This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: /hhcNtDJOvd00l56+GoPQAg6abzGU0jwRxUQ2ldGK0M= Subject key identifier: 6A:4C:24:D9:6E:99:32:39:E3:C8:00:37:F8:ED:A0:07:D2:F5:D2:09 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1AAC Signing time: Mon 22 Dec 2025 16:06:58 +0000 Manifest this update: Mon 22 Dec 2025 16:06:58 +0000 Manifest next update: Mon 29 Dec 2025 16:06:58 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: VtG+1QR5K2ELkZx85k3HtKNG9lNbpkWDnb5/NaAKb9Q=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: D4FdDOMn9kYOe8wUYl/7g0SwBt2d9VcBYOrZDNcFK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6862 (0x1ace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Dec 22 16:06:58 2025 GMT Not After : Dec 29 16:06:58 2025 GMT Subject: CN=69496ca2-6c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:17:7f:67:fc:7d:96:6f:d3:9f:a8:a8:18: 23:ef:5b:8c:d9:d5:45:4e:8d:a5:94:cc:82:20:85: f0:2e:32:c3:ad:d7:88:9d:ac:7c:48:85:7c:b9:04: 8e:8f:4f:09:78:6b:bd:f3:68:7e:7e:96:6c:46:a8: a4:ee:aa:53:64:06:ff:2a:ed:4a:62:c8:04:10:36: bd:88:d9:20:20:15:d2:ad:24:07:cc:51:98:f4:d7: 63:21:40:c9:83:39:90:f2:21:a2:8d:f3:d4:b0:7a: 0a:37:a4:04:ea:4c:d0:5c:e1:dd:18:22:cd:b8:3f: 0d:58:ef:a9:5d:88:87:db:f5:63:db:a0:54:61:aa: b8:2e:b4:e2:69:51:a6:e5:e2:5b:d8:44:9a:0b:d5: 7b:1e:62:ec:29:3b:1a:e4:03:37:b0:ac:8c:15:3b: 1f:c9:33:33:47:0a:5e:9a:25:a0:b8:da:26:96:ee: 98:75:96:c0:1b:d8:1c:a2:df:c6:37:f3:92:66:6d: a8:9d:d7:20:e9:b7:30:f9:85:77:55:26:4d:4a:43: 69:a2:0b:92:2f:ef:a7:99:15:53:36:fc:85:b4:fe: 9d:b9:3d:d7:41:ae:3b:c7:74:26:3c:3d:55:d1:7c: f3:03:0b:b7:ea:62:bd:06:ff:b1:25:4b:3a:1e:f9: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:24:D9:6E:99:32:39:E3:C8:00:37:F8:ED:A0:07:D2:F5:D2:09 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:7e:e4:54:f3:41:15:1f:32:74:a3:0e:c0:5c:4d:43:36:7b: 1b:9d:2a:79:09:83:c8:ea:25:5f:02:3a:c5:05:09:f0:15:78: 7c:64:ec:32:ef:ce:bc:fc:ab:5e:ed:15:1f:73:23:23:33:31: aa:ae:a2:d0:77:fa:8c:79:2f:c2:29:ab:d2:cc:d8:4a:53:4f: a3:21:de:3b:1c:4f:c3:39:91:16:30:d2:86:f1:2b:d5:a4:36: 37:e4:43:84:b7:05:b4:61:ea:e4:17:41:19:e9:c8:94:37:c8: ba:12:9b:f8:c8:4f:20:30:10:83:b7:10:13:e1:ea:34:27:f6: d1:2b:5d:b8:db:9a:e7:4e:31:5a:68:01:66:bf:5d:fb:63:c3: 41:e7:d9:f3:cd:2f:d3:ed:e1:07:dc:f5:56:1e:4c:12:65:9c: 4d:ce:df:ec:f4:d0:c9:72:0e:21:13:57:9c:46:06:0b:97:f7: 08:1e:2c:d5:25:9b:db:06:12:ba:42:cd:5b:3d:15:95:00:81: cf:b7:6c:01:6c:d5:c4:be:8d:4c:b7:df:15:aa:2e:c2:6f:1a: 2d:a3:a8:79:82:01:15:9d:31:25:d0:62:94:05:5e:c9:9c:60: c0:76:3f:cd:8c:26:4b:3b:4b:32:ea:6e:87:7b:47:48:e6:e2: 4b:1a:bb:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUxMjIyMTYwNjU4WhcNMjUxMjI5MTYwNjU4WjAYMRYwFAYD VQQDDA02OTQ5NmNhMi02YzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CQXf2f8fZZv05+oqBgj71uM2dVFTo2llMyCIIXwLjLDrdeInax8SIV8uQSO j08JeGu982h+fpZsRqik7qpTZAb/Ku1KYsgEEDa9iNkgIBXSrSQHzFGY9NdjIUDJ gzmQ8iGijfPUsHoKN6QE6kzQXOHdGCLNuD8NWO+pXYiH2/Vj26BUYaq4LrTiaVGm 5eJb2ESaC9V7HmLsKTsa5AM3sKyMFTsfyTMzRwpemiWguNomlu6YdZbAG9gcot/G N/OSZm2ondcg6bcw+YV3VSZNSkNpoguSL++nmRVTNvyFtP6duT3XQa47x3QmPD1V 0XzzAwu36mK9Bv+xJUs6Hvn9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpMJNlu mTI548gAN/jtoAfS9dIJMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUfuRU80EVHzJ0ow7AXE1DNnsbnSp5CYPI6iVfAjrFBQnwFXh8ZOwy 7868/Kte7RUfcyMjMzGqrqLQd/qMeS/CKavSzNhKU0+jId47HE/DOZEWMNKG8SvV pDY35EOEtwW0YerkF0EZ6ciUN8i6Epv4yE8gMBCDtxAT4eo0J/bRK12425rnTjFa aAFmv137Y8NB59nzzS/T7eEH3PVWHkwSZZxNzt/s9NDJcg4hE1ecRgYLl/cIHizV JZvbBhK6Qs1bPRWVAIHPt2wBbNXEvo1Mt98Vqi7Cbxoto6h5ggEVnTEl0GKUBV7J nGDAdj/NjCZLO0sy6m6He0dI5uJLGrv8 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:19 2025 by rpki-client