This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: ufVn+OniEehnanuL0G9HS5lrP2T6pY/3BlxLCR+pG0M= Subject key identifier: 3A:9D:76:9E:7C:B8:0E:9C:BD:96:68:EC:FC:0C:5F:DE:77:09:70:4B Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 1062 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 1043 Signing time: Thu 18 Dec 2025 17:15:02 +0000 Manifest this update: Thu 18 Dec 2025 17:15:01 +0000 Manifest next update: Thu 25 Dec 2025 17:15:01 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: T1s6OnP+DAa4WiE04/Ti8/wJDNAC4LLyryyxdQFhZvc=) 2: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=) 3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=) 4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4194 (0x1062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Dec 18 17:15:01 2025 GMT Not After : Dec 25 17:15:01 2025 GMT Subject: CN=69443696-8007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:05:1a:1b:69:c4:6c:5f:25:cb:23:84:b5: 53:c4:10:a5:82:d8:a9:5d:fe:17:c3:ea:9c:24:a5: 58:52:b0:c4:90:b7:0d:21:c7:db:d2:63:59:ac:21: 1f:88:b1:cd:02:f4:b8:45:6e:56:93:53:02:8d:9e: 96:b3:f9:88:48:80:ee:27:2a:95:ff:94:26:50:6b: be:60:38:2d:8a:c6:44:0c:fa:66:1b:da:0b:d6:00: 66:48:47:9f:0c:72:44:a7:c4:bb:41:bb:3b:5f:51: b3:6a:b8:70:ac:63:b6:62:f6:6f:bb:69:83:2b:30: 04:12:51:e7:3e:af:bd:20:c4:a0:0b:ad:db:cd:05: 4e:94:1a:da:e5:08:04:15:86:88:c5:87:f6:25:fa: 87:ff:8e:4d:d6:60:59:4f:1f:31:14:b7:6a:b4:7e: 26:8f:cf:a5:14:9e:86:85:c8:c8:46:d0:26:de:9f: c9:73:58:6c:8d:3d:24:3f:e8:db:6a:ae:67:8f:ef: 95:8a:ed:7a:42:ee:64:11:8c:04:43:96:93:dd:2a: 0d:47:61:af:a2:6e:40:ac:c7:f5:c8:40:0d:0f:a2: 31:02:4e:c2:0e:c2:2d:fb:6e:04:31:53:37:65:b9: cf:e6:1e:83:8b:7a:47:6f:83:42:f5:e8:92:0c:78: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:76:9E:7C:B8:0E:9C:BD:96:68:EC:FC:0C:5F:DE:77:09:70:4B X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8d:53:75:a8:20:05:a5:d4:fe:b8:bb:89:49:24:c0:0c:5b: 42:f3:25:8d:b1:e4:52:87:0a:23:cd:46:41:0b:02:10:57:39: cf:90:fe:37:b4:b4:94:59:67:c4:5c:ba:c0:75:62:f5:62:9a: bd:c2:21:94:0b:8a:e5:92:16:4e:a7:5b:f2:43:b1:a7:94:15: 07:4c:66:66:76:d3:67:13:8c:23:9f:17:36:66:10:17:ad:a6: cf:f9:29:ef:5d:89:d4:0a:1e:ef:56:eb:08:6b:bb:01:86:42: cc:ae:d6:3c:13:1b:58:d3:10:94:d8:22:04:dd:78:ee:3e:17: 44:ae:81:79:73:a3:59:1c:61:55:e4:66:1d:85:59:ec:b4:c4: d1:1f:d4:66:66:7d:e5:c0:60:b2:5b:de:6b:98:0a:ed:7f:ea: 02:84:31:7a:32:bc:aa:a2:ba:31:a9:b8:e5:31:14:f2:74:d2: 1e:74:4d:8d:04:4e:82:77:80:8c:75:03:48:48:b8:69:49:51: eb:ed:9f:ba:4e:e6:d4:8f:be:61:e2:b2:6e:22:45:14:44:89: 41:49:c1:55:a5:eb:04:d4:d7:8c:70:f4:98:92:a0:22:3a:ad: 4a:0e:5f:43:8c:a3:23:e2:b6:e1:63:66:9e:75:63:51:b5:c5: b1:09:65:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjUxMjE4MTcxNTAxWhcNMjUxMjI1MTcxNTAxWjAYMRYwFAYD VQQDDA02OTQ0MzY5Ni04MDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJoFGhtpxGxfJcsjhLVTxBClgtipXf4Xw+qcJKVYUrDEkLcNIcfb0mNZrCEf iLHNAvS4RW5Wk1MCjZ6Ws/mISIDuJyqV/5QmUGu+YDgtisZEDPpmG9oL1gBmSEef DHJEp8S7Qbs7X1GzarhwrGO2YvZvu2mDKzAEElHnPq+9IMSgC63bzQVOlBra5QgE FYaIxYf2JfqH/45N1mBZTx8xFLdqtH4mj8+lFJ6GhcjIRtAm3p/Jc1hsjT0kP+jb aq5nj++Viu16Qu5kEYwEQ5aT3SoNR2Gvom5ArMf1yEAND6IxAk7CDsIt+24EMVM3 ZbnP5h6Di3pHb4NC9eiSDHi0vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqddp58 uA6cvZZo7PwMX953CXBLMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+jVN1qCAFpdT+uLuJSSTADFtC8yWNseRShwojzUZBCwIQVznPkP43 tLSUWWfEXLrAdWL1Ypq9wiGUC4rlkhZOp1vyQ7GnlBUHTGZmdtNnE4wjnxc2ZhAX rabP+SnvXYnUCh7vVusIa7sBhkLMrtY8ExtY0xCU2CIE3XjuPhdEroF5c6NZHGFV 5GYdhVnstMTRH9RmZn3lwGCyW95rmArtf+oChDF6MryqoroxqbjlMRTydNIedE2N BE6Cd4CMdQNISLhpSVHr7Z+6TubUj75h4rJuIkUURIlBScFVpesE1NeMcPSYkqAi Oq1KDl9DjKMj4rbhY2aedWNRtcWxCWX9 -----END CERTIFICATE-----Generated at Fri Dec 19 03:49:45 2025 by rpki-client