This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: fhplRBBj8BSFAe/2kcsvj2spLqV7RQAX0k+trFiviXc= Subject key identifier: 20:2C:B1:06:A0:A9:E9:D6:80:39:4C:4B:5F:6E:E1:B1:99:04:CD:E1 Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 0682 Signing time: Sat 20 Dec 2025 20:39:31 +0000 Manifest this update: Sat 20 Dec 2025 20:39:31 +0000 Manifest next update: Sat 27 Dec 2025 20:39:31 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: u/wSgO4bUVgOTTTWazu1052sDz4cPEoVe+ETbbwfhhs=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: r8ZqDCZQUEDaJuodGigdg5730ebRMN80tyK9bKpWQ8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Dec 20 20:39:31 2025 GMT Not After : Dec 27 20:39:31 2025 GMT Subject: CN=69470983-bb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:9a:96:2d:8e:0d:0f:03:74:70:7a:5a:ca: 45:92:84:ca:17:29:98:4e:67:e6:5e:f4:4b:98:e5: 9f:dc:07:66:fd:bb:96:35:ef:3d:28:69:ae:00:e1: 60:0c:80:12:ca:02:ad:46:b1:4c:e4:7f:ec:d7:23: 41:75:7f:2d:0d:3c:6b:52:4b:59:66:ae:de:4a:0f: 3e:a2:70:75:4b:ae:5a:07:5f:b7:20:cb:2b:9f:ca: a4:62:ec:5c:3e:74:c6:da:1b:1f:9b:7d:fb:aa:75: 7a:c7:e2:76:33:a8:7c:cd:2e:04:8e:28:9f:13:da: 0b:16:0e:0c:a0:00:77:16:89:bf:2e:b6:64:cb:38: 45:7a:47:65:87:5e:97:cb:51:a5:22:3e:cd:85:8d: 81:ed:06:e4:2c:12:21:0f:2a:10:95:17:e1:c3:72: 30:ac:f4:d0:4e:21:2c:ae:ee:77:b0:b5:a1:0e:14: 11:71:54:1b:e7:4d:81:3e:20:32:a3:40:0e:f1:0f: c3:60:84:ed:e1:7c:c9:e5:3d:48:14:ee:c4:66:0c: 93:d1:ef:8f:0e:35:b3:49:68:9b:fb:38:34:1e:07: a1:24:dc:eb:22:b0:35:8a:cb:3c:36:e8:32:bf:c7: 71:be:47:ab:f5:7d:9a:c6:b4:5f:77:45:19:81:07: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:B1:06:A0:A9:E9:D6:80:39:4C:4B:5F:6E:E1:B1:99:04:CD:E1 X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:87:b1:18:0d:ff:5d:33:ff:0d:89:ce:c3:82:6d:2c:aa:24: 0c:06:74:d6:11:60:36:27:83:c0:51:74:25:d1:df:40:fe:c4: 69:9d:ef:d5:77:e6:cd:f5:d0:5e:87:31:7d:a9:14:d3:31:cc: ee:47:6a:37:97:bc:82:fe:1f:e0:98:1c:44:8b:7c:bb:24:a4: ba:32:5c:14:b8:36:f1:21:c2:5a:7e:1c:35:28:65:c0:e6:8e: 1a:47:80:d5:3f:7f:d1:95:cf:5d:2a:1c:e7:90:01:82:30:32: d5:6b:83:ba:61:db:36:6c:af:5a:44:7c:e9:67:71:75:fc:ae: 4d:4e:35:92:a8:14:a1:7a:42:33:7e:8a:ea:08:27:f4:dd:0c: 57:0d:30:e3:18:5f:53:b2:c3:d8:b8:e3:26:fe:23:51:8d:19: 29:3e:04:ca:5a:3e:f0:3c:2b:5e:86:c6:eb:80:06:12:f5:c2: fa:be:c0:51:07:24:7d:d8:d1:4b:40:d5:26:0a:2d:34:c8:d3: a4:06:fd:57:e6:50:b2:8d:81:c2:6e:8c:55:1c:2e:e3:16:ae: a9:c3:e4:fe:06:66:f8:e4:89:e5:e7:f5:7f:18:5a:6a:09:f7: e2:99:00:ec:e5:25:55:7c:2a:d2:97:9d:57:9a:3f:42:80:85: 41:53:02:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUxMjIwMjAzOTMxWhcNMjUxMjI3MjAzOTMxWjAYMRYwFAYD VQQDDA02OTQ3MDk4My1iYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc+ali2ODQ8DdHB6WspFkoTKFymYTmfmXvRLmOWf3Adm/buWNe89KGmuAOFg DIASygKtRrFM5H/s1yNBdX8tDTxrUktZZq7eSg8+onB1S65aB1+3IMsrn8qkYuxc PnTG2hsfm337qnV6x+J2M6h8zS4EjiifE9oLFg4MoAB3Fom/LrZkyzhFekdlh16X y1GlIj7NhY2B7QbkLBIhDyoQlRfhw3IwrPTQTiEsru53sLWhDhQRcVQb502BPiAy o0AO8Q/DYITt4XzJ5T1IFO7EZgyT0e+PDjWzSWib+zg0HgehJNzrIrA1iss8Nugy v8dxvker9X2axrRfd0UZgQfv3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAssQag qenWgDlMS19u4bGZBM3hMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHh7EYDf9dM/8Nic7Dgm0sqiQMBnTWEWA2J4PAUXQl0d9A/sRpne/V d+bN9dBehzF9qRTTMczuR2o3l7yC/h/gmBxEi3y7JKS6MlwUuDbxIcJafhw1KGXA 5o4aR4DVP3/Rlc9dKhznkAGCMDLVa4O6Yds2bK9aRHzpZ3F1/K5NTjWSqBShekIz forqCCf03QxXDTDjGF9TssPYuOMm/iNRjRkpPgTKWj7wPCtehsbrgAYS9cL6vsBR ByR92NFLQNUmCi00yNOkBv1X5lCyjYHCboxVHC7jFq6pw+T+Bmb45Inl5/V/GFpq CffimQDs5SVVfCrSl51Xmj9CgIVBUwKu -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:05 2025 by rpki-client