This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json) Hash identifier: iADon20sQ4rhFQ8KvThHN65xZlgOqaC7xPS4wRhUfIM= Subject key identifier: 59:68:10:C2:E5:84:BF:A9:9E:D2:0E:A2:E3:AC:1F:8E:9B:61:EB:EA Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft Manifest number: 091B Signing time: Mon 22 Dec 2025 19:39:30 +0000 Manifest this update: Mon 22 Dec 2025 19:39:30 +0000 Manifest next update: Mon 29 Dec 2025 19:39:30 +0000 Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: gynbtn7yBsCluSQ8JRMyKqrOCTkhpGHIKBoLqzg5pJw=) 2: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: /WRRbCj0rNywmLtoXv249Ng7AC0zIvGMMjOEBzIrMR0=) 3: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=) 4: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=) 5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: u9rGnfekIAlkNgYfnuzbJex52uZyoGapNCA6gJzdd2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: Dec 22 19:39:30 2025 GMT Not After : Dec 29 19:39:30 2025 GMT Subject: CN=69499e72-385c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:95:26:43:d4:c0:47:09:1f:b6:56:fa:90: 04:da:df:41:46:20:ca:3c:74:50:f7:f4:90:52:1a: b3:74:35:8b:86:f8:4a:70:71:97:4b:1a:3d:56:e5: 3a:e6:33:4e:29:be:1e:46:59:a5:5d:31:c5:1f:ed: 78:5d:33:06:cb:40:51:d6:4a:1f:07:a6:f5:d8:1d: 2e:47:93:66:6e:7a:23:b6:95:cc:58:ba:9b:60:cc: 70:ff:f2:10:9a:88:38:0c:12:7d:3d:2f:7d:be:e0: 23:c0:48:d6:d2:f7:a9:a1:4d:a6:7d:30:fe:a6:d9: fd:db:34:6f:33:46:9c:e3:d8:33:56:d8:9b:d6:a7: 64:fe:17:96:03:4c:8b:3b:28:8d:55:e2:76:60:86: e6:5d:ed:a3:51:24:fa:80:aa:90:a4:26:2d:8f:a1: cd:7a:42:55:74:75:82:b0:bc:11:28:04:cc:9f:94: ec:c2:bf:8a:06:27:6e:c0:cd:1b:f3:d3:5a:9b:6f: 30:a4:37:7e:31:60:3f:f1:a5:18:b4:c0:d6:a3:05: 76:4b:1c:3d:bc:9a:3d:4e:43:a3:40:89:81:4d:26: dc:ce:c8:8d:d0:a6:f0:89:f8:4e:03:6e:b8:93:af: 87:ad:6d:9a:a3:38:6c:65:74:75:de:bd:64:14:55: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:68:10:C2:E5:84:BF:A9:9E:D2:0E:A2:E3:AC:1F:8E:9B:61:EB:EA X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0d:01:09:ca:2a:45:d1:9a:b3:42:10:b3:27:33:1f:c6:4c: 2c:cf:43:dc:fa:cd:21:03:f9:d3:b1:29:4d:e7:f0:f7:2a:08: 49:18:d4:20:03:ba:cb:b8:80:b8:2b:8d:d4:63:e8:fb:df:01: 6f:0e:12:45:cc:2d:f4:fe:df:6b:6a:08:64:6a:88:0e:42:98: 0b:97:d5:bc:7b:34:aa:bd:57:1c:01:5d:96:82:2d:b1:97:d2: 7c:3f:fd:bd:2a:f2:5c:9f:67:0f:e9:97:6b:92:60:a9:45:71: 10:ef:76:64:fe:98:20:19:4f:26:25:88:b8:83:0b:16:73:cd: 73:48:df:41:cc:f1:a5:41:54:ed:a9:6e:1d:f7:ad:94:60:d7: 6f:9c:c7:6d:1a:96:eb:c7:d7:9f:16:ba:54:44:8f:b3:28:c2: f2:ba:c2:65:29:3d:11:32:1f:0c:81:21:7e:ae:7b:7c:8c:19: a0:bb:b5:2e:e7:39:73:b9:29:9b:6a:4f:86:d2:2b:04:86:1f: c6:bf:c4:2b:80:e4:c8:e1:c9:3e:45:79:2e:17:28:e4:00:e3: 1d:b9:2f:0b:29:76:fc:21:2d:50:75:1d:b5:c4:69:72:a7:85: 76:e3:5b:09:82:ee:39:f4:1d:e7:0d:a9:f5:cc:19:e2:b1:74: 06:7a:61:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjUxMjIyMTkzOTMwWhcNMjUxMjI5MTkzOTMwWjAYMRYwFAYD VQQDDA02OTQ5OWU3Mi0zODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv2VJkPUwEcJH7ZW+pAE2t9BRiDKPHRQ9/SQUhqzdDWLhvhKcHGXSxo9VuU6 5jNOKb4eRlmlXTHFH+14XTMGy0BR1kofB6b12B0uR5NmbnojtpXMWLqbYMxw//IQ mog4DBJ9PS99vuAjwEjW0vepoU2mfTD+ptn92zRvM0ac49gzVtib1qdk/heWA0yL OyiNVeJ2YIbmXe2jUST6gKqQpCYtj6HNekJVdHWCsLwRKATMn5Tswr+KBiduwM0b 89Nam28wpDd+MWA/8aUYtMDWowV2Sxw9vJo9TkOjQImBTSbczsiN0KbwifhOA264 k6+HrW2aozhsZXR13r1kFFUghQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFloEMLl hL+pntIOouOsH46bYevqMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV eWd1UkJja25IZXJ6bmJ5R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCDQEJyipF0ZqzQhCzJzMfxkwsz0Pc+s0hA/nTsSlN5/D3KghJGNQg A7rLuIC4K43UY+j73wFvDhJFzC30/t9raghkaogOQpgLl9W8ezSqvVccAV2Wgi2x l9J8P/29KvJcn2cP6ZdrkmCpRXEQ73Zk/pggGU8mJYi4gwsWc81zSN9BzPGlQVTt qW4d962UYNdvnMdtGpbrx9efFrpURI+zKMLyusJlKT0RMh8MgSF+rnt8jBmgu7Uu 5zlzuSmbak+G0isEhh/Gv8QrgOTI4ck+RXkuFyjkAOMduS8LKXb8IS1QdR21xGly p4V241sJgu459B3nDan1zBnisXQGemF2 -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:27 2025 by rpki-client