This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: AVh06/9i0p01uOSfe74fuw0KUZjklcHNXSrZOg4dW2k= Subject key identifier: 28:36:40:DD:D8:D4:B0:3C:7F:AE:ED:64:3E:B7:58:87:A1:9D:5E:DB Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 063D Signing time: Sat 06 Dec 2025 21:34:41 +0000 Manifest this update: Sat 06 Dec 2025 21:34:40 +0000 Manifest next update: Sat 13 Dec 2025 21:34:40 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: Q+R+TY0/4VQ1jTavTzK6Q6tOkGXwD+0a9+0M8lpkF2E=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: vz/od99V/qh8nLdVrGtgO/ikEdfCO+I8D/5B73OuzVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Dec 6 21:34:40 2025 GMT Not After : Dec 13 21:34:40 2025 GMT Subject: CN=6934a171-66c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:39:6b:36:cc:34:4e:5a:9b:4d:cf:37:58: 9b:ff:86:30:5d:c5:57:bd:eb:2a:84:e0:28:ba:56: 10:b7:64:bd:61:59:be:8d:bf:8d:6d:52:da:f2:79: d6:66:66:31:25:97:44:b9:4a:2e:e2:01:9c:d0:92: 7a:13:50:c9:34:78:fd:90:e4:c8:87:9e:2f:f5:a6: b3:68:a3:7b:df:94:94:7f:25:76:ca:c5:20:82:60: 2f:fe:57:85:86:7e:11:4d:98:6b:0a:8b:81:21:a7: e7:c2:b0:53:39:5c:62:da:d7:5b:3d:a3:5f:48:ac: 15:57:fa:2d:70:a8:1e:4f:56:99:38:20:36:4d:6c: 5c:e9:30:3f:08:49:99:b8:02:61:ce:92:10:94:7e: bc:4d:90:fe:a7:c3:28:fe:e6:e9:97:27:73:50:fe: f4:e7:27:b1:de:3e:52:b5:a8:0d:40:7a:d0:7c:e5: c2:68:40:02:c3:6f:7d:f7:73:43:e9:b8:69:86:0b: 2b:18:40:fa:95:3d:5a:17:f5:b2:fe:35:4a:59:93: ff:f9:82:b1:75:75:ff:5b:82:86:a9:6a:5a:c7:84: 07:39:34:71:b0:12:21:6f:11:2b:5c:47:4d:1c:db: a7:63:49:8c:b0:75:64:83:91:14:9a:4d:3c:d2:51: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:40:DD:D8:D4:B0:3C:7F:AE:ED:64:3E:B7:58:87:A1:9D:5E:DB X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:51:c1:a0:c5:2c:37:e0:a4:ce:54:a7:77:0b:d5:93:57:82: 67:5b:ee:62:61:fd:45:c0:61:89:25:61:7e:da:40:1a:11:f4: 96:05:ee:23:d3:3c:0c:3d:d8:cc:74:09:14:cc:75:49:05:31: 4d:06:c4:c3:53:5c:6c:49:b9:27:1e:c3:4e:77:19:01:f7:df: 4d:fd:b6:1e:0a:d0:b2:83:16:12:7d:85:21:1a:99:58:9b:3d: a0:b3:ed:e2:ce:00:9c:2d:c7:79:e5:44:d6:f5:e6:07:b5:96: 8b:41:ff:b7:79:3e:9d:e6:95:23:e3:d4:b4:64:d0:43:c2:1d: ce:e4:93:16:9d:a2:db:d5:81:84:39:88:f2:9a:ea:92:3a:77: 62:4b:61:62:49:83:b1:6a:22:ba:b2:e3:24:e5:a0:3b:7a:dc: 02:e0:20:ed:3f:25:61:ac:cb:08:ae:7a:9d:f5:e5:a4:e3:72: 03:0f:0d:be:d0:ba:d2:e8:37:64:4c:8b:b0:a2:99:f6:25:b6: 3f:35:6c:46:52:b6:c1:de:c5:4e:3d:ef:70:74:32:34:d1:c7: b1:fc:4a:ee:da:ed:95:b2:0d:8f:4c:86:29:ed:7d:d5:ab:38: 4e:3e:25:e1:16:99:1e:13:a0:54:11:24:62:5e:de:8a:93:76: 9c:4d:36:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUxMjA2MjEzNDQwWhcNMjUxMjEzMjEzNDQwWjAYMRYwFAYD VQQDEw02OTM0YTE3MS02NmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypU5azbMNE5am03PN1ib/4YwXcVXvesqhOAoulYQt2S9YVm+jb+NbVLa8nnW ZmYxJZdEuUou4gGc0JJ6E1DJNHj9kOTIh54v9aazaKN735SUfyV2ysUggmAv/leF hn4RTZhrCouBIafnwrBTOVxi2tdbPaNfSKwVV/otcKgeT1aZOCA2TWxc6TA/CEmZ uAJhzpIQlH68TZD+p8Mo/ubplydzUP705yex3j5StagNQHrQfOXCaEACw29993ND 6bhphgsrGED6lT1aF/Wy/jVKWZP/+YKxdXX/W4KGqWpax4QHOTRxsBIhbxErXEdN HNunY0mMsHVkg5EUmk080lHJ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg2QN3Y 1LA8f67tZD63WIehnV7bMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASUcGgxSw34KTOVKd3C9WTV4JnW+5iYf1FwGGJJWF+2kAaEfSWBe4j 0zwMPdjMdAkUzHVJBTFNBsTDU1xsSbknHsNOdxkB999N/bYeCtCygxYSfYUhGplY mz2gs+3izgCcLcd55UTW9eYHtZaLQf+3eT6d5pUj49S0ZNBDwh3O5JMWnaLb1YGE OYjymuqSOndiS2FiSYOxaiK6suMk5aA7etwC4CDtPyVhrMsIrnqd9eWk43IDDw2+ 0LrS6DdkTIuwopn2JbY/NWxGUrbB3sVOPe9wdDI00cex/Eru2u2Vsg2PTIYp7X3V qzhOPiXhFpkeE6BUESRiXt6Kk3acTTaH -----END CERTIFICATE-----Generated at Sun Dec 7 13:53:04 2025 by rpki-client