This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: 1A0ZaANwrQjhV1zOPHY+aGrlAGUP/b7bhgMjBiNSb4E= Subject key identifier: 9E:F1:64:32:2A:C3:73:68:53:D3:55:44:40:96:32:05:0C:A4:AE:41 Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 34ED Signing time: Wed 24 Dec 2025 15:11:08 +0000 Manifest this update: Wed 24 Dec 2025 15:11:08 +0000 Manifest next update: Wed 31 Dec 2025 15:11:08 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: DNemXwKwTX6p0ZCoXgKoc6C5GAD4+/l1xn4NXBmPeNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: Dec 24 15:11:08 2025 GMT Not After : Dec 31 15:11:08 2025 GMT Subject: CN=694c028c-6e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:c1:ff:af:a6:bf:1e:ed:99:c7:1e:ae:a5: 9e:8e:90:39:6f:c3:33:3f:a3:55:7e:2d:9d:b3:ca: 53:dc:99:c5:18:d8:8a:a6:67:95:1f:53:20:5c:6d: 39:2c:06:43:4f:5e:8f:be:fa:61:69:ff:71:24:27: 33:49:db:66:05:4a:fe:37:6c:b9:dd:12:d4:47:22: 60:3b:93:c5:ea:37:31:11:f4:a0:65:ce:2e:02:26: 00:fe:a9:3f:ec:f3:02:b8:4b:b1:cb:57:88:b3:cc: 4f:63:7c:47:f0:b3:40:d9:03:f5:c4:02:de:6d:05: c7:d5:16:5b:a8:e6:cc:a1:49:54:b1:14:9d:0a:20: cc:78:f3:8c:86:ce:96:28:59:37:98:02:b3:9c:f8: fc:d1:3b:a2:6c:6c:8c:ab:d4:47:e0:ad:a1:ab:fc: 95:ff:91:ac:f2:18:6f:4e:12:99:97:e5:00:2b:a5: b8:25:c5:25:13:dd:3b:ee:6f:5a:2f:cb:60:ff:02: e6:64:ff:dd:97:c7:bb:c7:12:ad:c7:90:71:b1:a1: 9f:d7:3f:f7:c6:60:37:72:a7:99:41:cd:72:3d:de: db:17:ba:e5:d2:2f:52:eb:1d:9f:57:44:42:06:4d: b0:ae:7c:a9:b4:52:a6:f5:97:19:67:eb:a9:24:8c: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F1:64:32:2A:C3:73:68:53:D3:55:44:40:96:32:05:0C:A4:AE:41 X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1d:d2:2a:4b:c6:93:26:99:5b:fb:d3:5f:2b:99:c0:8d:a2: bc:0f:9b:3d:6c:95:e6:a6:65:b7:c0:92:5d:ff:87:27:49:17: 09:9f:3f:89:d5:12:21:2f:86:ff:4e:b2:8d:09:2f:dc:01:58: cf:6c:62:fc:be:94:ac:3f:22:e6:8d:d2:3b:d9:b3:8a:37:c6: 05:bd:fe:a1:49:52:04:b0:f8:51:af:70:38:be:f7:7a:85:e4: 05:bc:de:f5:bc:5c:88:72:ba:67:91:1e:f2:47:39:46:63:74: cc:b9:2b:d0:b1:cd:8a:13:04:f7:fe:ac:92:4d:8b:ec:dd:26: de:3c:49:85:7c:be:16:02:9e:64:8b:bf:3b:d1:7d:85:76:7e: 83:d1:1a:87:fc:47:f8:d4:2a:3d:cd:54:d0:5d:73:54:de:2e: f9:1a:07:42:eb:c8:70:d8:ae:9e:11:94:82:3d:5c:55:84:5d: 62:8b:e8:b3:42:e7:b6:37:00:64:0f:66:6d:cf:46:07:b1:62: c1:ea:14:a5:81:d9:76:31:36:82:29:91:72:2c:ba:90:f9:e4: 13:4c:c0:31:44:d0:48:2a:1d:89:85:ba:0a:2d:f0:39:f9:a0: 51:0a:45:e7:6d:7c:22:b1:18:fe:be:d8:8d:c2:f6:8c:39:0a: a1:ac:94:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjUxMjI0MTUxMTA4WhcNMjUxMjMxMTUxMTA4WjAYMRYwFAYD VQQDDA02OTRjMDI4Yy02ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLnB/6+mvx7tmccerqWejpA5b8MzP6NVfi2ds8pT3JnFGNiKpmeVH1MgXG05 LAZDT16Pvvphaf9xJCczSdtmBUr+N2y53RLURyJgO5PF6jcxEfSgZc4uAiYA/qk/ 7PMCuEuxy1eIs8xPY3xH8LNA2QP1xALebQXH1RZbqObMoUlUsRSdCiDMePOMhs6W KFk3mAKznPj80TuibGyMq9RH4K2hq/yV/5Gs8hhvThKZl+UAK6W4JcUlE9077m9a L8tg/wLmZP/dl8e7xxKtx5BxsaGf1z/3xmA3cqeZQc1yPd7bF7rl0i9S6x2fV0RC Bk2wrnyptFKm9ZcZZ+upJIwCAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7xZDIq w3NoU9NVRECWMgUMpK5BMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtHdIqS8aTJplb+9NfK5nAjaK8D5s9bJXmpmW3wJJd/4cnSRcJnz+J 1RIhL4b/TrKNCS/cAVjPbGL8vpSsPyLmjdI72bOKN8YFvf6hSVIEsPhRr3A4vvd6 heQFvN71vFyIcrpnkR7yRzlGY3TMuSvQsc2KEwT3/qySTYvs3SbePEmFfL4WAp5k i7870X2Fdn6D0RqH/Ef41Co9zVTQXXNU3i75GgdC68hw2K6eEZSCPVxVhF1ii+iz Que2NwBkD2Ztz0YHsWLB6hSlgdl2MTaCKZFyLLqQ+eQTTMAxRNBIKh2JhboKLfA5 +aBRCkXnbXwisRj+vtiNwvaMOQqhrJS+ -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:36 2025 by rpki-client