This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: TJ/af08ONjVChOOAHc4DgSZWrzkMDYImgMXrkeVGVDQ= Subject key identifier: 2F:BB:4E:1B:B6:0B:F8:E6:4C:8C:F8:B4:3A:25:8F:09:FA:3C:33:A2 Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 0927 Signing time: Mon 22 Dec 2025 19:37:15 +0000 Manifest this update: Mon 22 Dec 2025 19:37:15 +0000 Manifest next update: Mon 29 Dec 2025 19:37:15 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: F+L/pA8Rz0IaiVTOfAaWpIkQr0pV2eHkhvgNGcVw2JM=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: m4UHiwp0JUFTF/BuJBJ638dc3TTaAGAQNXHClFrF1qI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Dec 22 19:37:15 2025 GMT Not After : Dec 29 19:37:15 2025 GMT Subject: CN=69499deb-c911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:1c:84:b4:13:40:fb:af:1d:76:2c:f9:49: f6:a1:ea:ee:37:a4:c8:26:70:4e:1a:8b:25:19:41: 0a:da:a0:aa:09:13:bf:62:ad:0d:f4:37:fd:b9:2d: 86:08:b1:b3:3a:c5:77:2e:18:00:ec:f1:ff:92:8e: 24:57:f6:c0:48:8d:9e:3c:40:cd:f8:b0:9d:5d:53: 40:cd:97:2b:3b:75:cc:9d:c2:8e:e4:66:b9:52:cb: b5:c9:44:e6:a2:19:fc:0e:85:ba:74:94:d3:0b:3e: 06:8e:d9:07:e3:db:9b:65:ea:34:59:af:f6:e7:db: 68:b8:48:f7:dc:33:c4:7d:67:91:40:1c:99:b4:5e: bf:c6:e1:a4:e5:e0:63:31:7b:a0:0d:ab:68:39:7f: 99:42:ca:97:43:4e:97:70:ee:64:99:11:9e:3e:ab: 89:3a:fc:93:45:7b:dd:df:28:e4:bc:36:42:df:05: d7:ed:06:53:b5:3e:fa:6c:2e:fd:82:90:93:6f:59: ae:f5:bd:80:29:03:32:38:e9:db:32:8c:45:09:44: 27:04:80:0a:10:84:61:f7:1a:c7:37:d7:eb:17:3a: be:d6:39:2d:c8:ab:65:00:9e:64:37:9d:dd:ae:ee: 59:4f:17:db:57:19:8e:b8:c3:78:14:74:d0:b2:90: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BB:4E:1B:B6:0B:F8:E6:4C:8C:F8:B4:3A:25:8F:09:FA:3C:33:A2 X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b7:ef:af:43:23:76:4e:69:15:e6:41:a9:67:7f:57:ad:ab: cb:df:de:c4:f6:1a:f5:5c:02:b3:3b:c8:4e:50:c6:0e:64:8b: 39:3b:2b:be:1b:70:6d:0f:d2:cd:27:ce:37:33:12:4c:68:32: 39:5e:f3:36:f5:cb:ee:4e:83:95:81:6f:17:6e:c1:d2:84:46: 10:68:b6:10:76:2c:b1:34:ff:d1:25:0e:de:65:43:9b:a3:6a: 81:ce:47:b4:bf:ff:d8:f5:78:55:80:f8:c6:c8:e8:dc:13:e7: 9d:e9:bc:1f:4a:f3:2e:29:99:83:8f:cf:c5:a6:89:ab:4e:eb: d0:c1:4d:4b:0e:6c:5d:26:28:ff:bd:db:60:8c:00:ab:96:f2: 84:5c:18:d6:2c:e5:7d:c2:97:c5:64:c1:c9:65:5f:84:f1:6a: 1d:f0:67:60:77:72:91:b6:8f:98:50:08:33:54:2a:d5:a0:95: c4:34:82:bd:ff:f1:74:1b:7a:3e:7f:48:29:13:da:2d:0a:42: 09:ce:7e:16:c3:d3:22:a6:06:6c:d4:17:a4:2c:a2:d5:02:96: 8f:a4:44:51:a1:c3:c1:b6:f2:62:80:d7:4a:49:14:c3:54:3d: 7d:d3:42:4b:da:bf:5e:21:75:bc:ba:af:4e:8b:8e:78:b2:3e: c3:d7:b8:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjUxMjIyMTkzNzE1WhcNMjUxMjI5MTkzNzE1WjAYMRYwFAYD VQQDDA02OTQ5OWRlYi1jOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvkchLQTQPuvHXYs+Un2oeruN6TIJnBOGoslGUEK2qCqCRO/Yq0N9Df9uS2G CLGzOsV3LhgA7PH/ko4kV/bASI2ePEDN+LCdXVNAzZcrO3XMncKO5Ga5Usu1yUTm ohn8DoW6dJTTCz4GjtkH49ubZeo0Wa/259touEj33DPEfWeRQByZtF6/xuGk5eBj MXugDatoOX+ZQsqXQ06XcO5kmRGePquJOvyTRXvd3yjkvDZC3wXX7QZTtT76bC79 gpCTb1mu9b2AKQMyOOnbMoxFCUQnBIAKEIRh9xrHN9frFzq+1jktyKtlAJ5kN53d ru5ZTxfbVxmOuMN4FHTQspDFDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+7Thu2 C/jmTIz4tDoljwn6PDOiMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJt++vQyN2TmkV5kGpZ39XravL397E9hr1XAKzO8hOUMYOZIs5Oyu+ G3BtD9LNJ843MxJMaDI5XvM29cvuToOVgW8XbsHShEYQaLYQdiyxNP/RJQ7eZUOb o2qBzke0v//Y9XhVgPjGyOjcE+ed6bwfSvMuKZmDj8/FpomrTuvQwU1LDmxdJij/ vdtgjACrlvKEXBjWLOV9wpfFZMHJZV+E8Wod8Gdgd3KRto+YUAgzVCrVoJXENIK9 //F0G3o+f0gpE9otCkIJzn4Ww9MipgZs1BekLKLVApaPpERRocPBtvJigNdKSRTD VD1900JL2r9eIXW8uq9Oi454sj7D17hq -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:36 2025 by rpki-client