This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: JTW4oWziFgc8+aSDvHNQpX4aTG9qQ7XvVdkFl6613Uo= Subject key identifier: 2E:4F:BD:27:0C:E6:44:17:F5:E3:1C:08:58:35:81:F4:4A:E4:0C:9B Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 144B Signing time: Mon 22 Dec 2025 18:41:27 +0000 Manifest this update: Mon 22 Dec 2025 18:41:27 +0000 Manifest next update: Mon 29 Dec 2025 18:41:27 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: Qubu5KoVN17dSPUGQPautOC9w5N+tNpdoQ7UDOjvR1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Dec 22 18:41:27 2025 GMT Not After : Dec 29 18:41:27 2025 GMT Subject: CN=694990d7-d933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:3e:98:74:60:cd:10:7d:7e:99:85:48:e5: 13:40:36:44:e1:3b:ea:e0:80:65:ea:4b:37:06:94: a5:62:91:33:81:66:54:69:da:06:bd:39:12:5f:e5: 16:93:6a:f8:02:22:12:0d:c5:97:fa:21:e7:b5:b2: e1:d5:c4:af:09:cf:66:6b:6a:03:7f:b2:1f:2a:e5: bc:e2:52:ac:32:a2:2f:73:35:be:ea:34:23:9e:22: ea:74:b2:22:40:4b:43:e2:2d:a5:fc:2d:da:0a:8b: 28:d9:c0:1c:3d:0b:94:df:ea:0e:5b:6e:ff:e3:f2: 15:c7:8a:b1:1f:e9:6c:24:04:f7:3e:20:a6:31:ad: 9d:65:6e:60:c2:79:32:26:e0:a9:8a:23:fd:6b:ee: b2:f1:fe:9e:87:73:c8:48:e3:cf:0c:9d:d3:8b:88: bd:55:2a:23:ea:81:0f:0f:4c:d9:9b:bb:96:53:6e: 8e:c3:9a:01:57:6c:e0:22:75:8b:5d:1a:fb:35:59: 17:95:ef:82:a6:e5:14:2d:05:13:2a:6d:d5:11:2f: b0:21:1c:66:42:13:ee:fc:be:a9:63:5f:01:50:47: ff:87:9b:a0:15:21:c7:72:f9:b9:60:3c:75:f3:bc: 49:02:14:1e:3a:53:8e:ea:d9:5d:88:9b:a8:c9:be: d2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:BD:27:0C:E6:44:17:F5:E3:1C:08:58:35:81:F4:4A:E4:0C:9B X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ea:b7:ca:14:8e:07:92:d3:2d:02:7b:40:19:67:86:e8:ae: ca:a3:9c:e5:44:27:b7:2c:93:b6:f1:9a:e9:5f:7d:fe:fe:87: 0c:32:b5:da:72:5e:cf:88:9a:ff:43:d9:9b:e2:f5:48:68:84: 97:4e:fd:e1:64:3c:a2:99:25:56:45:28:e7:68:7b:50:95:37: f7:b4:ac:0d:03:a1:d4:c1:6e:d0:50:c9:df:71:8e:a6:90:c2: b8:17:89:88:87:88:6e:c6:d9:1a:be:e8:5e:27:36:53:e6:70: 68:01:d0:c4:68:38:2d:66:4e:dd:42:5c:87:10:e7:94:58:04: 3f:a9:ac:86:ac:ba:9a:3c:82:fe:e1:d7:2f:96:96:74:d8:3f: 84:51:19:7f:09:11:09:7e:12:0c:d2:bb:cf:a2:ab:b1:13:89: 89:a7:92:92:a0:73:17:2a:de:d4:ca:c6:43:0f:8f:69:1d:bd: fd:de:be:c3:98:88:f1:4e:78:0a:c0:96:de:90:1a:40:0b:f4: 69:69:c4:a9:bb:b6:86:81:40:e1:e7:4d:4e:a9:6c:cc:9c:d7: 6b:f1:34:5d:98:75:0e:1f:49:f9:47:12:b9:29:66:40:de:14: 02:7e:41:25:d8:63:b6:b2:e1:c8:6f:d3:24:b0:bb:24:37:7f: f2:1f:74:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjUxMjIyMTg0MTI3WhcNMjUxMjI5MTg0MTI3WjAYMRYwFAYD VQQDDA02OTQ5OTBkNy1kOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoU+mHRgzRB9fpmFSOUTQDZE4Tvq4IBl6ks3BpSlYpEzgWZUadoGvTkSX+UW k2r4AiISDcWX+iHntbLh1cSvCc9ma2oDf7IfKuW84lKsMqIvczW+6jQjniLqdLIi QEtD4i2l/C3aCoso2cAcPQuU3+oOW27/4/IVx4qxH+lsJAT3PiCmMa2dZW5gwnky JuCpiiP9a+6y8f6eh3PISOPPDJ3Ti4i9VSoj6oEPD0zZm7uWU26Ow5oBV2zgInWL XRr7NVkXle+CpuUULQUTKm3VES+wIRxmQhPu/L6pY18BUEf/h5ugFSHHcvm5YDx1 87xJAhQeOlOO6tldiJuoyb7SqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5PvScM 5kQX9eMcCFg1gfRK5AybMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd6rfKFI4HktMtAntAGWeG6K7Ko5zlRCe3LJO28ZrpX33+/ocMMrXa cl7PiJr/Q9mb4vVIaISXTv3hZDyimSVWRSjnaHtQlTf3tKwNA6HUwW7QUMnfcY6m kMK4F4mIh4huxtkavuheJzZT5nBoAdDEaDgtZk7dQlyHEOeUWAQ/qayGrLqaPIL+ 4dcvlpZ02D+EURl/CREJfhIM0rvPoquxE4mJp5KSoHMXKt7UysZDD49pHb393r7D mIjxTngKwJbekBpAC/RpacSpu7aGgUDh501OqWzMnNdr8TRdmHUOH0n5RxK5KWZA 3hQCfkEl2GO2suHIb9MksLskN3/yH3QY -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:52 2025 by rpki-client