This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: PuX0u4S2CnkXDQl+mkqfqpcllwx5mxauF1NnteUiFbo= Subject key identifier: 6F:E9:0F:B9:99:66:75:12:86:C5:69:B9:2D:1C:31:5B:25:42:60:E6 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 02D1 Signing time: Wed 03 Dec 2025 00:00:48 +0000 Manifest this update: Wed 03 Dec 2025 00:00:47 +0000 Manifest next update: Wed 10 Dec 2025 00:00:47 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: +mN79lb/cgpBOOaVcP5m43qMkmst3GQrHY3XK7so/XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Dec 3 00:00:47 2025 GMT Not After : Dec 10 00:00:47 2025 GMT Subject: CN=692f7daf-9e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:24:bc:e8:1e:65:8a:17:7d:ac:41:1c:7b: 8f:6d:12:2e:55:f4:ff:15:80:9a:cb:be:71:7a:10: fa:72:63:f6:4d:cd:78:95:f9:21:4e:a2:10:b4:1e: a8:51:21:c1:79:73:d8:ab:45:9a:11:8b:fb:60:a0: 6e:27:2d:32:bb:e0:f7:64:41:a4:fd:72:01:79:2a: 00:95:99:a6:49:57:c7:55:e7:43:fd:45:58:49:90: 37:ec:6b:56:71:e7:1e:a2:a7:1e:59:73:dc:c9:8e: 49:ad:ca:8e:18:2f:f0:d1:4a:2d:7d:82:7d:6d:ba: 1d:7a:90:d7:ba:fb:f7:d8:61:b8:66:d5:1a:f5:86: da:b0:2f:88:e4:7f:0f:1a:ca:87:24:0e:6d:60:c0: 5b:08:02:03:8f:eb:24:c8:d6:5f:92:bc:94:f1:1b: a2:3b:d7:a7:73:1a:76:65:25:98:93:8f:19:22:49: 24:03:9d:d2:66:9b:cf:68:4d:dd:6e:01:7c:11:1d: 33:cc:47:5c:04:05:50:4e:13:8b:52:bf:62:1a:7d: 6c:ea:9f:d1:22:f4:8e:26:d9:87:14:3b:20:06:f6: ed:40:b3:3b:62:97:5d:be:2f:0a:bb:ec:64:6a:82: 00:60:78:84:3f:e7:d4:44:97:e1:17:1b:96:2e:81: 6a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E9:0F:B9:99:66:75:12:86:C5:69:B9:2D:1C:31:5B:25:42:60:E6 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:91:0c:b6:b7:92:5c:57:30:c7:2c:5b:5e:05:ef:0e:36:32: 5b:29:de:87:1a:de:0d:6d:da:70:60:d5:35:f9:ff:81:4c:05: 3f:f6:49:c5:5d:63:cd:f1:de:25:e7:59:2b:5d:2e:8e:94:51: 02:19:39:64:1f:b8:44:ea:20:1f:bb:52:64:91:23:44:4c:aa: 0a:db:42:b9:7f:0a:3b:64:fb:50:cc:a3:16:a6:06:41:73:ac: fc:27:a9:d9:ee:33:8f:fa:57:aa:78:be:d1:18:ee:9f:bb:16: a1:6e:54:6c:1d:56:c1:6b:9f:4e:c3:8d:f8:97:99:50:33:2a: 68:22:c4:29:1e:b8:28:87:f9:ad:51:4b:81:63:0e:a5:34:4f: ce:f3:e1:b4:d1:7a:18:fd:6d:7f:61:73:31:b1:28:db:24:df: c0:4f:76:d1:a6:f3:75:0e:c7:8b:86:21:2d:57:dd:c1:3d:10: c0:90:0f:79:17:a5:84:04:31:de:8b:d4:51:cd:96:f7:31:de: bd:8d:d5:a7:f2:44:90:1c:53:c8:c5:54:50:4b:fa:3a:42:52: 97:63:f2:36:8e:c7:9c:c9:67:fc:ab:77:a5:a3:fe:8b:e2:48: c3:b4:f9:24:67:a7:6f:b1:fd:ea:c7:97:01:ea:ad:8f:f3:61: e5:5a:48:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUxMjAzMDAwMDQ3WhcNMjUxMjEwMDAwMDQ3WjAYMRYwFAYD VQQDEw02OTJmN2RhZi05ZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cwkvOgeZYoXfaxBHHuPbRIuVfT/FYCay75xehD6cmP2Tc14lfkhTqIQtB6o USHBeXPYq0WaEYv7YKBuJy0yu+D3ZEGk/XIBeSoAlZmmSVfHVedD/UVYSZA37GtW ceceoqceWXPcyY5JrcqOGC/w0UotfYJ9bbodepDXuvv32GG4ZtUa9YbasC+I5H8P GsqHJA5tYMBbCAIDj+skyNZfkryU8RuiO9encxp2ZSWYk48ZIkkkA53SZpvPaE3d bgF8ER0zzEdcBAVQThOLUr9iGn1s6p/RIvSOJtmHFDsgBvbtQLM7Ypddvi8Ku+xk aoIAYHiEP+fURJfhFxuWLoFq2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/pD7mZ ZnUShsVpuS0cMVslQmDmMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6kQy2t5JcVzDHLFteBe8ONjJbKd6HGt4NbdpwYNU1+f+BTAU/9knF XWPN8d4l51krXS6OlFECGTlkH7hE6iAfu1JkkSNETKoK20K5fwo7ZPtQzKMWpgZB c6z8J6nZ7jOP+leqeL7RGO6fuxahblRsHVbBa59Ow434l5lQMypoIsQpHrgoh/mt UUuBYw6lNE/O8+G00XoY/W1/YXMxsSjbJN/AT3bRpvN1DseLhiEtV93BPRDAkA95 F6WEBDHei9RRzZb3Md69jdWn8kSQHFPIxVRQS/o6QlKXY/I2jsecyWf8q3elo/6L 4kjDtPkkZ6dvsf3qx5cB6q2P82HlWkjl -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:17 2025 by rpki-client