This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json) Hash identifier: VQpOw2CPOhwcpI+OB3I0FPPDyxVXVgg3FhsLjJ4w4EE= Subject key identifier: 28:7E:4A:50:BF:87:24:1C:EA:69:81:9A:DA:3D:39:64:4D:5E:7F:B2 Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Certificate serial: 0A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft Manifest number: 0A79 Signing time: Mon 22 Dec 2025 19:02:19 +0000 Manifest this update: Mon 22 Dec 2025 19:02:18 +0000 Manifest next update: Mon 29 Dec 2025 19:02:18 +0000 Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: 3J9QEsFkw0rdj1uXMSH7FipjFWG8L2XOQNlCFHb/h8w=) 2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: OgrtZob9BenmszWmMepyuR4+jTnWhH21Nc4ELG9DAkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2689 (0xa81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Validity Not Before: Dec 22 19:02:18 2025 GMT Not After : Dec 29 19:02:18 2025 GMT Subject: CN=694995bb-3c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:7b:ce:e6:58:f6:87:97:24:cf:cb:02:36: ac:09:c7:7b:03:b6:04:68:bd:d2:b6:9d:7a:fa:76: c6:9e:90:6e:e3:43:a4:60:70:e2:a3:4e:72:dc:84: f0:61:57:a5:57:62:5b:29:6b:07:06:2f:f8:8b:f1: 99:d6:99:c9:70:75:25:6c:7d:86:a6:31:7c:2f:c2: 9f:d1:80:22:cf:99:8e:e0:4e:e7:85:e6:a9:ba:bf: 64:e9:27:55:8e:7c:62:5e:05:df:ab:1b:5e:44:d6: 5c:10:af:2b:ba:00:c8:0a:d6:23:a0:64:d1:23:9e: 5f:ad:8d:2c:83:64:7b:df:7e:54:a5:f3:f5:1d:7d: 59:60:62:7f:b7:3e:93:f8:c7:11:83:af:81:27:56: b6:1c:f9:68:00:49:b1:2f:37:f3:a2:a7:69:06:45: 1e:d8:e6:28:de:df:35:25:b6:23:c5:bd:d8:21:1c: 5a:f3:bd:c8:ba:e5:5a:41:64:9b:d2:31:6a:2c:93: 05:ae:9e:f9:f5:b6:d6:d7:b0:62:e4:9c:3d:a4:6a: 24:91:fb:0d:69:f8:b6:ac:94:48:8f:4e:3b:ba:d0: a0:99:37:fc:6b:24:78:f6:77:93:75:b4:ef:c6:75: 45:6a:cb:f7:c3:01:c3:db:c5:1c:c9:1a:64:75:cf: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7E:4A:50:BF:87:24:1C:EA:69:81:9A:DA:3D:39:64:4D:5E:7F:B2 X509v3 Authority Key Identifier: keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8c:b8:70:b6:4a:52:26:a0:6f:9e:69:ed:fb:e2:32:52:e4: c2:f3:14:0e:14:52:f1:ec:33:9f:a2:d4:39:b1:eb:93:83:c5: 3d:5f:7f:a8:90:6f:b7:98:b1:20:4f:9e:88:2e:6a:c1:c9:fd: f9:1d:67:f7:12:df:3a:d6:9a:a2:cc:ab:6f:8c:8e:be:cf:eb: be:a3:84:3d:6a:4e:0a:72:b1:49:b2:e0:43:dd:82:9c:95:32: f1:9c:c4:0b:55:ae:b6:ec:f8:eb:ee:d4:a7:17:7b:07:48:47: 42:64:01:a9:f9:82:f5:54:43:81:31:ef:72:a0:26:41:70:81: 75:1a:19:31:b3:ba:71:54:ce:e2:1f:3e:49:7f:0f:b0:28:7e: 33:bc:b3:5e:37:f9:c0:fa:8f:1b:d5:b5:53:db:5b:26:7f:33: 01:44:20:d1:f1:3b:80:1f:f5:00:88:f2:70:73:ed:6e:40:d7: e6:46:e7:d2:1a:fb:b6:3b:e8:84:63:d5:34:e6:c4:85:03:6c: 63:52:6b:6d:be:07:4f:7c:d0:45:0e:27:89:e0:d0:9f:17:7b: 92:ed:a1:3d:56:1e:ef:09:1e:84:0b:e2:9b:47:df:9e:05:46: 52:38:11:c8:39:15:0d:cb:af:6e:01:5b:7b:df:b9:95:b7:8f: 4c:5f:54:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC QkFCOUM4MUMwHhcNMjUxMjIyMTkwMjE4WhcNMjUxMjI5MTkwMjE4WjAYMRYwFAYD VQQDDA02OTQ5OTViYi0zYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLl7zuZY9oeXJM/LAjasCcd7A7YEaL3Stp16+nbGnpBu40OkYHDio05y3ITw YVelV2JbKWsHBi/4i/GZ1pnJcHUlbH2GpjF8L8Kf0YAiz5mO4E7nheapur9k6SdV jnxiXgXfqxteRNZcEK8rugDICtYjoGTRI55frY0sg2R7335UpfP1HX1ZYGJ/tz6T +McRg6+BJ1a2HPloAEmxLzfzoqdpBkUe2OYo3t81JbYjxb3YIRxa873IuuVaQWSb 0jFqLJMFrp759bbW17Bi5Jw9pGokkfsNafi2rJRIj047utCgmTf8ayR49neTdbTv xnVFasv3wwHD28UcyRpkdc/AgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCh+SlC/ hyQc6mmBmto9OWRNXn+yMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf cWNaSk1PWkJteS03cTV5QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+jLhwtkpSJqBvnmnt++IyUuTC8xQOFFLx7DOfotQ5seuTg8U9X3+o kG+3mLEgT56ILmrByf35HWf3Et861pqizKtvjI6+z+u+o4Q9ak4KcrFJsuBD3YKc lTLxnMQLVa627Pjr7tSnF3sHSEdCZAGp+YL1VEOBMe9yoCZBcIF1Ghkxs7pxVM7i Hz5Jfw+wKH4zvLNeN/nA+o8b1bVT21smfzMBRCDR8TuAH/UAiPJwc+1uQNfmRufS Gvu2O+iEY9U05sSFA2xjUmttvgdPfNBFDieJ4NCfF3uS7aE9Vh7vCR6EC+KbR9+e BUZSOBHIORUNy69uAVt737mVt49MX1SS -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:03 2025 by rpki-client