This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json) Hash identifier: dw0GwOIqoZ+N1hbNKhoYU5M6iH2APkHtjkc/bKfkZLU= Subject key identifier: 5C:FF:CB:A3:7E:4F:3E:26:CF:7A:11:70:4F:64:73:6C:26:75:C8:0E Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft Manifest number: 38 Signing time: Tue 23 Dec 2025 06:20:16 +0000 Manifest this update: Tue 23 Dec 2025 06:20:16 +0000 Manifest next update: Tue 30 Dec 2025 06:20:16 +0000 Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: 3gIIMmNTNe6UXPbCeuNqyjozLbegZnCGEmmRuYIfNbQ=) 2: 0D06C406887511F094C09643C4F9AE02.roa (hash: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Dec 23 06:20:16 2025 GMT Not After : Dec 30 06:20:16 2025 GMT Subject: CN=694a34a0-8789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:35:3c:13:b4:68:c9:56:ac:bf:6b:d9:a0: 6f:c6:5a:3f:35:2b:e3:fb:e4:20:17:69:90:cd:d6: 1e:db:00:3f:c3:44:44:c5:59:10:11:9a:37:ad:96: df:1a:5a:74:3a:45:84:ef:b1:1d:62:d5:65:39:3c: d8:eb:ec:44:48:0f:25:6c:1c:8b:1f:1b:d3:9c:0d: 3e:d3:82:f7:71:0b:fe:fe:11:8e:3c:dd:04:08:4a: d4:0c:bf:0c:d1:44:16:1b:d6:13:10:41:ee:72:14: 9a:3c:93:0d:87:21:cd:7a:3f:a3:96:99:30:94:64: 84:1b:31:3f:36:2b:1e:34:ca:96:38:c8:0a:64:ec: ed:b9:f4:13:ac:5e:72:6b:6f:5e:1d:3b:3c:f6:e5: bd:3b:02:9d:02:12:fd:fe:50:82:14:14:b5:4b:ef: cf:b7:25:99:7c:42:91:3e:cf:22:52:07:e5:80:65: 0b:03:75:85:f2:56:e6:ce:be:a1:31:2b:c3:56:fa: 6e:cd:9a:36:e1:91:10:ee:a0:dd:e9:21:c2:b4:e7: 1a:7d:cb:7f:c2:9f:88:dd:98:94:6e:d5:51:61:00: 2e:b5:35:e4:3d:9b:15:0e:5a:95:0e:8d:89:08:c0: 2e:a8:ef:bf:6f:e1:47:80:e1:bd:e7:4b:0e:85:15: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:CB:A3:7E:4F:3E:26:CF:7A:11:70:4F:64:73:6C:26:75:C8:0E X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:13:05:8e:a3:09:14:89:90:f2:0e:f0:c9:20:52:95:b8:b3: 57:02:70:4a:33:69:f9:e4:32:7b:29:d5:9f:80:6c:f6:90:ab: cc:5b:58:a4:42:58:18:d1:80:c3:2f:14:87:d2:5b:2d:42:26: 1e:08:2a:fb:9f:78:f7:46:e3:73:64:6d:3b:7b:e0:07:d3:46: 86:a1:6e:81:b7:9f:d7:18:24:ce:7d:c2:2d:f0:7c:8c:df:e3: a2:78:b6:72:4f:ab:f0:cd:9f:c5:5a:f3:9c:b1:12:19:da:df: 8b:5c:62:a3:aa:96:b0:0a:2b:d7:1d:a8:32:a3:76:90:da:fb: af:4b:b0:8d:df:c1:1b:87:e6:8a:7d:dd:f5:44:cf:43:3d:71: 61:b8:b1:ac:b5:62:27:61:db:9a:08:6c:49:ff:6f:fe:41:e0: c7:59:0d:62:a3:48:91:8b:71:8c:39:8d:28:6b:fc:ad:f8:87: 6a:28:5a:0f:89:56:77:ab:8a:95:b2:b9:02:77:03:c1:26:79: 86:21:55:98:03:f6:76:f4:a1:8a:13:0b:c3:23:80:e6:d6:81: f7:ee:c1:10:7e:65:23:68:55:96:0f:45:ed:0a:49:95:a0:51: 3d:2f:82:6c:05:b0:03:c5:8f:5c:f8:c6:10:72:cc:4e:71:73: 8a:62:ea:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkREMDExMC8GA1UEBRMoOTJCNEMyQTY5Mjk0MEI1NDhFNjM1MDQ0MzM1QTk4NUJF RTIyQkRBMTAeFw0yNTEyMjMwNjIwMTZaFw0yNTEyMzAwNjIwMTZaMBgxFjAUBgNV BAMMDTY5NGEzNGEwLTg3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfrTU8E7RoyVasv2vZoG/GWj81K+P75CAXaZDN1h7bAD/DRETFWRARmjetlt8a WnQ6RYTvsR1i1WU5PNjr7ERIDyVsHIsfG9OcDT7TgvdxC/7+EY483QQIStQMvwzR RBYb1hMQQe5yFJo8kw2HIc16P6OWmTCUZIQbMT82Kx40ypY4yApk7O259BOsXnJr b14dOzz25b07Ap0CEv3+UIIUFLVL78+3JZl8QpE+zyJSB+WAZQsDdYXyVubOvqEx K8NW+m7NmjbhkRDuoN3pIcK05xp9y3/Cn4jdmJRu1VFhAC61NeQ9mxUOWpUOjYkI wC6o779v4UeA4b3nSw6FFUnRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXP/Lo35P PibPehFwT2RzbCZ1yA4wHwYDVR0jBBgwFoAUkrTCppKUC1SOY1BEM1qYW+4ivaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGREQwLzlFMEVFODQ0ODg3 NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZh RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3JUQ3BwS1VDMVNPWTFCRU0xcVlXLTRpdmFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG REQwLzlFMEVFODQ0ODg3NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFT T1kxQkVNMXFZVy00aXZhRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADcTBY6jCRSJkPIO8MkgUpW4s1cCcEozafnkMnsp1Z+AbPaQq8xbWKRC WBjRgMMvFIfSWy1CJh4IKvufePdG43NkbTt74AfTRoahboG3n9cYJM59wi3wfIzf 46J4tnJPq/DNn8Va85yxEhna34tcYqOqlrAKK9cdqDKjdpDa+69LsI3fwRuH5op9 3fVEz0M9cWG4say1Yidh25oIbEn/b/5B4MdZDWKjSJGLcYw5jShr/K34h2ooWg+J VneripWyuQJ3A8EmeYYhVZgD9nb0oYoTC8MjgObWgffuwRB+ZSNoVZYPRe0KSZWg UT0vgmwFsAPFj1z4xhByzE5xc4pi6pI= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:32 2025 by rpki-client