This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: 4W6Vd+zkD1oBarI57n9C8LZprM/+I7hVUeP4CgdF5HI= Subject key identifier: D6:4A:1B:30:69:62:13:59:7A:3D:B5:72:14:E4:46:3F:C8:B2:6D:47 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 049E Signing time: Mon 22 Dec 2025 23:05:46 +0000 Manifest this update: Mon 22 Dec 2025 23:05:46 +0000 Manifest next update: Mon 29 Dec 2025 23:05:46 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: E5ey9EUWvF4Dulu7sqmjfkOB+gKv4y9nsAUwNjmXRLk=) 2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: En51wQVhPTzRoGx7r1Oh3OXcO/1NON/tJNYvVfLMz3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Dec 22 23:05:46 2025 GMT Not After : Dec 29 23:05:46 2025 GMT Subject: CN=6949ceca-d1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:43:47:94:e7:7e:04:9f:1b:f4:ed:ed:8e: 17:c7:f1:36:d7:ab:99:99:32:4d:3a:e2:cd:4f:90: 32:8b:b1:f6:ba:b9:c3:4e:37:e1:6a:3f:2c:43:af: be:cf:98:ea:17:d1:99:77:97:70:6b:ec:63:ed:65: c0:f0:29:f8:e7:8d:08:f0:c2:fd:63:fe:5b:d7:e4: 6d:ce:50:9e:01:4b:e5:42:09:76:91:3c:e6:9a:71: 9c:5f:7c:b0:de:38:ed:7b:2a:7b:f8:4e:e0:2d:3e: de:c3:9c:d4:17:2c:28:99:dd:30:76:24:d2:b8:7d: 1e:c1:86:ca:f7:47:48:62:64:ea:a5:88:ff:59:d3: 7f:4d:fe:69:01:58:0b:65:4b:2b:c0:0d:84:ea:61: 95:71:1a:79:ae:5c:83:e6:79:06:e8:e0:fa:a8:ab: d8:38:07:42:f3:40:72:38:ae:da:c3:c6:d5:aa:a6: ab:00:91:0a:5f:57:43:00:92:44:81:3e:2f:9f:64: 02:1b:5e:05:31:3b:76:4a:ba:1c:ae:43:f3:71:a2: 67:a1:14:ec:c6:e0:16:cb:63:a9:3a:70:7f:54:0b: 44:d1:4b:98:94:c1:3a:5f:db:5a:74:88:c4:30:13: f6:28:75:5e:e9:49:ae:03:ee:67:ab:1a:18:86:cd: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4A:1B:30:69:62:13:59:7A:3D:B5:72:14:E4:46:3F:C8:B2:6D:47 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:cc:8e:27:1a:c4:b5:a4:06:2e:fa:86:b0:f5:a1:47:59:6b: 50:60:83:5d:65:a1:20:1f:e3:6c:c1:23:9e:cc:9c:92:e3:eb: 99:78:ea:3e:b9:98:bf:3b:95:65:ee:d8:1d:b1:e7:54:3f:d7: ef:a1:c6:58:56:2c:33:bc:e5:f9:e3:c3:31:6f:ee:9b:64:51: 2d:a8:a4:27:76:44:a9:49:38:d7:36:13:51:4f:e9:1b:97:3c: 50:79:b7:e4:51:77:9e:6d:33:6b:d0:74:4c:c4:b1:ad:eb:0b: ee:a8:6a:b2:dd:93:65:78:fb:56:33:c2:1c:eb:5d:6e:b3:b3: 94:2e:bb:21:44:a5:03:e5:60:53:9b:e9:be:06:01:58:66:b4: 82:45:4d:00:d8:6b:b1:43:eb:65:24:e1:ce:8a:49:58:24:20: 3c:5a:6d:fe:02:e6:ab:2d:f7:bc:00:69:69:ee:24:f5:93:b4: c6:1f:a5:96:a6:a1:24:45:00:7a:48:72:2d:79:73:0b:f7:df: 0c:08:d2:ca:38:0f:d9:02:8b:e0:97:53:5e:dc:bf:a5:a8:89: a7:eb:e5:7f:9d:73:0d:a4:88:c1:21:06:2d:9d:c7:86:7a:6f: 0d:d1:68:de:c0:cc:bd:3b:e6:fb:a1:c5:e8:d2:ea:01:21:a0: d6:62:21:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUxMjIyMjMwNTQ2WhcNMjUxMjI5MjMwNTQ2WjAYMRYwFAYD VQQDDA02OTQ5Y2VjYS1kMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArs9DR5TnfgSfG/Tt7Y4Xx/E216uZmTJNOuLNT5Ayi7H2urnDTjfhaj8sQ6++ z5jqF9GZd5dwa+xj7WXA8Cn4540I8ML9Y/5b1+RtzlCeAUvlQgl2kTzmmnGcX3yw 3jjteyp7+E7gLT7ew5zUFywomd0wdiTSuH0ewYbK90dIYmTqpYj/WdN/Tf5pAVgL ZUsrwA2E6mGVcRp5rlyD5nkG6OD6qKvYOAdC80ByOK7aw8bVqqarAJEKX1dDAJJE gT4vn2QCG14FMTt2SrocrkPzcaJnoRTsxuAWy2OpOnB/VAtE0UuYlME6X9tadIjE MBP2KHVe6UmuA+5nqxoYhs3cVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZKGzBp YhNZej21chTkRj/Ism1HMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnzI4nGsS1pAYu+oaw9aFHWWtQYINdZaEgH+NswSOezJyS4+uZeOo+ uZi/O5Vl7tgdsedUP9fvocZYViwzvOX548Mxb+6bZFEtqKQndkSpSTjXNhNRT+kb lzxQebfkUXeebTNr0HRMxLGt6wvuqGqy3ZNlePtWM8Ic611us7OULrshRKUD5WBT m+m+BgFYZrSCRU0A2GuxQ+tlJOHOiklYJCA8Wm3+AuarLfe8AGlp7iT1k7TGH6WW pqEkRQB6SHIteXML998MCNLKOA/ZAovgl1Ne3L+lqImn6+V/nXMNpIjBIQYtnceG em8N0WjewMy9O+b7ocXo0uoBIaDWYiEA -----END CERTIFICATE-----Generated at Tue Dec 23 16:12:14 2025 by rpki-client