This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: d2o5jiAVaAr4a/mf4ox1nkFbv/xfAoxVZnyf+uPBZxM= Subject key identifier: 70:D1:9A:AD:D5:B4:98:2D:66:3D:F6:47:38:31:0E:8E:47:9D:7C:42 Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 269A Signing time: Mon 22 Dec 2025 16:05:19 +0000 Manifest this update: Mon 22 Dec 2025 16:05:18 +0000 Manifest next update: Mon 29 Dec 2025 16:05:18 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: LvPOva/soW6M19LmSMCfkQHsaKxwjwa05LHndJHClvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: Dec 22 16:05:18 2025 GMT Not After : Dec 29 16:05:18 2025 GMT Subject: CN=69496c3f-42c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:66:79:f2:23:9f:49:e9:c0:d5:cf:ab:1f:e5: 7f:e3:70:3d:a5:df:40:e4:e8:34:09:13:5a:72:41: 57:09:e1:a4:7f:d3:31:ac:d8:2d:8e:18:b0:c1:e1: c9:28:9f:7a:ef:02:ec:43:f9:5b:1c:18:da:9e:5a: 46:24:a6:1a:ab:a5:9d:e6:cf:03:27:d1:13:80:e2: 2b:bb:9f:64:a6:f3:3c:59:78:cd:c6:2a:ac:59:eb: b0:25:b5:2f:04:bb:61:83:1e:e4:0d:3f:69:b0:ba: 5f:2e:7d:3c:ab:68:36:b6:94:ab:44:4f:b7:f4:db: 2c:3e:c3:6a:f9:21:43:71:ef:bb:5e:f1:86:01:62: 61:17:85:62:7a:1a:cf:55:bc:8a:1b:73:41:ed:49: 7d:cb:ae:a6:4a:2b:4d:57:2c:b5:2e:23:ce:ec:7e: b7:d2:21:e6:ad:a3:98:49:74:3c:cc:6a:96:ee:86: 47:02:c1:d2:4e:50:cd:99:2f:e5:38:d9:97:89:a4: 74:8c:69:2b:33:75:d9:ce:f9:50:88:35:a6:f5:5b: c7:4d:35:29:6f:a6:11:09:96:13:3c:21:d7:d7:8b: 83:c5:4b:d4:2d:7e:b6:9e:31:9a:73:63:4c:41:55: 15:24:9f:28:9a:a7:08:bd:18:d4:1c:5f:e2:a1:da: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D1:9A:AD:D5:B4:98:2D:66:3D:F6:47:38:31:0E:8E:47:9D:7C:42 X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:97:a0:b5:70:5f:09:f1:fa:ab:59:ae:c9:e7:ff:c9:a5:88: 7a:0c:b5:ce:39:d5:80:22:e8:15:12:7e:a9:27:d8:35:e9:ef: e5:55:15:0b:df:99:fe:f9:87:b4:29:20:8e:46:a4:b2:dc:04: bc:e9:dc:4c:40:81:fa:1f:b9:75:04:bc:90:5b:e0:d4:be:de: 50:96:70:79:60:5a:2b:94:c1:b7:29:0f:47:49:a6:ae:36:0a: 2a:49:99:5d:fb:37:57:7f:dd:9c:f6:48:d5:fe:fb:8f:a5:0a: 55:15:c0:74:87:a6:a6:6a:03:a8:73:9f:61:6b:75:72:0a:ad: de:6a:a0:86:e6:d2:0f:ef:e1:7e:b2:ee:c6:4a:7f:44:af:4f: 84:a7:7e:bd:08:26:79:46:1d:70:8b:bd:d2:4d:ba:97:8f:64: 33:c2:5e:5f:27:ce:ab:37:de:5d:0e:cb:b5:2c:09:02:56:2d: 4e:83:13:f6:a9:a5:72:9e:b4:5a:a6:18:b2:25:8b:d5:de:a3: 14:fc:0a:01:03:09:4d:5c:98:c7:78:53:8f:d4:6b:27:9b:10: db:78:74:59:a8:a1:ad:79:1f:97:63:38:31:8f:21:a8:19:5f: bb:fc:e8:d9:3d:77:6d:d6:45:4e:b8:45:63:95:d7:15:d4:5e: 6f:8f:ea:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjUxMjIyMTYwNTE4WhcNMjUxMjI5MTYwNTE4WjAYMRYwFAYD VQQDDA02OTQ5NmMzZi00MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9GZ58iOfSenA1c+rH+V/43A9pd9A5Og0CRNackFXCeGkf9MxrNgtjhiwweHJ KJ967wLsQ/lbHBjanlpGJKYaq6Wd5s8DJ9ETgOIru59kpvM8WXjNxiqsWeuwJbUv BLthgx7kDT9psLpfLn08q2g2tpSrRE+39NssPsNq+SFDce+7XvGGAWJhF4ViehrP VbyKG3NB7Ul9y66mSitNVyy1LiPO7H630iHmraOYSXQ8zGqW7oZHAsHSTlDNmS/l ONmXiaR0jGkrM3XZzvlQiDWm9VvHTTUpb6YRCZYTPCHX14uDxUvULX62njGac2NM QVUVJJ8omqcIvRjUHF/iodqH1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDRmq3V tJgtZj32RzgxDo5HnXxCMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbl6C1cF8J8fqrWa7J5//JpYh6DLXOOdWAIugVEn6pJ9g16e/lVRUL 35n++Ye0KSCORqSy3AS86dxMQIH6H7l1BLyQW+DUvt5QlnB5YForlMG3KQ9HSaau NgoqSZld+zdXf92c9kjV/vuPpQpVFcB0h6amagOoc59ha3VyCq3eaqCG5tIP7+F+ su7GSn9Er0+Ep369CCZ5Rh1wi73STbqXj2Qzwl5fJ86rN95dDsu1LAkCVi1OgxP2 qaVynrRaphiyJYvV3qMU/AoBAwlNXJjHeFOP1GsnmxDbeHRZqKGteR+XYzgxjyGo GV+7/OjZPXdt1kVOuEVjldcV1F5vj+pr -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:20 2025 by rpki-client