This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: rNm78Dcefw+Nu8AkpnkR+o08OcUj7mmKzObM1F4JZkw= Subject key identifier: 06:D8:13:2E:EC:CF:2B:55:3D:2D:A6:22:F5:19:54:C5:F3:50:38:38 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 017B Signing time: Tue 23 Dec 2025 02:48:15 +0000 Manifest this update: Tue 23 Dec 2025 02:48:14 +0000 Manifest next update: Tue 30 Dec 2025 02:48:14 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: /2kuFEtNihoyyeXwzYWxtVUxw+sB+onKM0GDgpHs2Q8=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Dec 23 02:48:14 2025 GMT Not After : Dec 30 02:48:14 2025 GMT Subject: CN=694a02ef-3667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:a8:9e:1b:83:de:8f:1c:1d:63:8d:c4:d2: 03:0f:96:7c:7c:f6:ce:15:7b:68:9c:91:59:07:7e: 4f:15:69:0c:87:93:9a:02:44:97:4d:90:b2:ab:c2: 27:ff:60:14:f2:73:50:84:20:14:72:9c:56:a2:85: 68:39:d5:64:70:a8:d5:4c:0a:f8:b0:81:ca:2e:0b: 80:33:9b:98:5f:2d:a4:59:1b:f6:bf:d3:ec:f7:12: dc:e5:79:6d:ad:e9:5a:75:31:41:a2:9b:5e:8b:10: 67:cd:31:46:18:46:bd:8c:a9:eb:94:e9:bd:cd:f0: ab:41:c4:c8:89:b2:ef:79:b4:c3:b1:90:7e:a9:8b: fb:0b:36:4a:6a:31:21:04:2b:5d:5e:21:7f:35:8e: 50:e2:9f:f7:30:c6:32:04:ad:c9:20:21:5f:53:c7: 84:2a:71:e2:fc:93:c1:ca:78:81:fd:3d:2e:e0:57: bf:2f:91:a1:20:e7:83:d8:d5:29:97:49:4e:a0:64: ae:06:44:ce:db:28:e4:3e:73:fc:58:31:12:a0:4d: dc:ad:d9:10:a2:c2:74:ea:0e:3c:ce:05:65:2c:12: 7a:02:59:9d:fe:7e:e1:dc:9e:b6:c1:50:27:56:a0: 93:7c:71:1a:80:35:1f:ac:ec:ac:d1:39:2d:b6:14: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D8:13:2E:EC:CF:2B:55:3D:2D:A6:22:F5:19:54:C5:F3:50:38:38 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d7:ee:0c:30:f3:44:73:8c:33:2b:31:65:de:2b:76:72:f0: 44:ab:ce:38:68:36:e7:42:33:b9:fe:f9:24:bb:12:05:97:dc: e7:39:07:56:0c:36:9a:4e:37:54:d8:f1:e3:23:bf:b8:f0:0f: ce:b7:76:b7:f1:1c:e7:cd:cc:8e:1d:fc:ba:61:97:7f:aa:e9: 12:ec:ca:16:8a:25:c2:5a:fd:50:b1:78:cd:14:06:8b:af:ed: df:a9:44:b9:41:1a:6a:cd:58:2e:b7:77:66:d6:fe:34:0e:67: cb:fd:a0:81:ad:6a:2f:9c:7e:21:f5:b1:92:a8:6c:04:c5:bb: c2:c5:b8:db:a4:c9:c8:39:c4:17:59:f1:de:6e:cf:2c:2a:fe: 04:4a:93:72:15:89:d0:40:1d:06:93:c1:d0:d7:d2:a2:ac:5d: ea:d7:bd:8a:e2:0a:b6:9b:f7:ca:7b:5f:5e:54:86:32:e6:ca: 97:40:db:87:cc:9e:11:1d:b4:3c:70:63:0a:6b:89:dd:b6:b4: 2e:80:12:d4:09:27:ab:ea:66:3a:cb:1b:3f:7c:0d:8b:27:75: 09:95:3e:00:ac:54:e3:6b:10:d1:d3:fc:9f:eb:21:b6:05:59: 5a:32:a3:31:01:b6:42:c5:f2:dd:33:cd:ea:cc:54:b2:15:9b: 53:7e:cc:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUxMjIzMDI0ODE0WhcNMjUxMjMwMDI0ODE0WjAYMRYwFAYD VQQDDA02OTRhMDJlZi0zNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc6onhuD3o8cHWONxNIDD5Z8fPbOFXtonJFZB35PFWkMh5OaAkSXTZCyq8In /2AU8nNQhCAUcpxWooVoOdVkcKjVTAr4sIHKLguAM5uYXy2kWRv2v9Ps9xLc5Xlt reladTFBopteixBnzTFGGEa9jKnrlOm9zfCrQcTIibLvebTDsZB+qYv7CzZKajEh BCtdXiF/NY5Q4p/3MMYyBK3JICFfU8eEKnHi/JPByniB/T0u4Fe/L5GhIOeD2NUp l0lOoGSuBkTO2yjkPnP8WDESoE3crdkQosJ06g48zgVlLBJ6Almd/n7h3J62wVAn VqCTfHEagDUfrOys0TktthTVCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbYEy7s zytVPS2mIvUZVMXzUDg4MB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1+4MMPNEc4wzKzFl3it2cvBEq844aDbnQjO5/vkkuxIFl9znOQdW DDaaTjdU2PHjI7+48A/Ot3a38RznzcyOHfy6YZd/qukS7MoWiiXCWv1QsXjNFAaL r+3fqUS5QRpqzVgut3dm1v40DmfL/aCBrWovnH4h9bGSqGwExbvCxbjbpMnIOcQX WfHebs8sKv4ESpNyFYnQQB0Gk8HQ19KirF3q172K4gq2m/fKe19eVIYy5sqXQNuH zJ4RHbQ8cGMKa4ndtrQugBLUCSer6mY6yxs/fA2LJ3UJlT4ArFTjaxDR0/yf6yG2 BVlaMqMxAbZCxfLdM83qzFSyFZtTfswk -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:30 2025 by rpki-client