This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: 9Fbk2W7UefsOOSZrM6bBI3XI8hfpJT1ItCtz+7ssjDA= Subject key identifier: B6:87:F9:4A:A4:3B:9F:13:0A:A0:04:25:00:56:AD:4A:01:D6:3F:C0 Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 047C Signing time: Sat 20 Dec 2025 23:21:31 +0000 Manifest this update: Sat 20 Dec 2025 23:21:30 +0000 Manifest next update: Sat 27 Dec 2025 23:21:30 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: O40uWzzSV4JJUDcLOnCmOJqhtxrNx45Vk37fxyR9NmA=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Dec 20 23:21:30 2025 GMT Not After : Dec 27 23:21:30 2025 GMT Subject: CN=69472f7a-9962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:83:c2:fa:86:4c:5e:61:48:45:b7:68:81: dd:1d:d2:da:2b:ee:40:4e:a0:6f:fb:9d:51:0b:f4: c1:5d:2d:b5:17:cb:77:48:ee:ad:bf:bc:4d:83:61: ab:81:97:ce:50:98:65:0c:58:db:21:e8:14:20:38: c9:76:ff:39:cd:2e:42:bb:a7:b1:81:c7:59:19:c2: cf:6e:25:cf:2f:d1:b6:e1:81:26:e3:c9:66:f5:d0: f5:91:7d:3e:18:15:e6:be:d6:5b:1d:03:d7:e0:09: 0d:0c:6b:cd:4f:8a:fe:c1:10:d9:a4:74:44:bc:02: 00:99:96:f7:91:c9:0a:e9:12:93:0c:e0:98:f2:3c: ac:5a:0b:ff:79:e9:35:0c:e0:bf:4f:54:18:60:62: f3:11:99:eb:48:c2:7e:bc:f6:9c:8a:65:fe:6d:42: af:07:56:3f:b1:d7:56:36:14:b7:47:3a:d3:80:8a: 2e:56:8c:40:e7:5f:90:78:5b:d6:7c:3d:86:06:6b: 98:3a:85:4a:34:92:2f:97:64:a4:19:02:3e:7c:9f: 69:dd:bf:17:5b:21:65:87:40:50:c5:0f:15:c0:43: b1:bc:ed:a4:5a:0d:bb:cf:bf:a6:32:5c:5e:08:e0: 86:10:9b:2d:e8:80:24:23:e6:99:9d:31:bd:2c:86: 58:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:F9:4A:A4:3B:9F:13:0A:A0:04:25:00:56:AD:4A:01:D6:3F:C0 X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2f:8d:31:56:bf:67:8e:55:e6:49:74:25:a0:b0:49:fc:bd: d9:6b:d2:a2:d0:42:70:dd:3a:92:ea:14:c9:af:b7:69:91:32: af:af:ba:84:7e:25:0a:df:0c:93:25:92:ca:7d:cc:09:ea:9e: 0a:67:82:b4:7d:b5:00:7d:ca:12:fe:ff:85:be:84:53:1b:f3: f8:b0:c7:64:24:2f:bf:6d:01:f6:cf:bd:aa:08:44:d1:7f:c5: d5:d4:be:33:c2:8a:af:97:1f:06:c2:09:9d:a7:25:6b:55:d5: de:c5:78:00:cd:c5:08:8e:6b:01:44:5f:38:93:ff:01:07:e5: bb:10:f2:22:c0:a8:c9:78:20:a8:10:38:8d:d7:d5:4e:59:c2: 49:a8:3e:f4:61:df:91:29:e4:89:fe:eb:1f:be:fb:57:a1:c1: 84:04:45:77:09:7c:9e:07:5c:a7:f2:d2:ac:5c:7d:e3:0f:3e: 52:93:d6:24:b5:76:ea:92:a8:fe:fa:2a:f6:04:ae:b6:43:be: 66:f3:47:07:8f:4c:35:40:42:34:3a:f2:c0:59:50:f9:7b:b9: d2:be:ed:5f:3f:7c:8f:68:c4:ab:06:dd:3a:5a:bd:cb:e6:d1: 89:bf:0a:a2:5e:a9:a5:c9:b1:e2:49:8f:0e:01:fe:dd:0f:8e: 3b:29:78:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjUxMjIwMjMyMTMwWhcNMjUxMjI3MjMyMTMwWjAYMRYwFAYD VQQDDA02OTQ3MmY3YS05OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLWDwvqGTF5hSEW3aIHdHdLaK+5ATqBv+51RC/TBXS21F8t3SO6tv7xNg2Gr gZfOUJhlDFjbIegUIDjJdv85zS5Cu6exgcdZGcLPbiXPL9G24YEm48lm9dD1kX0+ GBXmvtZbHQPX4AkNDGvNT4r+wRDZpHREvAIAmZb3kckK6RKTDOCY8jysWgv/eek1 DOC/T1QYYGLzEZnrSMJ+vPacimX+bUKvB1Y/sddWNhS3RzrTgIouVoxA51+QeFvW fD2GBmuYOoVKNJIvl2SkGQI+fJ9p3b8XWyFlh0BQxQ8VwEOxvO2kWg27z7+mMlxe COCGEJst6IAkI+aZnTG9LIZYPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaH+Uqk O58TCqAEJQBWrUoB1j/AMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7L40xVr9njlXmSXQloLBJ/L3Za9Ki0EJw3TqS6hTJr7dpkTKvr7qE fiUK3wyTJZLKfcwJ6p4KZ4K0fbUAfcoS/v+FvoRTG/P4sMdkJC+/bQH2z72qCETR f8XV1L4zwoqvlx8GwgmdpyVrVdXexXgAzcUIjmsBRF84k/8BB+W7EPIiwKjJeCCo EDiN19VOWcJJqD70Yd+RKeSJ/usfvvtXocGEBEV3CXyeB1yn8tKsXH3jDz5Sk9Yk tXbqkqj++ir2BK62Q75m80cHj0w1QEI0OvLAWVD5e7nSvu1fP3yPaMSrBt06Wr3L 5tGJvwqiXqmlybHiSY8OAf7dD447KXj1 -----END CERTIFICATE-----Generated at Mon Dec 22 11:05:58 2025 by rpki-client