This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft File: 1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json) Hash identifier: ZCqb9L3C0kOw6Pqk3zLTy8pZBFgYCLfFAyu07SDYj3E= Subject key identifier: 65:F2:61:3B:5D:36:B3:23:8A:B8:CC:28:F9:85:71:BC:75:5E:61:96 Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft Manifest number: 30 Signing time: Tue 23 Dec 2025 06:27:37 +0000 Manifest this update: Tue 23 Dec 2025 06:27:37 +0000 Manifest next update: Tue 30 Dec 2025 06:27:37 +0000 Files and hashes: 1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: jLQ09z7PlZJ9/i7E5QRKgR66bSJUzWuXIKveOKMDXHw=) 2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Dg/Vcy50ZsOW8WbCgEni7y9JIL1pu3cmWYVSSZjfezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Validity Not Before: Dec 23 06:27:37 2025 GMT Not After : Dec 30 06:27:37 2025 GMT Subject: CN=694a3659-23cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:43:3d:00:78:09:c3:a6:49:d4:4e:a4:78: 51:2a:cc:0b:c4:4f:7e:0b:9f:60:8f:d6:eb:1d:44: cc:a2:ac:2a:93:40:41:5b:d7:93:0c:4f:17:a1:b9: b5:f9:dd:82:5f:28:ad:3a:b4:5d:2f:8e:4a:d9:a6: 94:89:8a:fe:06:7a:5c:d0:94:e6:c3:d7:ac:c0:1a: 87:d5:6d:23:9a:64:89:79:24:12:6b:df:53:13:72: 3e:43:54:4b:bf:cc:89:69:c5:ea:59:32:5b:af:63: 0e:cb:21:e0:de:19:f1:a3:b5:ff:86:a1:91:87:d8: 8e:93:b4:02:55:e6:ac:91:fa:c4:81:1f:51:fe:9f: 72:29:52:1f:85:fc:7d:71:55:cb:f0:7c:94:0d:46: 75:89:3e:ca:ca:56:9b:bd:c1:ed:e9:a1:69:29:31: 0c:7b:a4:06:02:68:a2:b5:c9:66:27:52:27:1a:bf: b6:5a:ec:49:47:7a:7c:fd:9d:4b:9b:df:ba:e4:a3: 1c:4d:cd:52:2b:f2:0d:36:62:bf:6a:31:15:11:61: 63:81:8a:96:c3:24:a4:dd:6d:6b:7c:1a:cf:49:ce: 93:ad:90:85:70:f0:cc:e3:20:91:0f:d0:ef:14:b4: 93:85:87:f2:c9:91:45:7f:6b:85:c8:02:d3:f9:3a: 92:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F2:61:3B:5D:36:B3:23:8A:B8:CC:28:F9:85:71:BC:75:5E:61:96 X509v3 Authority Key Identifier: keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c4:de:74:c5:4d:34:5d:26:33:fd:cd:1a:4b:b3:94:e1:4e: 86:8b:1c:d5:fa:13:bb:a2:44:5f:95:00:26:68:0d:18:33:ef: d9:b2:96:e0:10:e3:36:81:51:a7:27:0a:5d:d3:97:3a:54:d7: 4b:b3:30:ee:ac:a7:04:d6:3e:ca:f3:93:b3:e7:28:91:a3:8b: f5:d4:12:89:c7:de:99:d1:27:86:b1:9f:91:a7:80:15:d8:e4: 3a:fa:dd:04:99:88:f3:fa:4a:27:2b:22:12:5f:f8:5f:d6:60: b4:d2:6e:1f:b5:86:4c:80:58:24:a6:3c:96:c1:9e:a5:0d:81: 6f:c0:f6:0b:0f:f3:e0:67:dc:97:59:b5:69:28:e7:2d:89:11: d7:45:9f:72:a3:f3:0b:52:75:5e:c4:dc:da:65:ee:8c:b8:fa: 62:f5:82:c4:f9:80:3f:d8:45:67:e0:62:2e:1e:9e:85:80:cf: 9a:3f:2b:f5:10:d3:1d:38:01:fa:ad:55:cd:7e:c1:78:6f:84: 57:1e:8a:26:96:66:42:b8:87:11:b0:27:0b:d6:74:42:05:23: 55:8f:11:a3:56:28:bc:ef:cd:c5:24:dd:b9:fc:71:e9:52:7a: 3d:04:17:94:c8:4f:0f:08:37:8e:76:d3:50:f4:af:83:94:2e: f6:8d:4a:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkMxRjExMC8GA1UEBRMoRDRBNEYwQjYwMDBERTAyMjQ4QzQ2NTdBRjlERDI2QjAy M0M1RjY3OTAeFw0yNTEyMjMwNjI3MzdaFw0yNTEyMzAwNjI3MzdaMBgxFjAUBgNV BAMMDTY5NGEzNjU5LTIzY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCshkM9AHgJw6ZJ1E6keFEqzAvET34Ln2CP1usdRMyirCqTQEFb15MMTxehubX5 3YJfKK06tF0vjkrZppSJiv4GelzQlObD16zAGofVbSOaZIl5JBJr31MTcj5DVEu/ zIlpxepZMluvYw7LIeDeGfGjtf+GoZGH2I6TtAJV5qyR+sSBH1H+n3IpUh+F/H1x VcvwfJQNRnWJPsrKVpu9we3poWkpMQx7pAYCaKK1yWYnUicav7Za7ElHenz9nUub 37rkoxxNzVIr8g02Yr9qMRURYWOBipbDJKTdbWt8Gs9JzpOtkIVw8MzjIJEP0O8U tJOFh/LJkUV/a4XIAtP5OpJxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZfJhO102 syOKuMwo+YVxvHVeYZYwHwYDVR0jBBgwFoAU1KTwtgAN4CJIxGV6+d0msCPF9nkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QzFGL0U2QTdGNkI4OUE4 NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENKSXhHVjYtZDBtc0NQRjlu ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUtUd3RnQU40Q0pJeEdWNi1kMG1zQ1BGOW5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QzFGL0U2QTdGNkI4OUE4NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENK SXhHVjYtZDBtc0NQRjluay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDE3nTFTTRdJjP9zRpLs5ThToaLHNX6E7uiRF+VACZoDRgz79myluAQ 4zaBUacnCl3TlzpU10uzMO6spwTWPsrzk7PnKJGji/XUEonH3pnRJ4axn5GngBXY 5Dr63QSZiPP6SicrIhJf+F/WYLTSbh+1hkyAWCSmPJbBnqUNgW/A9gsP8+Bn3JdZ tWko5y2JEddFn3Kj8wtSdV7E3Npl7oy4+mL1gsT5gD/YRWfgYi4enoWAz5o/K/UQ 0x04AfqtVc1+wXhvhFceiiaWZkK4hxGwJwvWdEIFI1WPEaNWKLzvzcUk3bn8celS ej0EF5TITw8IN45201D0r4OULvaNSvE= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:48 2025 by rpki-client