This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: iy8eP99YquBUWkO7EHR1t1FpecUhzhAqp5HddRrZIiQ= Subject key identifier: F1:F4:DA:FA:92:A3:9C:0E:E9:DB:83:5A:06:61:03:C6:F4:6C:9B:63 Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 91 Signing time: Tue 23 Dec 2025 05:31:50 +0000 Manifest this update: Tue 23 Dec 2025 05:31:50 +0000 Manifest next update: Tue 30 Dec 2025 05:31:50 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: BV9HwjWdy00OaOp/tgQLztBMAO1Rx6pL2hOrghn6YFE=) 2: DA700744185511F09304D972C4F9AE02.roa (hash: MiqFluIC5BNSTT1867bwbDdwUanVh/INLvZrWpn+wqs=) 3: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: 3K0DVSQ88H0vE5ErqZjrHuBFz3ioSOB+/QcjArPUvp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Dec 23 05:31:50 2025 GMT Not After : Dec 30 05:31:50 2025 GMT Subject: CN=694a2946-cdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:5d:04:56:f4:ad:83:72:92:66:aa:7d:e2: ad:c4:57:76:f6:1c:9c:92:d5:d2:01:00:8a:aa:5a: db:76:95:1f:85:57:d7:ba:2b:0f:80:63:b1:89:24: 5d:f3:fd:96:b5:84:cf:cb:71:9a:3f:1f:f5:30:8d: ad:65:1f:48:3f:40:96:5b:ed:62:f7:2f:ed:0d:f9: 99:cf:08:e0:11:c3:e1:37:6d:fd:f2:6c:24:c4:3f: 78:96:4e:00:9a:70:4a:17:3b:aa:46:8f:de:90:da: 83:52:a5:bc:7c:15:8f:53:23:4b:5f:f9:ca:51:71: 29:4c:1e:dc:22:1a:ad:6a:9c:69:5a:77:23:80:da: 1e:9d:e5:e2:16:4b:62:2e:3f:ca:e2:23:1e:57:66: 71:60:98:f2:80:cd:ec:d6:f0:86:17:f7:5d:df:df: fd:f8:5e:f8:28:9e:00:56:da:67:b1:d5:32:c8:2c: c4:8c:78:b4:98:72:0f:11:e2:27:98:7f:88:14:02: 4e:5a:58:e5:75:d2:ee:9b:00:bc:ba:04:71:9a:e2: 1d:7d:56:14:27:53:b0:f5:87:23:68:9b:f6:81:eb: ac:0d:a4:a1:c1:b4:85:4c:71:2e:90:94:5d:95:c4: bb:3d:21:dd:53:41:94:c9:1a:a0:ea:6a:c3:05:b4: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:DA:FA:92:A3:9C:0E:E9:DB:83:5A:06:61:03:C6:F4:6C:9B:63 X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:6b:01:b6:62:53:99:39:9c:d0:cd:31:59:f0:35:df:55:fe: 94:f6:53:26:ed:26:05:7d:2e:78:07:10:b9:17:e1:b1:4e:97: 16:a6:0d:02:5b:14:4c:e0:7c:74:bd:f6:aa:2b:9c:80:2b:4d: b4:91:8b:e1:3c:ab:b5:2b:ed:c3:70:b4:90:00:cd:ec:0d:f6: 57:52:3c:30:84:62:95:ad:d1:a1:fd:61:1a:ee:dc:24:f9:ff: 7d:58:4e:8f:bb:f6:b2:be:9d:0d:e4:e2:e4:91:80:bb:de:a3: 78:45:8e:da:f0:8e:bd:f1:f4:fc:f1:12:9d:23:3a:57:c4:9a: 83:fb:fe:47:a6:36:bd:7f:4c:50:04:d0:7e:0d:e0:b2:0e:88: e7:65:9f:49:39:69:0c:8f:6c:4f:3f:e7:73:e9:74:cb:c0:72: f7:b1:f2:62:4d:ca:8e:2e:90:ef:ec:d1:da:f6:37:f0:f8:7a: 62:62:8e:15:39:a1:d8:c3:de:56:e4:8b:2b:95:ea:77:f6:46: 42:26:7a:72:6e:35:2d:60:29:1b:5b:fd:cb:77:87:dd:a0:3e: b2:52:18:e8:4a:85:17:62:1a:6f:d8:1d:36:a2:29:22:a9:29: 5c:53:e9:b3:89:89:4b:36:e0:ad:ed:4e:0b:46:4f:59:1d:a0: 1a:29:cd:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjUxMjIzMDUzMTUwWhcNMjUxMjMwMDUzMTUwWjAYMRYwFAYD VQQDDA02OTRhMjk0Ni1jZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg5dBFb0rYNykmaqfeKtxFd29hycktXSAQCKqlrbdpUfhVfXuisPgGOxiSRd 8/2WtYTPy3GaPx/1MI2tZR9IP0CWW+1i9y/tDfmZzwjgEcPhN2398mwkxD94lk4A mnBKFzuqRo/ekNqDUqW8fBWPUyNLX/nKUXEpTB7cIhqtapxpWncjgNoeneXiFkti Lj/K4iMeV2ZxYJjygM3s1vCGF/dd39/9+F74KJ4AVtpnsdUyyCzEjHi0mHIPEeIn mH+IFAJOWljlddLumwC8ugRxmuIdfVYUJ1Ow9YcjaJv2geusDaShwbSFTHEukJRd lcS7PSHdU0GUyRqg6mrDBbSeCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH02vqS o5wO6duDWgZhA8b0bJtjMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSawG2YlOZOZzQzTFZ8DXfVf6U9lMm7SYFfS54BxC5F+GxTpcWpg0C WxRM4Hx0vfaqK5yAK020kYvhPKu1K+3DcLSQAM3sDfZXUjwwhGKVrdGh/WEa7twk +f99WE6Pu/ayvp0N5OLkkYC73qN4RY7a8I698fT88RKdIzpXxJqD+/5Hpja9f0xQ BNB+DeCyDojnZZ9JOWkMj2xPP+dz6XTLwHL3sfJiTcqOLpDv7NHa9jfw+HpiYo4V OaHYw95W5Isrlep39kZCJnpybjUtYCkbW/3Ld4fdoD6yUhjoSoUXYhpv2B02oiki qSlcU+mziYlLNuCt7U4LRk9ZHaAaKc2R -----END CERTIFICATE-----Generated at Wed Dec 24 15:58:52 2025 by rpki-client