This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: cTgV/RIhltTwYFjZd7tkU/fHAW625T77BxyY2lRl9Ww= Subject key identifier: 30:E0:C3:B8:F1:2F:B2:18:10:D5:7C:75:27:C8:41:AF:C2:46:A1:38 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 06E8 Signing time: Sun 14 Dec 2025 21:27:29 +0000 Manifest this update: Sun 14 Dec 2025 21:27:28 +0000 Manifest next update: Sun 21 Dec 2025 21:27:28 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: NG3DUn2NvIVK6MmOWNrSCI8cnYcKHJJTuYvAZ4wS+sU=) 2: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Dec 14 21:27:28 2025 GMT Not After : Dec 21 21:27:28 2025 GMT Subject: CN=693f2bc1-b81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:68:fc:27:82:03:56:0c:fb:d3:f8:af:53:c1: bb:78:c7:3d:19:e6:d8:a7:9f:5a:19:d8:10:d9:37: cd:1b:1c:11:33:4e:03:40:0a:b6:b3:72:70:58:c4: 88:c6:35:20:03:3d:4f:4d:88:e8:b4:ec:e2:9f:7d: d7:96:86:45:e1:dc:34:40:f0:79:65:a2:78:ea:fe: c2:8c:24:e1:b3:14:5f:e7:1c:de:6c:d8:65:e0:9a: 07:33:d7:08:65:b9:70:5e:a0:ca:40:05:d5:d4:df: 82:5c:75:5c:c7:00:df:28:f0:19:16:6e:60:47:d3: 31:cb:53:24:fd:39:27:23:27:8e:b2:48:a0:43:f7: e8:d2:38:52:9b:67:c5:5b:38:d4:46:d7:5a:dd:a4: fa:62:60:e4:19:fe:ea:4c:47:eb:c2:b7:99:74:c9: 77:b3:2f:e2:c5:66:b5:78:78:65:e3:87:6d:02:ca: 42:01:11:e0:44:a6:f4:bd:2d:60:f7:ab:74:08:7b: 41:fb:5a:a8:84:24:7b:95:88:f7:59:cd:98:da:98: 1a:9a:d7:09:65:96:de:05:f3:43:59:5b:d2:0c:66: 3d:fa:b1:cc:8b:55:ce:e3:28:f8:15:2e:55:64:37: c5:64:e5:51:9d:03:ec:14:38:0f:f8:cf:48:61:72: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E0:C3:B8:F1:2F:B2:18:10:D5:7C:75:27:C8:41:AF:C2:46:A1:38 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cc:8a:8d:c3:1a:fc:cf:06:89:ef:ed:49:e5:96:c3:8e:fe: 9b:9b:75:46:42:f2:d7:c2:d5:0d:a5:08:14:4e:50:5d:e1:0e: f6:f3:5e:17:31:67:29:69:30:f5:96:8b:3b:f1:6f:9b:b7:b9: 71:6f:de:f9:51:1f:11:ec:b9:18:53:81:eb:70:c0:8f:07:69: f2:d7:65:33:c7:f9:88:21:c9:71:94:6e:41:09:c8:4b:0a:aa: f6:44:69:81:1c:44:33:82:6c:3a:34:60:37:0e:4f:aa:82:14: b1:f4:26:f5:81:ca:48:67:85:09:74:e0:af:68:b6:6f:6a:14: cf:48:13:6e:ac:ef:af:7a:4b:d1:24:9c:fb:9d:87:eb:d7:57: 6c:47:54:10:54:ed:d0:ba:1b:91:96:e8:c8:b7:a9:a0:1e:40: 48:56:1e:2b:3a:b0:30:9f:ca:61:9c:34:5d:94:83:6d:1d:1a: 7e:98:c1:d1:1e:43:a5:d3:2c:02:65:89:f8:6a:d4:75:fb:52: 37:cb:54:66:b4:71:df:89:60:58:31:0c:e1:0a:50:80:d9:69: 60:aa:fb:e3:42:ff:e8:78:67:54:53:03:2e:ef:a9:1b:b0:fc: 92:cd:a3:05:57:7d:ce:1f:5f:7f:f4:09:c1:c3:35:be:c0:6a: 98:b5:ff:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUxMjE0MjEyNzI4WhcNMjUxMjIxMjEyNzI4WjAYMRYwFAYD VQQDDA02OTNmMmJjMS1iODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mj8J4IDVgz70/ivU8G7eMc9GebYp59aGdgQ2TfNGxwRM04DQAq2s3JwWMSI xjUgAz1PTYjotOzin33XloZF4dw0QPB5ZaJ46v7CjCThsxRf5xzebNhl4JoHM9cI ZblwXqDKQAXV1N+CXHVcxwDfKPAZFm5gR9Mxy1Mk/TknIyeOskigQ/fo0jhSm2fF WzjURtda3aT6YmDkGf7qTEfrwreZdMl3sy/ixWa1eHhl44dtAspCARHgRKb0vS1g 96t0CHtB+1qohCR7lYj3Wc2Y2pgamtcJZZbeBfNDWVvSDGY9+rHMi1XO4yj4FS5V ZDfFZOVRnQPsFDgP+M9IYXIZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDgw7jx L7IYENV8dSfIQa/CRqE4MB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzIqNwxr8zwaJ7+1J5ZbDjv6bm3VGQvLXwtUNpQgUTlBd4Q72814X MWcpaTD1los78W+bt7lxb975UR8R7LkYU4HrcMCPB2ny12Uzx/mIIclxlG5BCchL Cqr2RGmBHEQzgmw6NGA3Dk+qghSx9Cb1gcpIZ4UJdOCvaLZvahTPSBNurO+vekvR JJz7nYfr11dsR1QQVO3QuhuRlujIt6mgHkBIVh4rOrAwn8phnDRdlINtHRp+mMHR HkOl0ywCZYn4atR1+1I3y1RmtHHfiWBYMQzhClCA2WlgqvvjQv/oeGdUUwMu76kb sPySzaMFV33OH19/9AnBwzW+wGqYtf8j -----END CERTIFICATE-----Generated at Tue Dec 16 14:24:40 2025 by rpki-client