This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: Zyh8dtLWuIOPTIjjWNOFrHXyOxljYbeArzOc7ZzzyqE= Subject key identifier: 40:2B:79:56:10:3A:67:3B:F5:49:B1:44:AC:79:86:C6:E5:EE:C2:93 Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 3517 Signing time: Mon 22 Dec 2025 14:22:58 +0000 Manifest this update: Mon 22 Dec 2025 14:22:57 +0000 Manifest next update: Mon 29 Dec 2025 14:22:57 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: nSDqKg/+eJsj+/vK23xsYTFWkMdYOy9qK+JBJtisQiU=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: 393XehekPeHbrV2Jp2q+bd44TtCVra3Kkby1+LNFgLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: Dec 22 14:22:57 2025 GMT Not After : Dec 29 14:22:57 2025 GMT Subject: CN=69495442-a269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:80:8d:d6:f7:08:36:5a:2c:db:8f:1d:8a: 49:07:9f:0e:77:42:9a:e8:6b:a2:a8:92:35:1e:48: 4d:c7:89:d6:bc:14:03:a6:f4:c2:10:b7:b0:e6:a1: 33:84:bc:9c:1e:f3:ec:04:bb:26:c0:83:90:f9:54: c9:8d:40:37:34:2c:43:e9:3f:5a:e0:af:e9:72:8a: 05:41:e3:cf:8c:37:5a:99:d8:50:3a:a3:4d:8b:b1: 57:df:5e:30:60:49:22:1f:d1:80:44:b3:ef:a2:c8: 07:12:5e:a1:50:7e:7f:a7:e9:5e:82:c6:d5:25:8d: ee:03:11:1a:68:2b:c8:83:29:66:c2:47:f4:f1:65: 38:46:41:d1:48:be:40:19:36:58:fc:8d:9f:b8:ee: d2:a7:0d:1f:c2:57:7e:5a:32:1f:28:36:b8:0c:f5: 71:59:14:83:02:2e:b8:ed:8f:87:db:f2:19:0d:7d: 82:7b:37:dd:a5:2b:83:a8:d7:89:ee:11:46:7d:dc: b5:41:de:82:dd:3f:8f:48:c8:3a:b8:b1:ce:ad:f7: 09:6b:cc:de:01:51:a1:ee:0f:b7:c4:fa:a0:e1:bb: 8a:7a:92:b4:57:87:3f:4e:47:22:87:35:ef:64:49: b4:6c:8f:09:b6:ee:8b:55:dd:2f:c2:c3:ab:15:ab: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:79:56:10:3A:67:3B:F5:49:B1:44:AC:79:86:C6:E5:EE:C2:93 X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:8c:71:e9:b8:31:da:0a:9f:95:b6:4e:70:d9:35:0c:e5:46: 86:27:66:ae:27:db:13:cf:1c:79:e6:3b:72:91:f5:20:5e:00: 65:8b:d0:e5:d7:b6:fc:38:2b:a2:b9:bf:d2:eb:8d:fc:c9:a8: c5:b8:4e:27:98:ab:aa:ff:15:06:98:c1:c0:94:fc:a5:ba:c0: f9:f6:0a:f0:15:24:3e:6c:86:b9:a1:df:b9:a1:20:d4:d4:bc: 8f:7b:30:c8:45:e8:82:88:ec:e9:85:cb:23:fa:f3:31:8f:79: 52:40:0c:12:ec:7a:68:54:e2:f5:6a:e1:33:b2:10:c3:99:43: 35:03:31:91:37:4f:7f:88:5a:3c:82:75:6e:a1:72:4b:e4:93: 5d:53:33:1e:2f:eb:20:19:6b:08:a1:f0:d2:6f:64:be:5d:30: 29:3f:0f:6d:eb:75:48:cb:70:4c:7d:1f:25:78:ac:27:54:30: 6a:52:55:a8:1b:07:70:d9:3d:f4:3d:38:59:51:cb:24:6d:3d: b9:5f:ae:56:fc:63:ff:81:38:23:66:1f:b9:23:17:b9:e8:9d: d7:64:6c:bb:2a:de:22:86:a1:5b:88:bf:e5:9a:96:14:60:03: ca:4c:5c:ac:4a:79:8d:57:79:aa:2e:cd:48:0d:af:f0:7e:96: fb:e7:ee:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjUxMjIyMTQyMjU3WhcNMjUxMjI5MTQyMjU3WjAYMRYwFAYD VQQDDA02OTQ5NTQ0Mi1hMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjlWAjdb3CDZaLNuPHYpJB58Od0Ka6GuiqJI1HkhNx4nWvBQDpvTCELew5qEz hLycHvPsBLsmwIOQ+VTJjUA3NCxD6T9a4K/pcooFQePPjDdamdhQOqNNi7FX314w YEkiH9GARLPvosgHEl6hUH5/p+legsbVJY3uAxEaaCvIgylmwkf08WU4RkHRSL5A GTZY/I2fuO7Spw0fwld+WjIfKDa4DPVxWRSDAi647Y+H2/IZDX2CezfdpSuDqNeJ 7hFGfdy1Qd6C3T+PSMg6uLHOrfcJa8zeAVGh7g+3xPqg4buKepK0V4c/TkcihzXv ZEm0bI8Jtu6LVd0vwsOrFat8CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAreVYQ Omc79UmxRKx5hsbl7sKTMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAojHHpuDHaCp+Vtk5w2TUM5UaGJ2auJ9sTzxx55jtykfUgXgBli9Dl 17b8OCuiub/S6438yajFuE4nmKuq/xUGmMHAlPylusD59grwFSQ+bIa5od+5oSDU 1LyPezDIReiCiOzphcsj+vMxj3lSQAwS7HpoVOL1auEzshDDmUM1AzGRN09/iFo8 gnVuoXJL5JNdUzMeL+sgGWsIofDSb2S+XTApPw9t63VIy3BMfR8leKwnVDBqUlWo Gwdw2T30PThZUcskbT25X65W/GP/gTgjZh+5Ixe56J3XZGy7Kt4ihqFbiL/lmpYU YAPKTFysSnmNV3mqLs1IDa/wfpb75+7S -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:22 2025 by rpki-client