This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json) Hash identifier: keFKpLaJ4YtZmqjVKsbDLM90qupFJ5wPhRwO8bVvCp8= Subject key identifier: 84:72:D4:83:7F:95:B0:4F:AF:1B:DD:E5:8F:D6:03:B2:89:42:6D:02 Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft Manifest number: 0E Signing time: Wed 03 Dec 2025 06:07:24 +0000 Manifest this update: Wed 03 Dec 2025 06:07:24 +0000 Manifest next update: Wed 10 Dec 2025 06:07:23 +0000 Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: XgRi7sqfOdJOZvJbqk0cJckVreSPO46lIwu7x1ZJv8w=) 2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: iFszXnez3BpB7Nejqqha0Uy0GZNQHVhj2pVkoNknBhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Dec 3 06:07:24 2025 GMT Not After : Dec 10 06:07:23 2025 GMT Subject: CN=692fd39c-2302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:25:7d:f4:7b:c9:62:89:7f:bf:9b:44:a8: 82:e1:bf:02:8c:be:d7:5e:5b:c3:3d:48:b9:5d:6d: 73:43:ae:79:92:97:8c:0f:1c:13:b8:b3:c2:f1:c4: 03:5f:1d:2a:24:11:6a:7e:f4:92:d3:25:24:66:f5: cf:f1:87:41:82:7e:6b:6d:c2:fd:ed:81:76:6d:a8: 46:2e:a8:81:a2:9e:b9:19:7e:1e:ad:1c:50:76:56: bf:2a:a8:c8:22:9d:a2:20:c8:de:0f:34:bf:e9:c5: 1e:22:5b:14:2c:7a:b6:21:e6:76:86:0f:d1:20:6b: ae:da:a1:65:76:b1:97:c2:70:2e:cf:07:cb:db:cc: 22:bb:b0:97:aa:e1:e8:85:4b:eb:05:55:4a:48:04: 49:4d:67:1a:93:a8:6b:e2:d3:8e:48:14:37:5b:2d: 94:63:31:1c:29:06:19:05:87:31:90:24:2d:84:7e: 32:d6:c6:f9:44:a2:ce:59:6d:b1:71:44:cf:c2:d9: 6a:28:1d:a1:b2:7d:72:10:f6:05:67:8d:ee:42:c9: 55:fb:dd:62:d2:1d:62:4e:f5:ba:73:f9:c8:cc:19: d5:d8:76:63:7b:16:ef:6b:2d:f7:88:58:14:35:cd: e0:b3:58:98:1f:22:ff:b7:08:c4:77:eb:2f:23:20: 51:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:72:D4:83:7F:95:B0:4F:AF:1B:DD:E5:8F:D6:03:B2:89:42:6D:02 X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a7:1b:ba:52:4c:20:1c:ab:45:53:3c:e6:dd:b1:db:26:68: 7a:9d:53:c5:14:07:22:59:32:cb:a7:f2:75:ca:52:e2:94:f5: 4a:d4:49:96:6c:cb:6b:05:ed:d8:59:95:3b:74:d7:d3:78:ff: 39:57:b8:4e:37:e5:6a:f8:c7:26:73:1b:73:aa:a8:04:c6:43: d8:5d:c5:c0:1d:8a:7c:95:a4:9c:60:a1:3d:2b:96:5a:b2:8f: e6:a4:1c:47:42:d9:7e:e1:82:e2:55:32:9b:99:fe:0b:71:63: 25:51:d6:d4:b1:03:95:c5:a9:76:21:4b:aa:92:11:96:33:01: 35:92:b1:70:b7:e5:f8:2d:d0:76:47:fb:bb:30:4d:60:de:6d: 17:c7:23:74:76:7e:6a:ed:76:e2:73:81:10:d9:d9:50:a7:f5: 27:8a:18:77:d3:f9:5e:7d:b1:12:31:01:83:a7:80:01:d2:90: 99:b2:10:19:99:e4:9b:15:0e:56:af:eb:d5:66:3e:48:23:e8: 19:cc:b7:e3:6b:3a:80:73:e0:b6:e6:14:58:5a:26:f8:e1:de: ad:dc:d6:e7:96:eb:05:15:b7:9f:75:7b:6b:f1:9f:2d:63:7f: 4e:10:42:91:40:ba:c6:e4:40:fb:2c:e7:c3:9f:98:d2:fb:6d: a6:de:6b:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNTEyMDMwNjA3MjRaFw0yNTEyMTAwNjA3MjNaMBgxFjAUBgNV BAMTDTY5MmZkMzljLTIzMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkCCV99HvJYol/v5tEqILhvwKMvtdeW8M9SLldbXNDrnmSl4wPHBO4s8LxxANf HSokEWp+9JLTJSRm9c/xh0GCfmttwv3tgXZtqEYuqIGinrkZfh6tHFB2Vr8qqMgi naIgyN4PNL/pxR4iWxQserYh5naGD9Ega67aoWV2sZfCcC7PB8vbzCK7sJeq4eiF S+sFVUpIBElNZxqTqGvi045IFDdbLZRjMRwpBhkFhzGQJC2EfjLWxvlEos5ZbbFx RM/C2WooHaGyfXIQ9gVnje5CyVX73WLSHWJO9bpz+cjMGdXYdmN7Fu9rLfeIWBQ1 zeCzWJgfIv+3CMR36y8jIFGPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhHLUg3+V sE+vG93lj9YDsolCbQIwHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz Qjg3LzIzRDE1MjhBQkNFMzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055 U1U3QXVKVDJ6dm5SYXFGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKWnG7pSTCAcq0VTPObdsdsmaHqdU8UUByJZMsun8nXKUuKU9UrUSZZs y2sF7dhZlTt019N4/zlXuE435Wr4xyZzG3OqqATGQ9hdxcAdinyVpJxgoT0rllqy j+akHEdC2X7hguJVMpuZ/gtxYyVR1tSxA5XFqXYhS6qSEZYzATWSsXC35fgt0HZH +7swTWDebRfHI3R2fmrtduJzgRDZ2VCn9SeKGHfT+V59sRIxAYOngAHSkJmyEBmZ 5JsVDlav69VmPkgj6BnMt+NrOoBz4LbmFFhaJvjh3q3c1ueW6wUVt591e2vxny1j f04QQpFAusbkQPss58OfmNL7babea2A= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:49 2025 by rpki-client