This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: AxXa25LPmSMOY6HxP4LfZVmlOVOgxJgK56hOb9OOrNc= Subject key identifier: 04:79:42:AA:FA:B3:AE:A8:5A:06:34:42:7C:B5:5B:69:06:B6:7B:60 Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0CD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0CCD Signing time: Mon 22 Dec 2025 17:46:35 +0000 Manifest this update: Mon 22 Dec 2025 17:46:34 +0000 Manifest next update: Mon 29 Dec 2025 17:46:34 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: Qgb2z8Vqb35SyanrUHXnq0TVTIIDg44xYePjeHof6ns=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Dec 22 17:46:34 2025 GMT Not After : Dec 29 17:46:34 2025 GMT Subject: CN=694983fa-4c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:fb:88:db:e4:ba:24:5f:82:1a:d8:59:25: de:bc:d7:86:3f:1e:2c:c1:53:40:85:bc:4a:76:83: 7f:5f:9c:3c:29:1a:55:72:83:67:4d:57:67:60:bb: 17:37:21:16:58:b5:e4:26:da:0e:35:a3:82:4d:71: 82:2d:66:7f:f0:ac:57:45:bd:de:95:d8:4f:cc:74: 8b:33:9b:9f:ce:ef:5d:88:b8:4b:7b:3a:63:5a:ff: d1:7b:d6:81:26:37:5c:31:00:b3:d2:50:6a:60:0b: 4c:3d:ec:99:c3:f5:00:9e:a9:78:84:8e:56:c0:3b: 72:2d:b0:c1:00:aa:26:8b:50:3f:25:10:83:99:7c: ca:97:65:94:dc:67:2d:43:b9:48:2e:41:35:68:ec: a1:04:04:10:3e:0e:fc:d2:6d:5b:16:2b:8d:d2:67: 9b:69:c4:f0:a0:52:7a:7e:aa:4b:89:da:9e:c4:cb: 19:e2:80:39:6e:5b:b4:57:2d:b6:22:3c:37:3d:21: f3:c7:dc:ef:f2:f2:d0:d4:1a:4a:0c:d1:30:29:2d: f7:0d:23:5b:15:0a:cb:22:12:e1:bf:70:e9:5d:e2: e3:ce:d0:95:96:e8:f9:60:23:0a:86:1c:e4:69:2a: c2:47:cf:53:2e:5e:6a:36:f6:e2:92:29:b5:52:52: 0c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:79:42:AA:FA:B3:AE:A8:5A:06:34:42:7C:B5:5B:69:06:B6:7B:60 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ba:fb:1e:36:e0:a9:38:28:19:67:ff:df:99:ed:80:e6:27: ac:cc:e1:c1:f8:14:16:d7:99:0d:ba:dc:48:f1:ef:1b:44:9b: 90:58:72:dd:d0:88:4f:c4:2b:63:4a:c1:f9:d8:79:6d:8d:b4: cc:d7:ef:2f:c5:e3:4c:f5:4a:a5:e0:40:e7:fa:5d:01:51:cd: 54:f6:0d:06:0a:90:7d:92:07:70:2d:49:01:fb:9f:fb:4e:8b: c8:11:ba:6a:7c:b7:46:0c:1d:ef:37:ae:44:72:bb:da:7c:5b: 30:5a:77:2a:a1:8c:c9:0a:47:24:54:4a:57:22:74:20:46:1a: 00:62:17:70:6f:25:74:58:0f:4b:c9:34:51:9f:72:f0:82:b8: 45:e8:37:84:04:2c:a6:ac:d9:17:dc:34:79:bf:0a:1d:2b:d8: 55:2f:1b:90:13:cc:f9:30:c0:83:26:a5:d3:28:9a:95:4f:7b: cf:f9:85:ae:a4:21:db:b5:75:3f:96:a1:f0:ab:cf:99:0a:51: 93:56:84:d7:94:d9:ea:d0:cc:96:70:da:fb:39:a0:dc:e1:c9: 8d:e3:dc:dc:fd:a3:a6:4a:f6:e8:84:b3:f9:70:15:e6:19:9d: bd:03:a5:d8:96:6b:28:5e:30:87:6d:cc:75:84:c1:68:d6:de: 02:0e:a3:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjUxMjIyMTc0NjM0WhcNMjUxMjI5MTc0NjM0WjAYMRYwFAYD VQQDDA02OTQ5ODNmYS00YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNr7iNvkuiRfghrYWSXevNeGPx4swVNAhbxKdoN/X5w8KRpVcoNnTVdnYLsX NyEWWLXkJtoONaOCTXGCLWZ/8KxXRb3eldhPzHSLM5ufzu9diLhLezpjWv/Re9aB JjdcMQCz0lBqYAtMPeyZw/UAnql4hI5WwDtyLbDBAKomi1A/JRCDmXzKl2WU3Gct Q7lILkE1aOyhBAQQPg780m1bFiuN0mebacTwoFJ6fqpLidqexMsZ4oA5blu0Vy22 Ijw3PSHzx9zv8vLQ1BpKDNEwKS33DSNbFQrLIhLhv3DpXeLjztCVluj5YCMKhhzk aSrCR89TLl5qNvbikim1UlIM1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAR5Qqr6 s66oWgY0Qny1W2kGtntgMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAauvseNuCpOCgZZ//fme2A5ieszOHB+BQW15kNutxI8e8bRJuQWHLd 0IhPxCtjSsH52HltjbTM1+8vxeNM9Uql4EDn+l0BUc1U9g0GCpB9kgdwLUkB+5/7 TovIEbpqfLdGDB3vN65EcrvafFswWncqoYzJCkckVEpXInQgRhoAYhdwbyV0WA9L yTRRn3LwgrhF6DeEBCymrNkX3DR5vwodK9hVLxuQE8z5MMCDJqXTKJqVT3vP+YWu pCHbtXU/lqHwq8+ZClGTVoTXlNnq0MyWcNr7OaDc4cmN49zc/aOmSvbohLP5cBXm GZ29A6XYlmsoXjCHbcx1hMFo1t4CDqP1 -----END CERTIFICATE-----Generated at Mon Dec 22 20:27:05 2025 by rpki-client