This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: +dCBSLbNLY9sGAqG6ERpoOq5eEy9WmH3VDDRWKwoOFw= Subject key identifier: 02:1F:7D:76:EB:66:C1:6E:48:48:58:40:75:C7:50:C9:0A:52:EC:55 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 97 Signing time: Tue 23 Dec 2025 05:23:47 +0000 Manifest this update: Tue 23 Dec 2025 05:23:46 +0000 Manifest next update: Tue 30 Dec 2025 05:23:46 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: TvrqfopnQ9YNRO6hHdicBWmKENR6d3ZTrlWncm0bQhE=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Dec 23 05:23:46 2025 GMT Not After : Dec 30 05:23:46 2025 GMT Subject: CN=694a2763-7dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:6c:2b:2b:6b:be:16:09:7d:56:b2:6a:13: 73:d5:a6:a0:29:20:e7:c6:e5:ac:e4:fd:c4:d4:42: 41:15:8c:6e:0f:3e:70:1b:27:df:cd:8c:41:28:86: 11:e6:9a:c1:02:90:49:55:08:ef:84:44:5b:68:71: ca:95:dd:d3:f0:48:84:a1:07:6d:2c:50:e0:0f:44: b0:de:68:4f:36:e3:6e:2f:2f:b2:08:fe:76:13:63: 67:c7:61:5f:10:a4:a2:5f:45:ee:b0:02:bd:8b:0f: 71:d1:d0:ce:d2:e3:08:2c:73:93:f8:ae:0a:f7:0e: 2c:26:e0:3c:9c:2a:81:40:cc:22:cf:61:8d:25:37: 29:c1:aa:82:71:70:b3:bc:9a:52:8f:e8:e0:ed:c2: 68:9a:60:69:6d:42:0d:39:5c:35:eb:a5:25:b7:b8: 4f:f7:87:b1:29:5e:9d:ba:77:35:62:8b:dd:fa:cb: 42:32:02:d3:82:53:00:e8:b7:f3:80:3a:1b:ea:51: 99:43:36:c8:dd:a3:c5:d8:b5:04:20:b9:57:98:bf: 22:61:7f:cc:e2:61:07:2a:8d:bd:e9:0d:05:6f:ef: 7b:ee:59:a3:ea:ae:30:fc:b8:d5:27:05:0f:61:92: dd:7f:87:6e:ca:3f:29:03:db:18:bc:f9:c4:82:2b: 59:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:7D:76:EB:66:C1:6E:48:48:58:40:75:C7:50:C9:0A:52:EC:55 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7d:16:4a:37:e5:e2:00:cc:39:48:24:54:9e:66:10:4e:b6: b2:92:4f:58:a4:10:4c:0a:31:98:ab:b8:73:6a:3c:74:38:55: 96:fa:5f:8f:7c:a3:03:ee:b5:8e:bb:24:6a:de:d6:83:11:27: e9:ae:48:d8:ca:a2:27:3f:0e:73:7c:7c:48:79:fb:f9:97:59: 89:23:c4:6d:33:bc:5b:29:13:31:dc:e0:b6:b4:c9:66:b9:a0: dc:ae:5d:09:3b:2b:f6:82:3a:55:c7:5b:cd:a7:6f:4d:92:75: 70:d4:9e:82:da:89:9c:56:f2:cf:c0:03:1f:ae:bb:f4:f0:bb: 85:9f:fa:c3:a9:94:01:87:6b:54:5c:49:95:84:dc:45:7f:c9: e2:d5:48:86:32:fa:48:24:77:96:c8:f2:be:92:a8:b1:ce:2c: 8f:0e:d9:fe:09:0f:86:da:f8:b6:a8:a6:f6:43:43:38:9f:eb: b1:cc:04:df:47:ec:da:7e:30:5b:20:20:76:f8:07:f4:af:2b: 6f:6f:92:66:ad:3f:eb:28:a3:a2:b0:03:2a:d6:23:b7:20:f9: c4:51:fa:9d:f5:c0:be:d5:c4:5c:05:7a:ef:ac:b3:ac:c9:3c: 90:a7:cf:b1:a4:b3:8e:ea:a2:2d:d6:2a:8c:27:3e:64:e7:9d: c6:dc:32:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NzQxMTAvBgNVBAUTKDkwQjJGMTJCRTdBNTg2NjNCRjE1REM3MTdFN0Q0MEIz MDI0MUI4RUEwHhcNMjUxMjIzMDUyMzQ2WhcNMjUxMjMwMDUyMzQ2WjAYMRYwFAYD VQQDDA02OTRhMjc2My03ZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSlsKytrvhYJfVayahNz1aagKSDnxuWs5P3E1EJBFYxuDz5wGyffzYxBKIYR 5prBApBJVQjvhERbaHHKld3T8EiEoQdtLFDgD0Sw3mhPNuNuLy+yCP52E2Nnx2Ff EKSiX0XusAK9iw9x0dDO0uMILHOT+K4K9w4sJuA8nCqBQMwiz2GNJTcpwaqCcXCz vJpSj+jg7cJommBpbUINOVw166Ult7hP94exKV6dunc1Yovd+stCMgLTglMA6Lfz gDob6lGZQzbI3aPF2LUEILlXmL8iYX/M4mEHKo296Q0Fb+977lmj6q4w/LjVJwUP YZLdf4duyj8pA9sYvPnEgitZlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIffXbr ZsFuSEhYQHXHUMkKUuxVMB8GA1UdIwQYMBaAFJCy8SvnpYZjvxXccX59QLMCQbjq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk3NC9FNEU4OTAwRUZC NjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGhtT19GZHh4Zm4xQXN3SkJ1 T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk3NC9FNEU4OTAwRUZCNjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGht T19GZHh4Zm4xQXN3SkJ1T28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAefRZKN+XiAMw5SCRUnmYQTraykk9YpBBMCjGYq7hzajx0OFWW+l+P fKMD7rWOuyRq3taDESfprkjYyqInPw5zfHxIefv5l1mJI8RtM7xbKRMx3OC2tMlm uaDcrl0JOyv2gjpVx1vNp29NknVw1J6C2omcVvLPwAMfrrv08LuFn/rDqZQBh2tU XEmVhNxFf8ni1UiGMvpIJHeWyPK+kqixziyPDtn+CQ+G2vi2qKb2Q0M4n+uxzATf R+zafjBbICB2+Af0rytvb5JmrT/rKKOisAMq1iO3IPnEUfqd9cC+1cRcBXrvrLOs yTyQp8+xpLOO6qIt1iqMJz5k553G3DK/ -----END CERTIFICATE-----Generated at Tue Dec 23 12:43:38 2025 by rpki-client