This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: bvOh4dZ9igq7bl+4cJh1/hkV73eDU1RhZcrxNV3SRxI= Subject key identifier: 3C:AF:C0:EC:74:31:CE:73:CD:AB:91:74:CA:92:4A:FB:13:E2:DD:E7 Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 059B Signing time: Sat 20 Dec 2025 22:31:01 +0000 Manifest this update: Sat 20 Dec 2025 22:31:01 +0000 Manifest next update: Sat 27 Dec 2025 22:31:01 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: hGBnc54jUxyN5c114VHcliSz0xIVv1sVPiJ8yqTHH7U=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: M+wNfsm6YQmLCJcAzey1G7TcdY1od2Gihz4uSm0Idd0=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: XeS+UNfddkVQ+DW6xIplHBmjPx6deLGv6cSwFbKYRAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Dec 20 22:31:01 2025 GMT Not After : Dec 27 22:31:01 2025 GMT Subject: CN=694723a5-c2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:b2:ef:6e:96:e6:c6:48:9d:b5:7c:0d:69: c6:07:bb:98:84:15:69:81:e7:03:64:7c:18:13:75: 4d:34:6a:c8:49:af:39:e8:db:9f:e0:eb:27:83:8a: 3c:5d:a1:e6:81:47:5c:82:42:4f:de:a9:88:f1:81: e3:58:a8:e1:4b:46:4a:04:0a:38:48:00:9c:69:16: 3e:7a:0c:93:57:c7:4e:aa:d5:54:d3:1e:23:5f:72: 54:2d:df:32:76:21:b8:80:3c:af:74:de:d2:5f:f3: 84:d8:b0:46:af:1a:5f:47:db:fc:06:bf:7d:13:f9: 8f:dc:97:a2:4d:80:bf:89:23:ea:bf:b4:15:66:8a: 9a:9e:b8:12:6e:0e:d4:82:80:50:b0:14:4c:5c:71: 1f:35:3c:cb:e2:ba:e0:05:aa:37:34:9a:38:54:96: f1:da:56:e9:ba:14:3f:26:3b:69:74:aa:c6:f3:e4: 68:37:97:f9:87:64:79:16:eb:e1:1e:e3:2f:41:c2: 20:9e:d1:73:76:39:b8:d3:b6:c1:41:cc:7e:74:9e: bd:de:30:b7:d5:e6:e3:de:de:2a:f0:66:b7:6e:da: 84:1b:cf:78:b1:da:2c:03:0e:56:92:46:fa:cc:41: 4e:24:21:9b:de:bb:a7:ae:2c:04:7a:e4:c4:69:6b: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AF:C0:EC:74:31:CE:73:CD:AB:91:74:CA:92:4A:FB:13:E2:DD:E7 X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cb:7f:21:39:bd:28:b0:08:4a:07:bd:26:bd:a0:61:5e:28: be:d7:3d:07:04:a3:e4:7c:eb:2e:d0:ea:97:9d:77:27:ce:14: 37:77:72:be:df:16:9f:98:7b:80:31:fc:07:c6:60:f0:95:42: b6:73:73:79:9b:fb:0b:4a:b5:1b:fa:5c:50:0a:28:3a:ee:a4: fe:a5:35:56:1c:6e:01:ae:c3:4e:12:57:60:2a:ef:c5:ba:07: 79:1f:ee:25:e6:97:c1:43:c3:ff:e5:16:58:e5:6a:37:d2:3e: 54:2f:c9:c6:9e:14:f5:f8:99:8b:e5:4f:2e:ac:59:34:cf:da: 6c:f6:7c:0e:77:8d:f9:48:8b:7e:b3:d3:ae:a3:97:33:bf:f5: 4d:1a:30:56:63:94:9f:38:d7:a0:7a:31:02:83:cb:6c:32:56: 67:d6:19:c1:4a:48:20:d2:03:81:a1:e3:d1:46:d9:3d:f6:72: 42:5b:ab:39:50:da:5f:aa:4c:ba:0b:c5:a9:39:52:ab:39:22: 0e:59:41:7a:7c:27:8d:0c:d8:67:78:1b:ae:69:f3:83:c7:16: 4a:af:1d:31:1a:2f:ed:20:18:82:15:c5:0f:95:ae:de:1d:d1: a6:97:e7:21:ee:40:7f:e8:ee:b9:8e:e8:68:b9:df:b1:49:47: d8:ab:38:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjUxMjIwMjIzMTAxWhcNMjUxMjI3MjIzMTAxWjAYMRYwFAYD VQQDDA02OTQ3MjNhNS1jMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArg2y726W5sZInbV8DWnGB7uYhBVpgecDZHwYE3VNNGrISa856Nuf4Osng4o8 XaHmgUdcgkJP3qmI8YHjWKjhS0ZKBAo4SACcaRY+egyTV8dOqtVU0x4jX3JULd8y diG4gDyvdN7SX/OE2LBGrxpfR9v8Br99E/mP3JeiTYC/iSPqv7QVZoqanrgSbg7U goBQsBRMXHEfNTzL4rrgBao3NJo4VJbx2lbpuhQ/JjtpdKrG8+RoN5f5h2R5Fuvh HuMvQcIgntFzdjm407bBQcx+dJ693jC31ebj3t4q8Ga3btqEG894sdosAw5Wkkb6 zEFOJCGb3runriwEeuTEaWs4fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyvwOx0 Mc5zzauRdMqSSvsT4t3nMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8y38hOb0osAhKB70mvaBhXii+1z0HBKPkfOsu0OqXnXcnzhQ3d3K+ 3xafmHuAMfwHxmDwlUK2c3N5m/sLSrUb+lxQCig67qT+pTVWHG4BrsNOEldgKu/F ugd5H+4l5pfBQ8P/5RZY5Wo30j5UL8nGnhT1+JmL5U8urFk0z9ps9nwOd435SIt+ s9Ouo5czv/VNGjBWY5SfONegejECg8tsMlZn1hnBSkgg0gOBoePRRtk99nJCW6s5 UNpfqky6C8WpOVKrOSIOWUF6fCeNDNhneBuuafODxxZKrx0xGi/tIBiCFcUPla7e HdGml+ch7kB/6O65juhoud+xSUfYqzhY -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:34 2025 by rpki-client