This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: B67cAjJBcJI8N2DQYjm3wcvDRFDkModcMUnMozWq76o= Subject key identifier: F7:B3:D0:83:91:B3:6D:F1:13:B7:CC:7D:47:45:CE:03:B9:73:B9:19 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 0160 Signing time: Tue 23 Dec 2025 03:05:51 +0000 Manifest this update: Tue 23 Dec 2025 03:05:50 +0000 Manifest next update: Tue 30 Dec 2025 03:05:50 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: tORKj8UdkntqID8fhkjdqJb0TlE+cLijyZ0wXjmAcxQ=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Dec 23 03:05:50 2025 GMT Not After : Dec 30 03:05:50 2025 GMT Subject: CN=694a070e-c9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:0d:1c:23:3b:f0:e8:2f:f4:3a:d7:ca:8a: 68:93:cb:0d:16:ab:a1:58:7a:a0:00:f8:4c:07:81: 00:c6:84:91:8f:cc:ba:63:62:53:6d:33:02:9d:9c: 28:61:0b:09:36:46:63:87:94:3b:77:4a:b4:e7:55: 44:1e:3b:cf:50:7f:24:12:82:14:80:26:20:a1:e3: 41:af:44:ee:51:6f:12:4d:4d:45:29:b9:fd:91:14: bd:70:50:d5:98:39:c9:e1:2d:2d:12:cb:a8:56:1e: ae:3c:10:cf:01:d2:53:fd:9b:a6:38:ba:46:08:e4: ce:dd:ef:65:17:b9:40:99:df:14:81:c5:a6:0b:92: c2:59:94:84:ed:97:34:72:43:c3:be:5a:0c:23:9f: b6:2c:27:fe:f5:f0:7c:f5:a1:ef:f3:c4:cd:ce:2f: 42:a5:41:26:41:96:32:8b:0f:f1:fa:d6:4d:b1:51: 31:67:3a:be:6a:35:c1:3c:79:f2:89:5f:23:ad:7f: f6:2c:dc:fe:00:35:14:79:96:16:02:b2:71:62:4f: 51:09:18:42:28:71:ce:5e:46:3b:6f:50:0f:08:e9: 46:ea:2a:a4:0a:4c:80:60:9b:a4:36:4b:f2:a3:c7: 38:92:f8:b1:b3:72:c6:b0:48:33:37:0e:2d:2e:7e: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B3:D0:83:91:B3:6D:F1:13:B7:CC:7D:47:45:CE:03:B9:73:B9:19 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:bd:44:b7:43:cf:f7:20:e5:2d:42:cc:e9:2a:ff:ba:50:16: 24:43:95:79:f6:c4:9b:a9:87:b7:42:df:15:f2:52:de:b4:1c: 33:69:11:9a:37:2f:ff:9d:c0:a9:b0:fd:9e:2e:a9:08:1a:33: 64:51:ad:ac:1a:35:01:7c:e3:71:e3:96:35:02:62:d8:27:82: d2:55:b2:ea:50:f4:83:13:01:fe:36:4d:e1:a7:62:98:8a:66: 99:21:ce:76:63:e8:e9:fa:17:a8:82:d9:49:b4:9d:b2:49:55: ed:23:07:41:82:7d:21:f2:0b:7b:61:f8:3d:20:78:f0:fe:fd: a5:b8:ad:10:a3:63:4e:b3:dd:0e:c8:de:0e:7b:2a:41:03:14: 71:cb:67:04:f2:ac:74:d3:61:46:af:33:78:55:80:9f:b6:18: 11:2a:1f:d2:cd:1d:4b:89:27:05:58:77:ad:a0:8d:7a:b8:e7: 0b:2a:f0:e3:36:e8:8f:6d:a7:4d:4e:b4:26:e3:a7:03:17:86: f1:39:1c:12:7b:05:75:57:43:dc:cf:2b:c9:bb:12:dc:d6:35: ba:a6:21:61:d1:89:0f:ee:f9:9e:f4:44:9b:8a:06:60:2d:67: d8:90:64:a4:90:2b:ca:ce:38:39:db:75:66:43:29:d8:b5:5f: eb:f6:88:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUxMjIzMDMwNTUwWhcNMjUxMjMwMDMwNTUwWjAYMRYwFAYD VQQDDA02OTRhMDcwZS1jOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviYNHCM78Ogv9DrXyopok8sNFquhWHqgAPhMB4EAxoSRj8y6Y2JTbTMCnZwo YQsJNkZjh5Q7d0q051VEHjvPUH8kEoIUgCYgoeNBr0TuUW8STU1FKbn9kRS9cFDV mDnJ4S0tEsuoVh6uPBDPAdJT/ZumOLpGCOTO3e9lF7lAmd8UgcWmC5LCWZSE7Zc0 ckPDvloMI5+2LCf+9fB89aHv88TNzi9CpUEmQZYyiw/x+tZNsVExZzq+ajXBPHny iV8jrX/2LNz+ADUUeZYWArJxYk9RCRhCKHHOXkY7b1APCOlG6iqkCkyAYJukNkvy o8c4kvixs3LGsEgzNw4tLn4rZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPez0IOR s23xE7fMfUdFzgO5c7kZMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgvUS3Q8/3IOUtQszpKv+6UBYkQ5V59sSbqYe3Qt8V8lLetBwzaRGa Ny//ncCpsP2eLqkIGjNkUa2sGjUBfONx45Y1AmLYJ4LSVbLqUPSDEwH+Nk3hp2KY imaZIc52Y+jp+heogtlJtJ2ySVXtIwdBgn0h8gt7Yfg9IHjw/v2luK0Qo2NOs90O yN4OeypBAxRxy2cE8qx002FGrzN4VYCfthgRKh/SzR1LiScFWHetoI16uOcLKvDj NuiPbadNTrQm46cDF4bxORwSewV1V0PczyvJuxLc1jW6piFh0YkP7vme9ESbigZg LWfYkGSkkCvKzjg523VmQynYtV/r9ogs -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:17 2025 by rpki-client