This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: nnGcRsFib2QCQF4aRNq5L0qt2XLmk4v6Anp5TbgskcE= Subject key identifier: F4:DF:A5:4A:5E:45:46:A3:A1:53:2F:64:D2:C0:FF:56:7B:21:6E:7A Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 106C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 105B Signing time: Sat 20 Dec 2025 17:07:04 +0000 Manifest this update: Sat 20 Dec 2025 17:07:03 +0000 Manifest next update: Sat 27 Dec 2025 17:07:03 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: 1EicW8Bst91TGr7MZM9dpUqnQZ+yZAZ2Rj30knUDZow=) 2: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: fPoBgkYnMh4IMhrB/TA39+M1O1OAHZFrtUEJDkMooUg=) 3: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: ucL3j8TnFmy+7V5qbIqZDaLy79WcFoXLeH1a5In6i8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Dec 20 17:07:03 2025 GMT Not After : Dec 27 17:07:03 2025 GMT Subject: CN=6946d7b7-60dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:19:20:d3:65:e7:e1:de:a4:67:c4:b3:a0: 81:be:37:e4:06:d8:9c:d5:38:30:72:0d:02:d8:b8: 18:01:26:69:b2:49:de:3e:ea:67:f1:62:69:5b:4a: 2d:e2:af:40:b7:79:71:81:be:61:a1:c0:c3:ca:d5: 1f:8c:dd:65:45:f2:97:0e:71:1c:0a:d3:04:94:e9: f0:5c:b1:64:3b:3d:17:fc:84:fe:a5:54:7b:5e:a9: c1:67:f1:dc:ff:f0:7f:dc:26:b2:86:34:57:54:02: ef:fa:d9:51:e8:39:22:a6:5b:1d:b5:5f:b8:eb:93: 5a:07:2e:b1:f9:ad:e1:dd:f3:e0:3a:86:66:c7:0f: 7b:3d:4e:9c:d6:82:62:96:dd:86:da:f2:90:d5:1b: 6f:eb:43:5d:b1:e4:5a:8b:bd:9e:e4:15:fa:0e:ab: b1:f9:43:25:06:83:10:5d:25:77:e8:52:66:68:30: 9e:f3:f3:36:2a:8b:46:f6:bb:b9:18:09:2c:54:36: c3:5f:fa:81:76:33:cc:63:39:db:29:de:bd:7e:de: 62:e0:5b:2c:48:df:19:3d:1d:aa:86:8d:38:d4:1d: dc:dd:db:83:01:7e:53:78:6c:1d:cd:aa:3a:6a:40: 9f:58:f6:f5:a4:04:ff:84:6f:c5:1d:c1:a2:0c:33: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DF:A5:4A:5E:45:46:A3:A1:53:2F:64:D2:C0:FF:56:7B:21:6E:7A X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4f:1a:d3:89:92:81:2f:2e:18:23:16:20:bc:8a:d6:06:6d: 48:82:ee:c8:2d:e6:01:59:a7:d9:ca:23:81:92:fd:c4:97:71: 6f:63:77:c2:fb:4f:96:a3:d7:b8:5b:6b:48:95:b5:f9:9d:ff: 3a:9e:65:42:de:36:d6:42:63:c7:0e:27:fa:30:53:75:f9:b4: cf:de:15:ac:91:76:19:2a:9c:3d:ef:88:f1:6d:19:97:fd:94: ef:ed:5f:d4:13:eb:b8:74:37:fc:a6:b9:ee:ef:b6:a2:eb:5f: 7c:9f:30:6c:af:cf:38:c0:3e:c9:21:62:44:56:fd:ed:f4:4a: 71:08:91:4f:b8:0b:04:4e:d4:9b:89:06:76:df:da:07:04:22: 28:46:47:5b:af:bf:49:63:0e:b1:e2:74:c5:e8:d4:a5:28:82: 18:64:60:35:94:a1:25:e2:e5:98:68:90:be:7b:b5:bf:99:35: c8:4a:ed:fd:30:b5:cd:17:15:89:9a:1c:c9:e8:f7:37:80:e7: fd:75:86:06:6c:dc:9d:ec:49:2b:90:67:7f:ec:45:e0:2d:7d: e2:c6:3e:bf:00:a8:a9:a8:fa:77:50:55:2c:d1:ee:9c:e4:a8: fb:64:80:41:af:ae:2f:bb:58:8b:c0:ba:a4:36:80:70:c8:9c: 21:69:d4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjUxMjIwMTcwNzAzWhcNMjUxMjI3MTcwNzAzWjAYMRYwFAYD VQQDDA02OTQ2ZDdiNy02MGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj7wZINNl5+HepGfEs6CBvjfkBtic1Tgwcg0C2LgYASZpsknePupn8WJpW0ot 4q9At3lxgb5hocDDytUfjN1lRfKXDnEcCtMElOnwXLFkOz0X/IT+pVR7XqnBZ/Hc //B/3CayhjRXVALv+tlR6DkiplsdtV+465NaBy6x+a3h3fPgOoZmxw97PU6c1oJi lt2G2vKQ1Rtv60NdseRai72e5BX6Dqux+UMlBoMQXSV36FJmaDCe8/M2KotG9ru5 GAksVDbDX/qBdjPMYznbKd69ft5i4FssSN8ZPR2qho041B3c3duDAX5TeGwdzao6 akCfWPb1pAT/hG/FHcGiDDOFswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTfpUpe RUajoVMvZNLA/1Z7IW56MB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUTxrTiZKBLy4YIxYgvIrWBm1Igu7ILeYBWafZyiOBkv3El3FvY3fC +0+Wo9e4W2tIlbX5nf86nmVC3jbWQmPHDif6MFN1+bTP3hWskXYZKpw974jxbRmX /ZTv7V/UE+u4dDf8prnu77ai6198nzBsr884wD7JIWJEVv3t9EpxCJFPuAsETtSb iQZ239oHBCIoRkdbr79JYw6x4nTF6NSlKIIYZGA1lKEl4uWYaJC+e7W/mTXISu39 MLXNFxWJmhzJ6Pc3gOf9dYYGbNyd7EkrkGd/7EXgLX3ixj6/AKipqPp3UFUs0e6c 5Kj7ZIBBr64vu1iLwLqkNoBwyJwhadR/ -----END CERTIFICATE-----Generated at Mon Dec 22 10:52:46 2025 by rpki-client