This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: +t7oSQ6jTUUuhkzc8sqiqetzM6qUvGS5HaArzK/Uww0= Subject key identifier: C0:43:E8:C4:7F:A6:B0:77:ED:09:0C:77:A7:74:1C:29:37:20:73:CC Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D2C Signing time: Mon 22 Dec 2025 17:39:21 +0000 Manifest this update: Mon 22 Dec 2025 17:39:21 +0000 Manifest next update: Mon 29 Dec 2025 17:39:21 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: v98I6uSItTIquyAlhL38UySh3e0i8hO8omBE6UI4jI0=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Dec 22 17:39:21 2025 GMT Not After : Dec 29 17:39:21 2025 GMT Subject: CN=69498249-baeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b0:99:c0:4c:e6:f0:f2:8c:8c:63:84:08:66: df:a4:b5:6c:af:06:f4:57:12:d3:23:cc:d5:fc:da: 49:86:2b:03:30:ef:38:b5:d2:f0:a8:de:fb:8f:74: 28:42:43:d3:86:35:e1:17:8b:8a:d8:e9:9e:13:d5: eb:eb:40:b8:26:fe:71:c3:95:da:e1:e0:84:de:01: 12:68:2d:34:54:aa:72:2e:de:2f:7d:87:7f:a3:6d: 93:fc:53:de:41:cd:fb:43:c8:0f:0f:41:f0:f4:af: 5d:d5:2f:2a:5f:e8:ef:16:eb:6b:3b:74:26:b1:34: 1b:d7:f9:4f:61:9d:4b:bd:af:e3:7f:31:2f:5c:7a: 4e:08:3f:d3:de:dd:d7:3b:63:4b:0b:79:c2:b6:b1: d5:4b:4f:bf:9e:d0:14:d7:90:5c:d2:4d:53:4c:e5: 35:89:bd:d3:8b:e3:a1:e4:55:61:65:24:91:9a:d2: be:42:9e:c2:ed:8b:a9:a9:08:a9:2d:a8:8e:16:13: e0:86:17:6b:20:8b:3d:2f:75:e0:1e:ef:f3:36:01: 13:8c:44:4a:47:ac:af:55:54:bf:6c:a3:e3:42:ba: 2d:d7:a4:f7:a3:b0:a6:fc:67:df:5b:00:4c:89:11: 90:cc:41:56:cd:50:5c:92:cf:a7:96:ea:69:ef:17: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:E8:C4:7F:A6:B0:77:ED:09:0C:77:A7:74:1C:29:37:20:73:CC X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:ed:1f:3a:94:7b:6b:78:75:13:7e:5a:4b:27:68:d8:3b: f6:97:03:61:13:ea:0b:26:9a:fb:05:ce:ee:d4:a0:4f:94:61: 18:71:1f:b6:b4:b6:67:dd:9f:78:d4:20:c4:7d:d9:dc:0a:e5: 49:80:26:9d:7b:14:19:99:87:53:4f:27:a1:6a:63:0d:ba:86: e3:31:23:86:74:fd:a6:5f:2b:83:f3:0c:f7:58:c3:57:d3:56: 48:85:b8:96:98:a4:fc:f1:c2:dd:27:d8:f4:41:e8:d7:7e:73: 3c:65:97:bf:d0:95:8e:4b:9e:b9:9c:32:64:78:2f:4c:3d:09: 01:61:11:65:76:4b:e7:0b:ce:58:80:ab:24:b6:87:00:35:f4: bb:a7:1c:e2:3d:8a:68:69:c5:ea:07:5d:26:1d:c0:03:a9:d5: dc:a8:32:7f:a3:6f:dc:4e:b8:74:00:f6:6b:00:b6:9a:2a:9a: b1:39:da:f5:d8:5f:b9:a3:80:d0:aa:f8:9a:d5:5e:71:4d:76: c2:74:a8:05:b0:d7:d3:12:03:ee:11:13:e6:cb:ce:61:e0:7c: b9:73:e1:81:53:21:45:fc:34:05:77:c3:ce:d1:98:e7:a7:b5: 65:26:44:00:ab:38:47:51:ca:7a:1c:db:be:78:5d:4f:32:f5: b1:f8:0e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUxMjIyMTczOTIxWhcNMjUxMjI5MTczOTIxWjAYMRYwFAYD VQQDDA02OTQ5ODI0OS1iYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrCZwEzm8PKMjGOECGbfpLVsrwb0VxLTI8zV/NpJhisDMO84tdLwqN77j3Qo QkPThjXhF4uK2OmeE9Xr60C4Jv5xw5Xa4eCE3gESaC00VKpyLt4vfYd/o22T/FPe Qc37Q8gPD0Hw9K9d1S8qX+jvFutrO3QmsTQb1/lPYZ1Lva/jfzEvXHpOCD/T3t3X O2NLC3nCtrHVS0+/ntAU15Bc0k1TTOU1ib3Ti+Oh5FVhZSSRmtK+Qp7C7YupqQip LaiOFhPghhdrIIs9L3XgHu/zNgETjERKR6yvVVS/bKPjQrot16T3o7Cm/GffWwBM iRGQzEFWzVBcks+nlupp7xf+YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBD6MR/ prB37QkMd6d0HCk3IHPMMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWx+0fOpR7a3h1E35aSydo2Dv2lwNhE+oLJpr7Bc7u1KBPlGEYcR+2 tLZn3Z941CDEfdncCuVJgCadexQZmYdTTyehamMNuobjMSOGdP2mXyuD8wz3WMNX 01ZIhbiWmKT88cLdJ9j0QejXfnM8ZZe/0JWOS565nDJkeC9MPQkBYRFldkvnC85Y gKsktocANfS7pxziPYpoacXqB10mHcADqdXcqDJ/o2/cTrh0APZrALaaKpqxOdr1 2F+5o4DQqvia1V5xTXbCdKgFsNfTEgPuERPmy85h4Hy5c+GBUyFF/DQFd8PO0Zjn p7VlJkQAqzhHUcp6HNu+eF1PMvWx+A6g -----END CERTIFICATE-----Generated at Tue Dec 23 19:20:34 2025 by rpki-client