This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: HKNYsK0aHJeCJNQBuzNqTkgCyHgkq+YzX/ipSnKz1JI= Subject key identifier: 9A:AB:B8:0F:C6:A5:BA:75:AA:84:91:A0:E2:7E:4E:55:E6:6B:B4:8D Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 067C Signing time: Mon 22 Dec 2025 21:43:25 +0000 Manifest this update: Mon 22 Dec 2025 21:43:24 +0000 Manifest next update: Mon 29 Dec 2025 21:43:24 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: MvMsg2Yl5RE1FG9l4o0bs34Y9bLqlxcp8syRTQaPxTY=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: Dec 22 21:43:24 2025 GMT Not After : Dec 29 21:43:24 2025 GMT Subject: CN=6949bb7d-c63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:54:f2:bc:a4:e1:11:94:ce:1c:c3:e4:99: 6c:a1:9f:fc:ba:4c:15:60:4d:bc:ea:02:90:56:8e: 95:bf:89:b7:04:01:97:e9:14:58:b8:8c:54:0d:1c: e6:9e:dd:b7:01:f4:d3:44:13:69:75:f5:58:bb:07: 38:4e:28:65:46:9a:2b:99:73:62:3c:c7:30:1a:ec: 06:97:74:e5:f8:ca:44:2e:86:f8:3b:59:45:d9:54: 04:22:a1:38:22:fb:aa:50:15:51:80:0f:5e:ac:a3: 24:96:a3:49:7f:bb:d3:d0:69:25:a4:e8:d1:9e:50: 4d:36:a5:90:58:96:dc:2e:16:5f:db:c5:5f:b7:32: 81:ce:db:44:53:b5:bf:3a:94:dd:92:89:c0:30:31: ee:e1:dc:3b:97:b4:a0:9d:24:2f:b6:cf:37:f5:6a: 80:b9:62:f1:0f:bd:4d:62:99:dd:bc:da:db:19:2e: 3e:e1:8a:7e:13:26:66:58:ad:2d:67:9e:4d:f2:5d: 32:fe:0b:31:c5:c6:d5:ea:65:8b:24:0e:c1:e9:b4: b2:e2:38:1f:6e:82:e3:87:bb:d6:33:7a:be:ff:7d: 01:16:01:92:bb:82:e5:5b:27:28:06:8f:c5:c5:9b: e4:6e:64:61:e3:29:2d:14:67:25:5f:34:2e:d3:1d: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AB:B8:0F:C6:A5:BA:75:AA:84:91:A0:E2:7E:4E:55:E6:6B:B4:8D X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f5:cf:51:4f:dd:ab:3a:54:e4:85:7d:d6:1e:0e:41:07:42: 91:83:62:36:b1:e1:a8:ab:19:3e:15:41:cc:28:1b:ca:d5:e0: f0:48:95:3a:2c:27:cc:d9:69:21:95:96:f2:76:6a:d9:85:6a: 25:92:f5:14:c0:5b:bd:6e:4c:d7:3a:14:7a:7f:92:ba:fb:ed: f9:10:af:a1:87:ab:41:3c:e1:dd:cd:e3:ee:02:5d:39:d5:fe: 71:80:75:21:25:c2:f7:8e:84:91:bd:15:73:cf:ea:fa:eb:84: 2b:7a:67:69:03:68:db:c3:a6:d5:b6:9e:0b:45:f1:ea:26:1a: dd:ac:94:c5:6e:6b:6c:84:aa:f2:a5:91:2e:c8:c9:26:1d:85: 0d:ed:10:b3:81:0b:bf:3b:fe:47:f5:09:ba:6e:fa:49:13:71: ad:6b:c9:53:e8:88:f0:91:da:83:21:5e:1d:7c:24:87:a1:f4: 56:00:0b:f8:ff:2d:e0:4a:be:5f:00:32:6a:da:f0:fd:96:f5: b0:27:1d:71:39:81:a4:59:f0:8c:8b:45:cc:b8:af:2d:55:fb: c5:67:fa:0a:60:16:02:f0:e6:be:13:0b:25:65:84:1a:5a:f8: 06:5b:a6:32:74:46:f2:37:73:e5:11:8b:c0:ee:ab:65:a0:a9: 78:d2:b2:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjUxMjIyMjE0MzI0WhcNMjUxMjI5MjE0MzI0WjAYMRYwFAYD VQQDDA02OTQ5YmI3ZC1jNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpVU8ryk4RGUzhzD5JlsoZ/8ukwVYE286gKQVo6Vv4m3BAGX6RRYuIxUDRzm nt23AfTTRBNpdfVYuwc4TihlRpormXNiPMcwGuwGl3Tl+MpELob4O1lF2VQEIqE4 IvuqUBVRgA9erKMklqNJf7vT0GklpOjRnlBNNqWQWJbcLhZf28VftzKBzttEU7W/ OpTdkonAMDHu4dw7l7SgnSQvts839WqAuWLxD71NYpndvNrbGS4+4Yp+EyZmWK0t Z55N8l0y/gsxxcbV6mWLJA7B6bSy4jgfboLjh7vWM3q+/30BFgGSu4LlWycoBo/F xZvkbmRh4yktFGclXzQu0x0EZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqruA/G pbp1qoSRoOJ+TlXma7SNMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc9c9RT92rOlTkhX3WHg5BB0KRg2I2seGoqxk+FUHMKBvK1eDwSJU6 LCfM2WkhlZbydmrZhWolkvUUwFu9bkzXOhR6f5K6++35EK+hh6tBPOHdzePuAl05 1f5xgHUhJcL3joSRvRVzz+r664QremdpA2jbw6bVtp4LRfHqJhrdrJTFbmtshKry pZEuyMkmHYUN7RCzgQu/O/5H9Qm6bvpJE3Gta8lT6IjwkdqDIV4dfCSHofRWAAv4 /y3gSr5fADJq2vD9lvWwJx1xOYGkWfCMi0XMuK8tVfvFZ/oKYBYC8Oa+EwslZYQa WvgGW6YydEbyN3PlEYvA7qtloKl40rK1 -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:48 2025 by rpki-client