This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft File: KKyX2Zh-eNvuncufA3NcKDvOGGI.mft (raw, json) Hash identifier: mZiE1E/nGRcjNEsYMGi4KmXIDkZ2MhAlENgkaLJLgkU= Subject key identifier: 1E:ED:06:E5:4F:9B:C7:A0:FF:3C:5A:18:D1:DB:3D:41:F9:22:EF:F4 Authority key identifier: 28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 Certificate issuer: /CN=A9157BC3/serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft Manifest number: 0225 Signing time: Tue 23 Dec 2025 01:07:55 +0000 Manifest this update: Tue 23 Dec 2025 01:07:55 +0000 Manifest next update: Tue 30 Dec 2025 01:07:55 +0000 Files and hashes: 1: KKyX2Zh-eNvuncufA3NcKDvOGGI.crl (hash: jBFhK0yAaiEnWVTs/5w9+oYSAcjWNWbCuJPRI7uQxQc=) 2: 1FCD9DE2926611EDA99A9419C4F9AE02.roa (hash: RqBWzz5uXzyQ1KueU4cHYCTj7govMSTdgiL2egEdolc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BC3, serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Validity Not Before: Dec 23 01:07:55 2025 GMT Not After : Dec 30 01:07:55 2025 GMT Subject: CN=6949eb6b-ccf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:10:4e:91:df:18:a1:62:bc:37:c8:74:1e: 79:71:4a:7f:c6:ac:01:17:77:bf:d1:e6:98:3f:8a: c9:3c:d9:c7:68:a7:8c:6b:70:f2:dd:b0:38:38:68: e8:80:02:86:06:93:75:cb:c9:45:2c:2e:15:2c:69: cd:6a:02:e4:7d:47:b0:60:9b:2e:2b:14:6b:fb:76: 7f:24:14:af:ea:f2:23:8e:88:35:99:66:6c:00:f0: 22:5a:b7:cf:b6:86:8a:0d:15:88:98:ac:a0:68:fe: 26:53:d0:98:ce:ae:29:c8:f5:2f:49:eb:40:4c:ae: ab:af:a7:00:70:f8:cc:5e:00:74:92:7e:0b:0e:d7: e5:1a:bb:af:b6:a5:a3:9f:3e:b0:bc:3f:bc:ab:b5: e0:1f:29:f4:af:93:8f:ad:25:41:9f:8f:a2:95:f1: 9b:2d:a0:b9:34:7d:34:41:04:4e:69:25:69:0b:95: 3a:ed:9c:47:b0:94:2e:9a:56:d1:2b:df:e8:90:9d: 8d:25:fc:7b:99:1a:1e:40:25:bf:bf:02:74:dc:d7: 0d:bc:7e:40:a8:f3:0f:b8:b7:f3:a1:e8:6c:c9:ff: b9:62:23:50:c9:ed:a1:71:48:5e:03:f7:63:24:6d: c8:3f:56:42:ff:42:a3:e7:9b:43:5d:ad:f2:29:20: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:ED:06:E5:4F:9B:C7:A0:FF:3C:5A:18:D1:DB:3D:41:F9:22:EF:F4 X509v3 Authority Key Identifier: keyid:28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8f:7c:1c:54:d0:78:05:1c:8f:46:b8:c5:67:f8:84:dd:6b: e1:63:1e:ab:c1:ba:d4:b1:17:2c:3b:e5:51:dd:05:9e:87:44: 33:35:59:5e:14:2a:fb:6a:c2:01:3d:16:5e:09:ff:90:5a:e8: f2:39:75:36:6a:e6:ef:4a:2f:ca:d7:79:5d:43:b2:1b:5a:0b: 13:61:16:c7:bd:32:eb:ca:59:b4:b1:bb:d9:f9:15:df:f7:9b: 9a:91:0e:49:93:2f:8d:49:d2:13:a5:2c:d1:41:98:38:50:14: 64:69:5a:e7:59:54:50:ce:2b:31:79:68:8a:38:40:bc:8a:49: d5:c7:cb:39:32:c1:e7:2e:83:94:27:22:53:a9:85:55:cc:2f: 50:8a:d0:91:02:fb:aa:ae:52:53:94:ed:4a:22:8b:6a:ed:5f: f7:25:e4:a3:05:ff:44:83:05:f8:e2:a0:46:c8:35:05:c5:91: 4e:bc:ec:d3:cd:cb:f2:23:01:07:fb:36:b6:ae:7d:a1:a6:b1: ba:14:9d:43:b3:65:b5:99:cc:57:59:c0:93:1b:f5:cb:0c:b2: 4e:d1:1a:b0:e5:6c:6a:50:3b:54:9e:dc:1b:eb:8d:f7:9f:f5: 94:f1:b4:6c:ea:cd:96:7c:82:cf:53:27:69:3f:b5:3b:88:e2: 13:35:95:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCQzMxMTAvBgNVBAUTKDI4QUM5N0Q5OTg3RTc4REJFRTlEQ0I5RjAzNzM1QzI4 M0JDRTE4NjIwHhcNMjUxMjIzMDEwNzU1WhcNMjUxMjMwMDEwNzU1WjAYMRYwFAYD VQQDDA02OTQ5ZWI2Yi1jY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweMQTpHfGKFivDfIdB55cUp/xqwBF3e/0eaYP4rJPNnHaKeMa3Dy3bA4OGjo gAKGBpN1y8lFLC4VLGnNagLkfUewYJsuKxRr+3Z/JBSv6vIjjog1mWZsAPAiWrfP toaKDRWImKygaP4mU9CYzq4pyPUvSetATK6rr6cAcPjMXgB0kn4LDtflGruvtqWj nz6wvD+8q7XgHyn0r5OPrSVBn4+ilfGbLaC5NH00QQROaSVpC5U67ZxHsJQumlbR K9/okJ2NJfx7mRoeQCW/vwJ03NcNvH5AqPMPuLfzoehsyf+5YiNQye2hcUheA/dj JG3IP1ZC/0Kj55tDXa3yKSDbYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7tBuVP m8eg/zxaGNHbPUH5Iu/0MB8GA1UdIwQYMBaAFCisl9mYfnjb7p3LnwNzXCg7zhhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JDMy83MDhFNkY2ODky NjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVOdnVuY3VmQTNOY0tEdk9H R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tLeVgyWmgtZU52dW5jdWZBM05jS0R2T0dHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JDMy83MDhFNkY2ODkyNjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVO dnVuY3VmQTNOY0tEdk9HR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFj3wcVNB4BRyPRrjFZ/iE3WvhYx6rwbrUsRcsO+VR3QWeh0QzNVle FCr7asIBPRZeCf+QWujyOXU2aubvSi/K13ldQ7IbWgsTYRbHvTLrylm0sbvZ+RXf 95uakQ5Jky+NSdITpSzRQZg4UBRkaVrnWVRQzisxeWiKOEC8iknVx8s5MsHnLoOU JyJTqYVVzC9QitCRAvuqrlJTlO1KIotq7V/3JeSjBf9EgwX44qBGyDUFxZFOvOzT zcvyIwEH+za2rn2hprG6FJ1Ds2W1mcxXWcCTG/XLDLJO0Rqw5WxqUDtUntwb6433 n/WU8bRs6s2WfILPUydpP7U7iOITNZVX -----END CERTIFICATE-----Generated at Tue Dec 23 20:04:28 2025 by rpki-client