This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json) Hash identifier: e0RxVvugu4/HxHFqqvsXoyH6GRoB5XTWBzjDpTiVETg= Subject key identifier: 57:5D:2A:E4:7B:74:69:6A:15:7A:D4:12:F3:9B:C4:FD:B5:4B:02:60 Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft Manifest number: 66 Signing time: Tue 23 Dec 2025 05:55:52 +0000 Manifest this update: Tue 23 Dec 2025 05:55:52 +0000 Manifest next update: Tue 30 Dec 2025 05:55:52 +0000 Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: Unpf+4K5hvZw+dmLM0q+VHQ1t8zE3B6oXb+ctD4wO5M=) 2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: z4R5as/wY1NXJnurtifYAAgszDyIwiQjjqeZ9ks0TAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Dec 23 05:55:52 2025 GMT Not After : Dec 30 05:55:52 2025 GMT Subject: CN=694a2ee8-591c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:d8:a7:23:b6:17:4b:44:0c:39:13:ad:e0: 2a:58:39:54:0e:81:86:90:30:b7:1b:29:3d:0d:d5: 33:c4:3d:54:af:6c:d0:09:ee:40:f4:76:50:aa:c7: 7a:9c:81:85:92:93:fd:fb:f1:56:32:4e:f7:48:3c: 6d:0b:cb:f3:84:53:c0:2d:89:b0:67:f3:46:d0:1e: 4a:fe:02:c6:bd:39:4c:a5:b6:3d:7a:70:5f:69:97: fc:e7:27:d6:12:9d:56:11:96:82:d1:a9:ac:5b:83: 8b:3d:e8:14:cb:c0:da:f3:8f:e3:e1:5d:ea:1b:10: 10:d3:6b:60:e9:42:67:c7:09:f8:bc:f8:15:a4:c9: db:5b:e0:3c:c9:84:ac:c7:71:8a:0a:47:3a:2e:f4: b3:f4:e1:da:fe:f7:40:1f:f1:63:3b:b2:0b:f0:f1: 6f:50:d3:52:86:20:18:d6:56:cc:39:68:e0:57:0c: 58:f4:3f:d4:a1:fa:ae:d8:9e:ae:9d:c9:cb:87:51: 21:2a:1c:fa:fd:82:36:ac:55:76:f9:86:6d:e1:6e: fc:f5:e8:da:7d:8c:6d:dd:f2:c3:02:a1:32:3d:ca: 5d:9d:5d:17:6d:20:b2:18:2d:bf:92:af:ea:0e:26: 5c:30:3f:27:26:85:23:8a:89:6b:1a:4a:a2:f8:0f: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5D:2A:E4:7B:74:69:6A:15:7A:D4:12:F3:9B:C4:FD:B5:4B:02:60 X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e2:68:d1:c4:90:6b:b2:c9:18:36:46:68:43:ed:1a:32:38: c9:3d:14:5e:42:76:98:f5:0f:aa:66:cd:58:85:49:66:6b:9c: 4f:aa:bf:3f:c3:29:00:93:34:03:f8:c1:4c:c2:b5:fd:82:c8: be:f0:5b:b6:80:28:1c:6a:c0:9f:d7:27:91:fb:30:21:87:7b: ea:e9:02:61:e0:cb:61:17:ae:ec:6c:21:ee:fb:61:01:a1:12: 23:64:8d:b2:44:f6:07:39:53:61:95:a7:62:1d:fe:04:37:65: c1:9e:fe:4d:18:ef:c8:8d:15:e5:7b:dc:ae:be:40:7d:65:d8: 3a:04:c5:cf:ab:a8:33:48:5f:59:c0:6e:d1:1f:27:45:31:3f: ad:32:34:a7:ab:e5:6b:80:fc:7f:80:7a:57:87:8c:90:55:a8: b5:5b:2f:97:95:b7:73:04:e1:57:9a:f8:a2:59:09:e5:54:7b: 62:58:f2:ec:bb:0b:f1:77:ad:ca:c1:f7:d0:42:36:f5:b2:fa: 6b:4c:10:7b:fa:82:45:27:7c:05:7a:7a:55:3a:82:cc:e0:91: 07:1c:ca:20:05:3d:68:20:e9:c7:dc:52:d1:22:54:e8:d9:c3: 59:7a:cc:51:e1:b4:f2:ea:d6:6e:4a:30:fb:48:95:f2:52:07: 89:f6:96:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEz NUEyNzExMC8GA1UEBRMoOTI4RThBQTgwRDk5QTcyM0Y2QTkwMjFBRTVFN0IwMzJB Q0VEREI3QTAeFw0yNTEyMjMwNTU1NTJaFw0yNTEyMzAwNTU1NTJaMBgxFjAUBgNV BAMMDTY5NGEyZWU4LTU5MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDndtinI7YXS0QMOROt4CpYOVQOgYaQMLcbKT0N1TPEPVSvbNAJ7kD0dlCqx3qc gYWSk/378VYyTvdIPG0Ly/OEU8AtibBn80bQHkr+Asa9OUyltj16cF9pl/znJ9YS nVYRloLRqaxbg4s96BTLwNrzj+PhXeobEBDTa2DpQmfHCfi8+BWkydtb4DzJhKzH cYoKRzou9LP04dr+90Af8WM7sgvw8W9Q01KGIBjWVsw5aOBXDFj0P9Sh+q7Ynq6d ycuHUSEqHPr9gjasVXb5hm3hbvz16Np9jG3d8sMCoTI9yl2dXRdtILIYLb+Sr+oO JlwwPycmhSOKiWsaSqL4D4mtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV10q5Ht0 aWoVetQS85vE/bVLAmAwHwYDVR0jBBgwFoAUko6KqA2ZpyP2qQIa5eewMqzt23ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QTI3LzlEQzIyMDU0NEE1 ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva282S3FBMlpweVAycVFJYTVlZXdNcXp0MjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 QTI3LzlEQzIyMDU0NEE1ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQ MnFRSWE1ZWV3TXF6dDIzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADfiaNHEkGuyyRg2RmhD7RoyOMk9FF5Cdpj1D6pmzViFSWZrnE+qvz/D KQCTNAP4wUzCtf2CyL7wW7aAKBxqwJ/XJ5H7MCGHe+rpAmHgy2EXruxsIe77YQGh EiNkjbJE9gc5U2GVp2Id/gQ3ZcGe/k0Y78iNFeV73K6+QH1l2DoExc+rqDNIX1nA btEfJ0UxP60yNKer5WuA/H+AeleHjJBVqLVbL5eVt3ME4Vea+KJZCeVUe2JY8uy7 C/F3rcrB99BCNvWy+mtMEHv6gkUnfAV6elU6gszgkQccyiAFPWgg6cfcUtEiVOjZ w1l6zFHhtPLq1m5KMPtIlfJSB4n2lmw= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:37 2025 by rpki-client