This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: vxg7TyAw8Qn27zWJD3QZYoJAbM7+6clh2LLw6JbsBQQ= Subject key identifier: 53:00:68:63:40:20:59:95:FF:A1:4C:2B:66:73:79:DC:92:B6:06:47 Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 04B6 Signing time: Mon 22 Dec 2025 22:58:31 +0000 Manifest this update: Mon 22 Dec 2025 22:58:31 +0000 Manifest next update: Mon 29 Dec 2025 22:58:31 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: wV0txHVugcmL+fUBDeBVaOjYrouXGXC5FsNEgfllZXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: Dec 22 22:58:31 2025 GMT Not After : Dec 29 22:58:31 2025 GMT Subject: CN=6949cd17-cb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:35:27:95:3d:43:7a:6b:5b:23:4e:5b:98: 87:f6:ba:29:dc:de:2b:b7:ba:64:dc:25:b4:aa:29: 80:f7:aa:44:90:07:ee:2b:f6:bf:03:25:38:a2:6a: 9a:d2:e2:28:8b:d4:b1:24:9d:7e:0a:0f:5f:da:eb: 53:6e:0a:8b:85:ae:01:18:47:ca:6e:b1:f7:2c:db: c5:6c:91:29:34:47:4c:27:3b:1e:da:1d:c3:4e:b1: cf:09:8c:34:08:85:14:2a:62:6d:40:db:c1:df:8e: 69:89:fa:4c:67:b4:e3:45:2f:68:39:e8:33:de:4d: 43:08:2e:d1:dc:a2:56:62:dc:71:eb:d6:a6:0b:70: 4d:6d:2b:25:b8:4e:33:75:db:fc:91:cb:ad:da:bd: d4:68:1b:a4:d4:8d:7f:e2:69:b2:ad:58:db:1c:29: 44:ea:22:c9:24:3f:62:89:dc:c1:88:4f:a1:b5:1e: 66:fe:9f:d8:70:09:b1:8b:c9:fa:d9:c3:36:ab:c5: a6:0c:ce:2f:fa:c6:43:f8:58:91:ee:4b:90:fe:26: fc:85:57:03:6d:e7:e1:a8:31:26:23:b3:b9:2d:22: 46:a9:2f:7d:10:36:b7:16:f2:1b:f3:e8:14:d2:69: 25:de:51:24:4f:0c:23:4f:33:de:46:4a:e4:ca:f7: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:00:68:63:40:20:59:95:FF:A1:4C:2B:66:73:79:DC:92:B6:06:47 X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:19:b1:4e:88:71:96:8a:1f:ea:f1:fe:11:8b:b3:7f:83:77: 91:b1:35:79:da:99:a6:44:c0:5b:1c:ae:5f:ef:e7:d3:c8:e7: 58:90:6a:88:16:30:ae:94:80:aa:67:8b:f3:cf:53:20:c3:7f: 0d:17:76:8d:5b:06:77:87:44:49:8a:07:66:0e:49:ba:8b:48: 06:d5:7a:eb:6a:f0:8f:37:3f:aa:d3:51:f1:a0:1f:f8:35:f2: c5:77:a2:d9:d3:51:8b:ae:e1:4a:3d:b9:00:01:8a:a5:35:6c: 41:ce:80:3f:16:4f:bb:3a:8d:c0:c5:ec:6a:99:48:54:f9:c3: 7a:77:7e:b8:42:08:99:be:4e:b6:8f:01:5e:1c:a8:b6:6c:c3: 7c:59:e8:fa:51:e8:50:8e:20:0c:b2:19:54:38:e6:19:42:ab: 80:12:54:3d:05:3e:d1:8a:93:05:79:72:32:16:d8:db:61:0d: 96:60:5a:3c:4c:8d:4d:00:c3:d8:46:09:69:20:eb:ab:a1:b9: fc:1b:fb:bf:76:7e:cc:8f:0c:50:6b:67:45:70:b4:df:8a:7f: 69:6c:da:8f:d2:a7:d4:df:d9:7a:0b:62:c5:0a:8a:28:f0:d6: 8d:77:ec:cd:f7:53:d7:42:ad:55:66:7d:44:51:81:71:2a:c0: e9:95:e0:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjUxMjIyMjI1ODMxWhcNMjUxMjI5MjI1ODMxWjAYMRYwFAYD VQQDDA02OTQ5Y2QxNy1jYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm41J5U9Q3prWyNOW5iH9rop3N4rt7pk3CW0qimA96pEkAfuK/a/AyU4omqa 0uIoi9SxJJ1+Cg9f2utTbgqLha4BGEfKbrH3LNvFbJEpNEdMJzse2h3DTrHPCYw0 CIUUKmJtQNvB345pifpMZ7TjRS9oOegz3k1DCC7R3KJWYtxx69amC3BNbSsluE4z ddv8kcut2r3UaBuk1I1/4mmyrVjbHClE6iLJJD9iidzBiE+htR5m/p/YcAmxi8n6 2cM2q8WmDM4v+sZD+FiR7kuQ/ib8hVcDbefhqDEmI7O5LSJGqS99EDa3FvIb8+gU 0mkl3lEkTwwjTzPeRkrkyvdzvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMAaGNA IFmV/6FMK2ZzedyStgZHMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbGbFOiHGWih/q8f4Ri7N/g3eRsTV52pmmRMBbHK5f7+fTyOdYkGqI FjCulICqZ4vzz1Mgw38NF3aNWwZ3h0RJigdmDkm6i0gG1XrravCPNz+q01HxoB/4 NfLFd6LZ01GLruFKPbkAAYqlNWxBzoA/Fk+7Oo3AxexqmUhU+cN6d364QgiZvk62 jwFeHKi2bMN8Wej6UehQjiAMshlUOOYZQquAElQ9BT7RipMFeXIyFtjbYQ2WYFo8 TI1NAMPYRglpIOurobn8G/u/dn7MjwxQa2dFcLTfin9pbNqP0qfU39l6C2LFCooo 8NaNd+zN91PXQq1VZn1EUYFxKsDpleA7 -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:27 2025 by rpki-client