This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: RlQxpX9Psiy0mRHo+w62JC0+X3nmrjiPP8yr9iKPFDo= Subject key identifier: 07:E1:A6:90:B5:71:4F:AD:5C:EA:0A:7B:78:5E:8C:6B:A8:1F:6A:8F Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 398F Signing time: Mon 22 Dec 2025 14:34:45 +0000 Manifest this update: Mon 22 Dec 2025 14:34:44 +0000 Manifest next update: Mon 29 Dec 2025 14:34:44 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: 6yJ66j2FrzOa2U53YTQglGsdR4kAQsCusd39WVzwl3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Dec 22 14:34:44 2025 GMT Not After : Dec 29 14:34:44 2025 GMT Subject: CN=69495705-437c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:8a:01:9c:d0:cc:4c:88:48:24:25:c5:d7: 85:d0:e3:80:a9:5d:2b:8b:1b:8e:08:f3:35:b6:11: 33:06:cb:e9:47:ef:20:4d:6c:1e:13:65:b9:66:d1: d0:8a:7e:64:cf:af:f8:1d:5f:70:10:90:1f:a7:71: 6a:c4:de:16:7c:30:cc:2d:82:71:40:68:82:91:d1: 82:69:e3:b9:5d:08:da:99:05:db:52:6d:60:10:d8: a9:db:b1:ba:f5:72:55:7e:73:33:2f:05:a2:bc:c7: d4:01:65:c1:5b:ba:23:ad:3c:65:07:b4:88:bd:94: 2c:25:ed:ae:40:16:95:8e:97:6f:28:20:b0:8e:00: a4:1b:01:75:e4:2b:33:59:ee:fe:3e:12:35:9c:18: b0:31:17:92:43:99:a6:08:9d:23:16:97:c4:d5:3f: c3:26:c7:f6:b1:d3:6c:7f:24:b3:9a:02:c4:8e:3e: bd:d1:d9:d8:c2:7e:7f:72:87:ed:30:a3:26:06:12: 78:00:96:12:20:c4:8d:19:b0:67:e8:d8:ea:26:23: af:b8:18:89:2e:6b:9e:e9:42:ab:ac:e7:a2:28:0e: a7:14:93:57:d4:d7:26:bc:62:11:c9:57:06:1e:fb: ae:36:f0:a2:b4:96:1d:4f:b3:8a:8d:05:32:70:89: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E1:A6:90:B5:71:4F:AD:5C:EA:0A:7B:78:5E:8C:6B:A8:1F:6A:8F X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:82:08:02:71:f4:1d:68:6e:bf:64:1e:d8:88:a2:5e:35:7e: c8:72:60:a5:60:ad:ca:0b:fe:fd:66:7d:8c:bc:f6:25:68:59: b0:ba:ad:35:3c:00:2c:46:ff:23:04:b4:6b:36:7d:36:bf:55: 47:fa:14:6c:d0:99:5e:a9:0a:ec:43:5d:c5:eb:2a:7b:ab:4a: c4:a4:33:5e:35:e1:3b:71:13:58:92:25:70:18:e1:bd:71:7f: d7:b6:24:2c:5d:38:87:f0:98:8f:e1:17:41:2d:e4:21:a8:49: af:98:9e:de:78:c2:b4:0d:54:01:51:7c:b6:c3:4b:e4:22:6d: 9b:4f:9e:6a:a5:dd:bf:7b:00:63:c6:02:5f:e9:3b:2b:90:a2: cd:d8:7c:37:1b:eb:3f:68:31:38:be:fe:4c:90:8c:c8:61:6f: 0a:40:01:68:27:d6:1f:78:c2:34:70:43:ec:c4:c5:33:7b:56: e2:d2:12:1a:91:b4:c4:c8:5b:5e:6e:5e:39:e2:52:a3:37:f3: 6b:6b:14:fe:45:3d:58:74:7c:cb:af:82:8c:54:95:83:03:ef: a4:24:b7:5b:7c:a6:87:fc:46:30:19:ff:5d:57:2c:f5:99:38: 0d:cf:26:c9:c5:3c:9f:5d:5e:d9:52:21:7f:e6:63:fc:8e:8e: 8e:ea:4f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUxMjIyMTQzNDQ0WhcNMjUxMjI5MTQzNDQ0WjAYMRYwFAYD VQQDDA02OTQ5NTcwNS00MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhOKAZzQzEyISCQlxdeF0OOAqV0rixuOCPM1thEzBsvpR+8gTWweE2W5ZtHQ in5kz6/4HV9wEJAfp3FqxN4WfDDMLYJxQGiCkdGCaeO5XQjamQXbUm1gENip27G6 9XJVfnMzLwWivMfUAWXBW7ojrTxlB7SIvZQsJe2uQBaVjpdvKCCwjgCkGwF15Csz We7+PhI1nBiwMReSQ5mmCJ0jFpfE1T/DJsf2sdNsfySzmgLEjj690dnYwn5/coft MKMmBhJ4AJYSIMSNGbBn6NjqJiOvuBiJLmue6UKrrOeiKA6nFJNX1NcmvGIRyVcG HvuuNvCitJYdT7OKjQUycIlx0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfhppC1 cU+tXOoKe3hejGuoH2qPMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVgggCcfQdaG6/ZB7YiKJeNX7IcmClYK3KC/79Zn2MvPYlaFmwuq01 PAAsRv8jBLRrNn02v1VH+hRs0JleqQrsQ13F6yp7q0rEpDNeNeE7cRNYkiVwGOG9 cX/XtiQsXTiH8JiP4RdBLeQhqEmvmJ7eeMK0DVQBUXy2w0vkIm2bT55qpd2/ewBj xgJf6TsrkKLN2Hw3G+s/aDE4vv5MkIzIYW8KQAFoJ9YfeMI0cEPsxMUze1bi0hIa kbTEyFtebl454lKjN/NraxT+RT1YdHzLr4KMVJWDA++kJLdbfKaH/EYwGf9dVyz1 mTgNzybJxTyfXV7ZUiF/5mP8jo6O6k9z -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:00 2025 by rpki-client