:e0:97:c3: 71:b4:95:52:ac:4c:81:f0:b3:b6:0e:d4:94:58:bf:ce:5b:20: 33:4f:b3:12:02:05:35:9b:c3:62:69:65:77:8c:15:72:da:e0: ad:13:4b:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjUxMjE5MDIyNTE1WhcNMjUxMjI2MDIyNTE1WjAYMRYwFAYD VQQDDA02OTQ0Yjc4Yy0yOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxwBBOlAKHJjMjhw5KIzYlcSVu76trerLIzofXmV/GFfI8gHAVYGdcmS+I9G mHNLHOPHXyp/YH/Ri4Y0W22/awYd2OCrN357X6SGbzq2plD7uP3ObB1AiPC4un8m n9PWfraAjB7txAqJLEfV6/ne1zwdVriZe6AsocyLkfD9hkYO2V3ReTH8uXmtfDPo iw120VOpswzfSsX1KfAxLPKEpYd94ARxgWpPRyYcEb7pxmWZTnYpWjb3GszTG/qd 4qsf7PyuXw/amMYNDU5rFOC1LFJYBTwolMB1TbOBE7u37ndy2LYGx+veE+DKe3c6 XXFHND86YayEpgo9Eszt12egowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPZo/sS 2Ntq9lYzslL/MfdSpymRMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjjZ4LV4r4wCdFzJ4QBkYBjB1Ixplke1D8drcw4UuWaOAMYhzEzEpy QS/8IGeQnAyJXL2MBTUSBzDIR3/KaFc4PPiNGirhQWgG82urHt6QV/UtLx3TUhCI YO1ZkI+XIUwr26tsRXTA3c8NWfKhdIMegx3es9EYT314mNZPcc2fQ5AXKU73jH9y gwSRw05NpohwiZZHGdn8tYF1Kg+VtRIyUpT7gp7hYS+6rbS6T8AiSTpKZslKK7cM 2IyyY8A9M9j/iQ5qmelEH4UzUlc1OP9UzmNv1frgl8NxtJVSrEyB8LO2DtSUWL/O WyAzT7MSAgU1m8NiaWV3jBVy2uCtE0uC -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:32 2025 by rpki-client