This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json)
Hash identifier: sFfbvBe3i1lUnrgHYyVwnrk9Wm8d/ZE5lVrGemUMWJ8=
Subject key identifier: 80:BB:82:51:8F:45:57:96:78:50:48:1F:14:95:EC:77:5A:F3:06:EA
Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Certificate serial: 043B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
Manifest number: 054A
Signing time: Mon 22 Dec 2025 23:21:04 +0000
Manifest this update: Mon 22 Dec 2025 23:21:04 +0000
Manifest next update: Mon 29 Dec 2025 23:21:04 +0000
Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: 00LSOfpmvMRtBW1UlDHRPmopGTrGGGryWu51H3BHnzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Validity
Not Before: Dec 22 23:21:04 2025 GMT
Not After : Dec 29 23:21:04 2025 GMT
Subject: CN=6949d260-dc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:8b:73:33:31:ea:f4:e6:5e:36:86:20:23:
15:1d:76:07:90:82:b0:d3:8e:74:6b:3e:fc:d2:d4:
c9:49:03:6d:43:1f:ed:f7:06:04:0a:43:b2:53:6b:
76:d4:8e:02:b2:9d:62:bf:32:31:d3:85:62:3b:10:
25:e3:13:62:b9:dc:87:99:25:a3:1d:86:83:d0:37:
da:d8:36:41:44:af:59:c6:55:82:1b:6d:f0:46:63:
52:d2:44:6f:33:8b:96:1a:ac:36:7a:70:15:8f:3e:
7f:3e:d3:f3:0f:6c:8a:2d:e2:58:63:58:e9:47:c3:
c8:4f:42:16:65:b6:70:8a:52:e8:11:4c:de:a0:9b:
d8:48:91:70:08:0d:2d:c7:ef:1a:b5:bd:ad:4d:be:
de:e1:30:87:b8:e6:73:98:c8:76:00:77:ba:7b:5c:
ad:01:a6:65:c9:e9:cd:de:b0:8d:a8:c9:d9:50:14:
ab:73:e0:e7:41:cc:2e:bf:3a:da:53:bb:f1:7a:a3:
78:66:ae:38:5a:fd:39:65:05:e7:c3:71:ac:f3:ed:
f3:e9:91:96:12:7e:6b:62:6d:b7:0a:13:c8:9f:35:
19:6e:f5:62:49:6b:16:cf:06:c2:65:61:28:bc:c1:
18:a7:f6:52:33:81:77:03:e4:44:e5:2e:29:ea:29:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BB:82:51:8F:45:57:96:78:50:48:1F:14:95:EC:77:5A:F3:06:EA
X509v3 Authority Key Identifier:
keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:7d:c2:0f:85:ff:cd:49:c6:64:b3:66:f1:da:37:28:41:
25:89:6c:7b:8c:d5:12:d1:c5:37:c8:4b:49:df:52:3e:0b:d1:
95:b5:8f:f6:52:83:cb:1f:ee:31:0c:fd:b5:11:40:ce:01:ba:
45:d0:09:09:7c:32:d7:7c:28:da:45:1d:e8:b7:4b:3d:2f:60:
5f:02:72:75:45:80:31:ca:ee:14:c5:78:25:86:b3:ca:7b:1f:
37:a0:0d:76:85:cf:28:d1:a5:49:c0:4f:70:fe:82:5d:d0:ee:
e5:d4:25:c0:b6:dc:75:cb:d7:1c:0f:bf:5e:35:bb:55:d6:f2:
35:69:71:9a:78:c3:e7:3a:d6:a8:38:72:7c:38:2d:01:8f:d0:
bb:9c:c9:b5:ff:75:75:38:10:85:6f:be:f0:ab:36:29:5d:a7:
2a:48:02:61:02:32:65:ff:62:b4:bd:87:8e:0c:cb:a4:22:30:
b0:2e:76:91:18:af:2d:05:c4:ee:25:63:34:53:9e:bd:a9:ce:
97:4a:3b:ab:bc:16:63:aa:17:05:d2:c8:e5:40:c1:15:ce:46:
06:34:05:b3:f0:e1:e8:56:61:25:91:43:73:7f:5d:9b:da:14:
49:50:22:6f:a5:92:5e:18:a7:92:1f:8b:52:f3:62:81:0b:7b:
ff:28:81:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNBODAxMTAvBgNVBAUTKDJCMDM3RTVFREJDMjg0QTM5Mzg4RDE5QkNENDVEMkQ5
NDc0QjMxOUIwHhcNMjUxMjIyMjMyMTA0WhcNMjUxMjI5MjMyMTA0WjAYMRYwFAYD
VQQDDA02OTQ5ZDI2MC1kYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5iLczMx6vTmXjaGICMVHXYHkIKw0450az780tTJSQNtQx/t9wYECkOyU2t2
1I4Csp1ivzIx04ViOxAl4xNiudyHmSWjHYaD0Dfa2DZBRK9ZxlWCG23wRmNS0kRv
M4uWGqw2enAVjz5/PtPzD2yKLeJYY1jpR8PIT0IWZbZwilLoEUzeoJvYSJFwCA0t
x+8atb2tTb7e4TCHuOZzmMh2AHe6e1ytAaZlyenN3rCNqMnZUBSrc+DnQcwuvzra
U7vxeqN4Zq44Wv05ZQXnw3Gs8+3z6ZGWEn5rYm23ChPInzUZbvViSWsWzwbCZWEo
vMEYp/ZSM4F3A+RE5S4p6inrVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC7glGP
RVeWeFBIHxSV7Hda8wbqMB8GA1UdIwQYMBaAFCsDfl7bwoSjk4jRm81F0tlHSzGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4
MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hLT1RpTkdielVYUzJVZExN
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t3Ti1YdHZDaEtPVGlOR2J6VVhTMlVkTE1acy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hL
T1RpTkdielVYUzJVZExNWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApSX3CD4X/zUnGZLNm8do3KEEliWx7jNUS0cU3yEtJ31I+C9GVtY/2
UoPLH+4xDP21EUDOAbpF0AkJfDLXfCjaRR3ot0s9L2BfAnJ1RYAxyu4UxXglhrPK
ex83oA12hc8o0aVJwE9w/oJd0O7l1CXAttx1y9ccD79eNbtV1vI1aXGaeMPnOtao
OHJ8OC0Bj9C7nMm1/3V1OBCFb77wqzYpXacqSAJhAjJl/2K0vYeODMukIjCwLnaR
GK8tBcTuJWM0U569qc6XSjurvBZjqhcF0sjlQMEVzkYGNAWz8OHoVmElkUNzf12b
2hRJUCJvpZJeGKeSH4tS82KBC3v/KIHZ
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:30 2025 by rpki-client