This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: m6lzqqQvX9SraKSjq4j6kODt8t/QSjcZfM6+QgyGjlQ= Subject key identifier: 0D:DB:A6:58:4C:8D:39:38:6E:05:AC:AF:6F:2E:11:F4:F6:87:17:09 Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: AD Signing time: Tue 23 Dec 2025 05:05:20 +0000 Manifest this update: Tue 23 Dec 2025 05:05:19 +0000 Manifest next update: Tue 30 Dec 2025 05:05:19 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: KgyZJW319gh4QIiRlBUqVmH1y01SPcssE748KlZEbHg=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: Dec 23 05:05:19 2025 GMT Not After : Dec 30 05:05:19 2025 GMT Subject: CN=694a2310-1d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:46:02:3d:e7:53:9d:57:9d:3e:78:eb:37: e9:6e:6b:33:8e:26:03:11:7c:07:63:d7:4d:26:1f: 28:bf:69:f3:0d:27:0b:25:99:d1:cb:90:65:83:95: 21:61:08:23:bf:d5:0d:5c:f1:a0:63:e6:62:de:45: d9:3a:28:3b:de:2b:69:ac:8c:77:d6:66:30:49:05: 5d:9f:44:77:53:cb:58:4e:f3:dd:76:2b:53:72:be: eb:04:89:5c:96:f6:64:f3:17:cf:37:d9:5f:43:fc: 77:53:26:98:6b:29:4f:43:1f:f5:54:48:2d:f9:49: fe:78:6a:98:70:a3:64:7c:c3:a9:c8:6a:5c:11:e9: 79:fc:5b:8d:93:43:12:73:bb:1b:b2:69:99:40:d3: 27:e6:70:cb:57:b2:4e:cf:03:9b:75:9c:2d:01:87: 79:e8:41:de:32:08:68:73:7e:c3:3f:b9:5b:62:87: fd:61:de:8f:59:94:65:51:84:64:93:5d:63:46:c3: b8:d4:06:42:c3:a5:67:b5:95:08:e4:97:0c:58:60: 9c:a1:9d:af:28:e2:3d:fe:f7:14:ef:49:d0:bb:d1: ff:8b:00:6f:db:a7:ca:99:1c:ae:ff:bd:41:2d:77: 43:75:89:29:d4:24:ce:6e:9e:d9:5d:59:34:6c:63: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:A6:58:4C:8D:39:38:6E:05:AC:AF:6F:2E:11:F4:F6:87:17:09 X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:07:6a:f1:68:21:f8:60:b8:c5:fc:6f:bb:24:89:be:bb:c2: d4:b3:a5:30:42:8e:d9:9d:9b:52:5e:c9:82:93:9c:88:7a:e0: 5f:17:e5:74:96:71:c3:c2:3d:b9:ca:12:a2:70:3c:74:0b:bd: 40:5b:27:cd:cc:0f:c3:30:50:93:b5:86:d8:1e:2b:28:d7:ca: 24:12:b1:3d:cb:73:a4:18:ca:d7:d0:49:de:64:73:38:f7:77: 1c:71:72:83:13:62:39:2e:b5:e9:aa:06:64:99:0a:01:5c:8a: f5:5d:ca:3b:13:8e:af:50:af:d3:6a:d4:38:0c:ef:bc:7a:39: 18:62:d4:1c:61:35:7d:30:74:29:af:73:14:c9:38:32:e3:b9: 5e:6e:6b:6e:04:c2:47:07:29:de:6e:6c:b0:e5:ba:29:56:e3: 2a:b7:3e:ac:f4:98:9d:71:2d:b7:56:93:e3:82:4f:b8:67:cb: e3:29:80:05:6a:4f:ad:13:dc:32:74:f8:26:fa:8e:65:84:1f: bf:0b:0b:41:e7:e8:4e:e3:5f:4e:b4:09:e4:34:29:0d:7b:33: 36:57:44:9c:55:b9:a8:38:3a:9b:b7:4a:84:15:2d:7d:f0:54: be:c4:6f:7b:1b:76:ff:40:77:45:05:36:eb:fe:f4:cd:7e:25: 51:2c:60:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1 RjA3MDJBQzgwHhcNMjUxMjIzMDUwNTE5WhcNMjUxMjMwMDUwNTE5WjAYMRYwFAYD VQQDDA02OTRhMjMxMC0xZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA401GAj3nU51XnT546zfpbmszjiYDEXwHY9dNJh8ov2nzDScLJZnRy5Blg5Uh YQgjv9UNXPGgY+Zi3kXZOig73itprIx31mYwSQVdn0R3U8tYTvPdditTcr7rBIlc lvZk8xfPN9lfQ/x3UyaYaylPQx/1VEgt+Un+eGqYcKNkfMOpyGpcEel5/FuNk0MS c7sbsmmZQNMn5nDLV7JOzwObdZwtAYd56EHeMghoc37DP7lbYof9Yd6PWZRlUYRk k11jRsO41AZCw6VntZUI5JcMWGCcoZ2vKOI9/vcU70nQu9H/iwBv26fKmRyu/71B LXdDdYkp1CTObp7ZXVk0bGPMuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3bplhM jTk4bgWsr28uEfT2hxcJMB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0 OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzNS85OTI3Nzg0NkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JD MXBieVIzQVZSMXhmQndLc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKB2rxaCH4YLjF/G+7JIm+u8LUs6UwQo7ZnZtSXsmCk5yIeuBfF+V0 lnHDwj25yhKicDx0C71AWyfNzA/DMFCTtYbYHiso18okErE9y3OkGMrX0EneZHM4 93cccXKDE2I5LrXpqgZkmQoBXIr1Xco7E46vUK/TatQ4DO+8ejkYYtQcYTV9MHQp r3MUyTgy47lebmtuBMJHBynebmyw5bopVuMqtz6s9JidcS23VpPjgk+4Z8vjKYAF ak+tE9wydPgm+o5lhB+/CwtB5+hO419OtAnkNCkNezM2V0ScVbmoODqbt0qEFS19 8FS+xG97G3b/QHdFBTbr/vTNfiVRLGAm -----END CERTIFICATE-----Generated at Wed Dec 24 21:22:44 2025 by rpki-client