This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: gzCE9ggWykd72yZ6wlE7l2tb5QDSg6ob9ybwYBAodUw= Subject key identifier: 9C:7A:CC:6F:67:05:AB:B7:E3:3E:6D:9C:3E:B7:C2:4D:88:CE:4D:03 Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 06D9 Signing time: Mon 22 Dec 2025 21:17:43 +0000 Manifest this update: Mon 22 Dec 2025 21:17:42 +0000 Manifest next update: Mon 29 Dec 2025 21:17:42 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: TRahuE4bex5T11Iv7acFKFy1W3tSK7bKSX4HhtkEXhQ=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: TnZM67noo4lbQHfXpAgCtw+JAFkneMpGmuhyQRw2ydg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Dec 22 21:17:42 2025 GMT Not After : Dec 29 21:17:42 2025 GMT Subject: CN=6949b577-426f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:96:a3:8e:1e:2b:64:a4:8a:11:34:3e:f5: 06:34:1c:97:42:d3:ae:ea:fd:f5:48:46:c9:89:f9: a8:1a:25:28:6c:72:49:15:a1:6b:8d:98:20:e7:96: 73:07:ca:7d:92:d3:6d:a6:5c:30:31:e4:6e:24:ed: 75:bf:f9:9e:61:54:73:50:f8:08:5f:6d:e8:9d:fe: dc:d9:2a:b5:41:3b:24:7a:d3:02:a3:df:1f:b3:fb: 99:89:7b:50:70:7f:01:31:f9:cd:d2:62:e5:fe:c7: 62:64:37:c6:85:54:dc:2b:67:92:c6:67:0b:04:27: 1c:d3:ef:af:34:cb:59:3f:b9:37:7a:b7:6d:4a:ed: 46:05:ea:a0:0f:cd:49:ce:95:fd:f5:8d:8c:55:48: 21:c0:47:c8:06:31:f2:e3:88:7e:c1:0b:13:86:ff: 2e:6e:c4:96:de:3b:06:c0:8f:aa:1c:35:de:ee:2d: 08:d3:13:6b:c6:39:5f:33:91:1e:50:56:2b:e9:21: 8a:88:2c:c6:ae:7d:af:0d:d5:cf:4c:09:78:f5:3f: 68:a9:43:e3:94:92:c3:6d:dd:1c:e9:1f:c6:a4:2a: cc:a1:d0:9a:a4:75:04:99:16:ca:50:a6:44:5d:44: d4:f0:52:c1:ff:56:e2:6c:18:10:73:b9:21:eb:b0: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7A:CC:6F:67:05:AB:B7:E3:3E:6D:9C:3E:B7:C2:4D:88:CE:4D:03 X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ee:21:6b:ef:2c:88:e2:35:65:5c:d6:b9:12:70:cb:e7:13: 25:37:d2:f7:5c:f2:b0:6c:a8:bb:0f:cb:09:f9:30:7a:b3:6e: ef:c4:44:f8:62:5c:70:f1:41:32:81:94:86:da:6b:7c:90:58: 93:64:6d:37:97:86:dc:b9:eb:19:d7:2f:37:29:f7:56:a8:e3: f6:56:d1:c0:66:21:1a:fa:72:04:70:24:ea:3e:ec:2c:1c:46: 51:a9:1e:bb:e9:27:0b:dd:35:38:b9:9e:8e:6f:17:4d:c4:5e: 02:cc:32:b6:81:cc:16:89:e8:9a:12:f2:9a:8f:b2:81:c3:3d: 94:7d:50:bd:13:3a:23:50:cf:b6:cc:99:09:54:ca:56:ee:1f: 14:35:e2:d7:1c:63:6a:ed:8d:46:fd:5a:78:64:39:46:7c:8e: 02:47:41:71:ff:e8:fb:21:ba:ae:a8:c5:36:67:ae:e0:ad:5f: 80:eb:f2:4e:76:46:4f:2c:89:9e:24:85:5b:c4:96:96:ae:a3: b2:e2:27:ed:55:4d:89:e2:7d:df:be:10:04:fb:f7:dd:02:ef: b5:39:68:90:0f:db:15:7e:fb:1f:e9:df:e8:d0:69:03:54:f9: 8b:06:52:c3:88:22:06:35:e1:d0:ee:86:7f:e4:d4:c1:be:9e: d8:cb:9c:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjUxMjIyMjExNzQyWhcNMjUxMjI5MjExNzQyWjAYMRYwFAYD VQQDDA02OTQ5YjU3Ny00MjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fyWo44eK2SkihE0PvUGNByXQtOu6v31SEbJifmoGiUobHJJFaFrjZgg55Zz B8p9ktNtplwwMeRuJO11v/meYVRzUPgIX23onf7c2Sq1QTsketMCo98fs/uZiXtQ cH8BMfnN0mLl/sdiZDfGhVTcK2eSxmcLBCcc0++vNMtZP7k3erdtSu1GBeqgD81J zpX99Y2MVUghwEfIBjHy44h+wQsThv8ubsSW3jsGwI+qHDXe7i0I0xNrxjlfM5Ee UFYr6SGKiCzGrn2vDdXPTAl49T9oqUPjlJLDbd0c6R/GpCrModCapHUEmRbKUKZE XUTU8FLB/1bibBgQc7kh67D2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJx6zG9n Bau34z5tnD63wk2Izk0DMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB7iFr7yyI4jVlXNa5EnDL5xMlN9L3XPKwbKi7D8sJ+TB6s27vxET4 Ylxw8UEygZSG2mt8kFiTZG03l4bcuesZ1y83KfdWqOP2VtHAZiEa+nIEcCTqPuws HEZRqR676ScL3TU4uZ6ObxdNxF4CzDK2gcwWieiaEvKaj7KBwz2UfVC9EzojUM+2 zJkJVMpW7h8UNeLXHGNq7Y1G/Vp4ZDlGfI4CR0Fx/+j7IbquqMU2Z67grV+A6/JO dkZPLImeJIVbxJaWrqOy4iftVU2J4n3fvhAE+/fdAu+1OWiQD9sVfvsf6d/o0GkD VPmLBlLDiCIGNeHQ7oZ/5NTBvp7Yy5x0 -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:07 2025 by rpki-client