This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: soknQ7yRwGqmccfwFtHpwga4efwbG0AkRYRzXCDfzKI= Subject key identifier: D9:A7:3A:E0:33:AA:58:BF:B2:A2:83:D7:29:0A:D8:5E:AE:C3:1C:49 Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 1711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 16FB Signing time: Wed 10 Dec 2025 16:12:36 +0000 Manifest this update: Wed 10 Dec 2025 16:12:36 +0000 Manifest next update: Wed 17 Dec 2025 16:12:36 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: RJmXinR8w4BHR3baxRUw1ERyJ8rFlH1riUvot4kiC+M=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 16:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5905 (0x1711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Dec 10 16:12:36 2025 GMT Not After : Dec 17 16:12:36 2025 GMT Subject: CN=69399bf4-e192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:d7:8f:eb:08:dc:71:1a:13:5a:72:f7:34: 77:b4:01:59:30:e7:3e:64:d7:71:d5:03:a2:23:ba: e2:9a:eb:e1:37:2b:66:3e:34:13:61:fc:0b:b7:ec: f1:87:b7:42:94:65:d3:1c:b4:41:e3:0d:c7:2b:6b: f7:47:8a:a5:45:e1:a5:7e:29:a3:6a:e9:66:aa:af: 39:66:4f:94:eb:5c:67:39:0d:c0:25:b0:3a:19:7a: 75:3b:8e:5e:03:79:ab:aa:47:ab:f8:1b:61:19:96: 4d:1c:ad:27:e5:32:89:ff:a7:4d:9f:d4:75:ed:c6: bb:b7:e5:a9:c1:bc:73:2d:e4:ad:81:3e:08:a6:a9: 99:98:6f:90:2d:33:05:7a:ca:5e:45:72:30:20:73: 52:a3:a7:c0:f0:0b:3a:52:1d:94:b4:c7:2c:cf:72: 3e:e3:be:4b:5d:16:df:2b:9a:1e:c8:53:9d:f2:b5: 84:33:5d:04:59:bb:c8:6e:9e:cf:d0:ee:25:c1:6f: c3:5c:9d:e8:1a:94:02:35:16:1a:43:16:7c:ae:2d: 1e:1d:1f:41:c5:24:d4:6a:a2:55:0b:15:93:56:4e: 38:a8:76:c5:95:fa:38:29:8f:30:c6:fe:b2:c1:7a: d8:7c:d1:26:0d:f4:11:6f:c8:3c:2a:5a:63:a4:bb: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:3A:E0:33:AA:58:BF:B2:A2:83:D7:29:0A:D8:5E:AE:C3:1C:49 X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fd:be:48:b3:c6:df:e2:b2:58:23:77:af:bf:db:78:e8:21: e0:50:a1:d7:b6:66:2e:be:f2:52:80:7f:22:8d:98:ba:c2:38: f2:50:04:e3:2c:4e:67:52:a1:7c:ee:70:4e:30:57:71:36:9e: 4b:1c:38:2d:f4:7d:10:24:a7:1e:a6:c0:46:54:71:8d:e2:e5: 25:9e:70:fe:30:b5:9e:ad:8b:ca:98:e3:8a:8c:bc:1f:a3:e8: 2b:7f:cf:cf:4b:99:6e:db:1c:f3:80:0b:60:04:3e:69:86:53: 2f:a9:0b:5b:79:33:43:0c:39:fe:33:48:83:55:37:61:bd:f5: 56:cd:16:5e:44:42:74:bd:1f:13:3a:15:26:5c:ce:82:1e:8c: a7:00:a3:b3:ce:a4:7a:bc:8b:35:a2:5b:6f:1a:34:e0:b9:ec: bd:46:55:19:16:f8:74:7d:82:29:28:00:4e:5f:74:c6:4d:74: 55:c6:75:ab:2b:46:8c:6d:c3:33:c2:e7:11:0c:32:0c:25:e7: 43:ba:0a:4c:f7:7b:97:60:83:d3:c3:00:38:89:0e:4d:0b:2f: 96:b1:f2:7d:c7:ea:43:90:d6:54:70:5a:6a:4b:36:ff:b2:92: af:b1:91:d3:cf:e0:05:77:4d:8b:44:ea:d9:93:42:d2:5f:cc: b5:78:4c:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUxMjEwMTYxMjM2WhcNMjUxMjE3MTYxMjM2WjAYMRYwFAYD VQQDEw02OTM5OWJmNC1lMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8nHXj+sI3HEaE1py9zR3tAFZMOc+ZNdx1QOiI7rimuvhNytmPjQTYfwLt+zx h7dClGXTHLRB4w3HK2v3R4qlReGlfimjaulmqq85Zk+U61xnOQ3AJbA6GXp1O45e A3mrqker+BthGZZNHK0n5TKJ/6dNn9R17ca7t+WpwbxzLeStgT4IpqmZmG+QLTMF espeRXIwIHNSo6fA8As6Uh2UtMcsz3I+475LXRbfK5oeyFOd8rWEM10EWbvIbp7P 0O4lwW/DXJ3oGpQCNRYaQxZ8ri0eHR9BxSTUaqJVCxWTVk44qHbFlfo4KY8wxv6y wXrYfNEmDfQRb8g8KlpjpLsCXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmnOuAz qli/sqKD1ykK2F6uwxxJMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/b5Is8bf4rJYI3evv9t46CHgUKHXtmYuvvJSgH8ijZi6wjjyUATj LE5nUqF87nBOMFdxNp5LHDgt9H0QJKcepsBGVHGN4uUlnnD+MLWerYvKmOOKjLwf o+grf8/PS5lu2xzzgAtgBD5phlMvqQtbeTNDDDn+M0iDVTdhvfVWzRZeREJ0vR8T OhUmXM6CHoynAKOzzqR6vIs1oltvGjTguey9RlUZFvh0fYIpKABOX3TGTXRVxnWr K0aMbcMzwucRDDIMJedDugpM93uXYIPTwwA4iQ5NCy+WsfJ9x+pDkNZUcFpqSzb/ spKvsZHTz+AFd02LROrZk0LSX8y1eEzd -----END CERTIFICATE-----Generated at Fri Dec 12 13:14:54 2025 by rpki-client