This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json) Hash identifier: qJo0QDTxENPKvGJfw0Mr+EaCX44dk5zwcyXVLnbLtCM= Subject key identifier: CB:72:D5:2C:C9:90:1C:6D:35:51:BD:E6:3F:CE:E6:38:A9:54:83:2B Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft Manifest number: 0121 Signing time: Tue 23 Dec 2025 03:43:06 +0000 Manifest this update: Tue 23 Dec 2025 03:43:05 +0000 Manifest next update: Tue 30 Dec 2025 03:43:05 +0000 Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: V5iGuyUaVIWrFpw1c0W57z7S69U4edduI4/BRcKm5Po=) 2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: GgtpbCe0DWHXE3n4d7zrRXZLNfKbReC9s/SOQ0QeSio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Validity Not Before: Dec 23 03:43:05 2025 GMT Not After : Dec 30 03:43:05 2025 GMT Subject: CN=694a0fca-c851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:ef:83:ad:ce:e9:d2:2c:2a:94:7a:4b:03: e8:9e:54:fd:3c:20:49:ae:57:12:41:57:09:4d:07: 63:41:ec:ae:94:5a:ca:77:bf:6d:82:cd:a5:cb:82: 0d:aa:8d:ec:59:67:df:f9:9b:c1:51:1e:cc:de:56: 2d:06:b8:19:ae:2f:d8:3f:0c:62:06:a4:50:d6:dc: 80:06:64:8f:86:ce:c7:40:01:16:3e:4b:2d:52:24: 7e:11:f1:e1:42:58:d6:a6:1c:c2:14:e3:35:3d:d2: d5:4a:ea:98:1c:e3:86:b6:a6:bc:c3:d1:05:61:49: de:89:c0:5e:fd:14:5e:53:67:ac:87:cf:ce:7e:b4: b7:f1:27:94:50:7f:88:eb:61:41:48:bf:84:a6:35: 3c:9e:0b:0e:c6:66:5b:6f:47:c7:ab:cb:34:13:ae: a9:e7:8e:de:e7:7e:f0:fc:ad:8e:6d:3a:64:f0:12: 45:5a:87:17:2e:ee:41:02:23:28:06:a3:79:2c:b7: 25:05:5f:74:98:28:e3:fb:cc:6a:f8:42:bb:13:34: 85:ee:41:4b:fc:28:1b:6d:b0:d2:3b:27:27:2e:16: 99:b8:79:a9:ec:21:87:50:42:40:82:45:38:15:07: bc:28:e4:c4:79:67:1b:80:b3:83:05:fa:6d:53:e1: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:72:D5:2C:C9:90:1C:6D:35:51:BD:E6:3F:CE:E6:38:A9:54:83:2B X509v3 Authority Key Identifier: keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:9a:29:e3:7e:45:2f:9c:df:3d:ad:75:06:1a:18:1b:2a:e1: a1:43:ba:5b:2b:e5:a8:e9:fa:31:d5:f0:fc:63:26:3f:62:4e: 7e:c2:cd:a6:f4:1c:cd:75:98:3e:ae:95:32:49:8a:1d:42:4c: 6f:b5:11:7f:1b:32:3b:3c:6f:8f:0f:7e:81:66:88:ba:b9:db: 14:68:9a:b6:1a:0c:b1:55:3f:d3:13:50:f2:3c:8d:05:ca:46: 49:5e:68:42:0e:f0:d7:22:d6:ad:d6:51:ca:d5:88:ca:b7:cc: e0:4e:4e:d8:1d:b5:b8:1e:e9:64:24:7c:e4:39:82:08:fd:f4: 11:88:78:2a:92:e8:26:10:a8:ce:22:d8:dc:8b:ea:ba:9f:52: 1d:cf:77:94:ec:42:aa:10:19:f5:14:9e:5e:81:f3:68:20:39: 7d:83:eb:0a:4e:41:69:ce:89:a5:5c:59:47:22:ad:a4:fb:cf: 2b:98:94:12:e2:a2:d0:e5:e5:c8:b4:b9:46:48:14:81:1c:82: 95:c2:ee:00:93:40:88:b2:72:25:af:e7:08:30:7a:2d:5e:d7: e0:ef:b8:5b:89:62:bc:8d:ca:d5:41:6b:46:00:7b:1d:59:1c: df:70:23:7d:49:49:6d:c0:fa:c2:f6:f3:73:af:c8:a3:ac:96: 8e:62:fe:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy RkYxOTIwMzgwHhcNMjUxMjIzMDM0MzA1WhcNMjUxMjMwMDM0MzA1WjAYMRYwFAYD VQQDDA02OTRhMGZjYS1jODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1Dvg63O6dIsKpR6SwPonlT9PCBJrlcSQVcJTQdjQeyulFrKd79tgs2ly4IN qo3sWWff+ZvBUR7M3lYtBrgZri/YPwxiBqRQ1tyABmSPhs7HQAEWPkstUiR+EfHh QljWphzCFOM1PdLVSuqYHOOGtqa8w9EFYUneicBe/RReU2esh8/OfrS38SeUUH+I 62FBSL+EpjU8ngsOxmZbb0fHq8s0E66p547e537w/K2ObTpk8BJFWocXLu5BAiMo BqN5LLclBV90mCjj+8xq+EK7EzSF7kFL/CgbbbDSOycnLhaZuHmp7CGHUEJAgkU4 FQe8KOTEeWcbgLODBfptU+Et6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMty1SzJ kBxtNVG95j/O5jipVIMrMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH M05weExtWWZiWjh2OFpJRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHminjfkUvnN89rXUGGhgbKuGhQ7pbK+Wo6fox1fD8YyY/Yk5+ws2m 9BzNdZg+rpUySYodQkxvtRF/GzI7PG+PD36BZoi6udsUaJq2GgyxVT/TE1DyPI0F ykZJXmhCDvDXItat1lHK1YjKt8zgTk7YHbW4HulkJHzkOYII/fQRiHgqkugmEKjO Itjci+q6n1Idz3eU7EKqEBn1FJ5egfNoIDl9g+sKTkFpzomlXFlHIq2k+88rmJQS 4qLQ5eXItLlGSBSBHIKVwu4Ak0CIsnIlr+cIMHotXtfg77hbiWK8jcrVQWtGAHsd WRzfcCN9SUltwPrC9vNzr8ijrJaOYv7R -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:13 2025 by rpki-client