This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json) Hash identifier: tBWxXO6lUeP/F+5kYQ10RCiQJRnQ+IMCnPNgrbuaZTE= Subject key identifier: 6A:98:E4:E8:3C:B5:DA:2F:89:C5:B9:CC:3D:71:4A:87:54:47:F4:BB Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft Manifest number: 06C1 Signing time: Mon 22 Dec 2025 21:25:08 +0000 Manifest this update: Mon 22 Dec 2025 21:25:07 +0000 Manifest next update: Mon 29 Dec 2025 21:25:07 +0000 Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: wgkYCGlYkrEdM9kaBiOUO7++JzXIh5DEXl7MZq1bRTU=) 2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: 3KVNAeWh03dGVWnQ63cP0I/qibdtWKvdfNbIMy7dwHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Validity Not Before: Dec 22 21:25:07 2025 GMT Not After : Dec 29 21:25:07 2025 GMT Subject: CN=6949b734-61b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:ca:bf:b9:fc:0e:9a:c1:5c:d5:3a:de:41: 10:d4:c3:71:c8:e8:78:32:22:24:0d:10:88:ca:aa: b7:40:8d:e8:70:82:73:71:9c:25:24:a6:3f:bc:42: aa:f0:e2:ca:d4:71:29:3d:fe:d6:7c:82:38:be:77: bf:42:ec:16:f5:0b:ea:a5:22:18:57:57:1a:b1:01: 0f:c2:76:1d:b3:4f:03:6d:57:cd:67:24:08:1b:5a: da:1f:21:2f:08:68:36:da:cf:a1:b9:2c:8a:f1:89: a5:d2:26:fb:c4:cc:f1:ff:f4:48:fe:ef:dc:c9:71: 54:69:62:7e:6b:a2:a2:02:ba:50:fa:40:e9:91:e3: 07:69:b3:aa:8c:f7:42:d1:a8:37:01:4b:be:06:a7: 61:51:bd:de:95:37:8c:7e:0b:25:8a:26:8b:27:66: 4a:81:69:81:3c:67:32:6c:1c:82:ea:d1:21:22:72: 9d:96:7a:60:bd:67:68:e0:98:65:85:b5:8f:fb:35: 8e:2b:54:e0:93:a7:63:63:c8:87:bf:85:af:9b:18: 16:a8:02:c2:96:1d:a4:cd:5f:f7:e3:2b:4f:cb:b3: 25:97:99:e2:79:33:a7:1b:b5:af:83:3b:84:8a:06: 0d:a0:19:aa:7b:c5:7f:42:0d:0f:f5:47:d8:fb:31: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:98:E4:E8:3C:B5:DA:2F:89:C5:B9:CC:3D:71:4A:87:54:47:F4:BB X509v3 Authority Key Identifier: keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:14:a1:31:dd:70:f8:43:d7:e5:9b:93:dc:e6:78:e8:a0:26: be:d2:7f:95:4c:5b:42:72:64:58:7c:0e:75:ac:75:d7:2d:b7: 3e:10:77:b6:b0:e0:0a:de:e6:35:6a:b8:66:cb:9e:b2:77:a5: e3:bc:c5:28:83:4e:d1:b7:6d:4f:d1:83:22:b9:19:8c:6c:85: 14:1f:07:07:12:6f:d2:57:a9:f9:d9:4c:07:4b:2a:d8:29:c0: 54:64:bd:07:13:e4:15:5c:22:55:0e:b9:e1:76:56:66:9b:db: 51:83:4d:c9:1c:fa:70:b2:4e:f8:02:8f:69:0b:9e:a2:71:9f: 23:39:07:d2:83:0f:7a:1b:33:cd:83:a7:0f:b4:54:47:2a:89: 9a:8e:d4:70:11:a0:61:35:3b:85:0c:82:09:c9:f0:2c:69:80: 2a:3c:d0:a7:ee:44:47:f3:78:cb:47:62:42:99:d0:ff:73:e9: 9b:d3:3f:e3:d2:f8:3c:d9:a7:88:87:9a:56:91:f3:09:b8:96: 51:91:9a:e1:ea:77:49:f8:1d:cb:8d:5f:6c:69:fa:54:54:87: 6a:70:85:97:bd:d0:e1:63:8b:75:87:26:99:8f:38:1e:94:d8: 78:08:fd:a8:77:54:20:e5:63:5a:c2:0f:74:1d:80:97:9f:2d: 92:06:0b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1 QzlDMENDQjUwHhcNMjUxMjIyMjEyNTA3WhcNMjUxMjI5MjEyNTA3WjAYMRYwFAYD VQQDDA02OTQ5YjczNC02MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoujKv7n8DprBXNU63kEQ1MNxyOh4MiIkDRCIyqq3QI3ocIJzcZwlJKY/vEKq 8OLK1HEpPf7WfII4vne/QuwW9QvqpSIYV1casQEPwnYds08DbVfNZyQIG1raHyEv CGg22s+huSyK8Yml0ib7xMzx//RI/u/cyXFUaWJ+a6KiArpQ+kDpkeMHabOqjPdC 0ag3AUu+BqdhUb3elTeMfgsliiaLJ2ZKgWmBPGcybByC6tEhInKdlnpgvWdo4Jhl hbWP+zWOK1Tgk6djY8iHv4WvmxgWqALClh2kzV/34ytPy7Mll5nieTOnG7WvgzuE igYNoBmqe8V/Qg0P9UfY+zG6WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqY5Og8 tdovicW5zD1xSodUR/S7MB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1 NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy ODlfaFlaUXhuQlJjbkF6TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7FKEx3XD4Q9flm5Pc5njooCa+0n+VTFtCcmRYfA51rHXXLbc+EHe2 sOAK3uY1arhmy56yd6XjvMUog07Rt21P0YMiuRmMbIUUHwcHEm/SV6n52UwHSyrY KcBUZL0HE+QVXCJVDrnhdlZmm9tRg03JHPpwsk74Ao9pC56icZ8jOQfSgw96GzPN g6cPtFRHKomajtRwEaBhNTuFDIIJyfAsaYAqPNCn7kRH83jLR2JCmdD/c+mb0z/j 0vg82aeIh5pWkfMJuJZRkZrh6ndJ+B3LjV9safpUVIdqcIWXvdDhY4t1hyaZjzge lNh4CP2od1Qg5WNawg90HYCXny2SBgu1 -----END CERTIFICATE-----Generated at Wed Dec 24 19:30:18 2025 by rpki-client