This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: 47KwfL7DYh+XIa2g4oPMHCXlYw0k/E/H/sbNzkDELgg= Subject key identifier: 10:D6:CF:49:A4:D1:00:DA:D9:0A:6F:64:83:1A:E7:73:C2:F0:2A:59 Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 0681 Signing time: Thu 18 Dec 2025 20:46:05 +0000 Manifest this update: Thu 18 Dec 2025 20:46:04 +0000 Manifest next update: Thu 25 Dec 2025 20:46:04 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: 4Q++La0diNy3rg9bFrMxlVmVB4cmacaDOYRhQTvqz68=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: r8ZqDCZQUEDaJuodGigdg5730ebRMN80tyK9bKpWQ8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Dec 18 20:46:04 2025 GMT Not After : Dec 25 20:46:04 2025 GMT Subject: CN=6944680c-352d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:06:db:95:1a:14:8c:0c:65:5b:79:73:42:d2: d6:b1:6a:77:21:0f:19:3f:a9:f1:fb:cf:e3:ce:fc: f6:57:79:f2:c0:a3:c6:8d:15:43:51:c9:f7:cb:de: 32:89:69:07:b0:c1:35:0b:72:d8:6f:bb:fa:4d:86: 9d:3a:ce:0e:d9:78:e3:3f:bb:4b:45:a4:d8:e8:3f: 10:81:72:76:c3:d8:ca:82:00:fd:32:79:b3:89:14: 52:a4:7b:cb:49:15:86:9b:2b:1c:2e:82:95:e7:af: f1:34:9a:80:6c:94:4d:b7:9a:bf:28:ba:17:49:0a: 05:5b:72:1b:e1:0e:ed:06:49:ef:55:65:8e:20:36: 75:36:c4:f0:fd:2b:d7:bd:fb:ce:07:c7:58:a0:a0: 9f:4d:f0:d2:81:6b:7b:c9:f4:07:bd:28:f8:a2:c9: b1:5a:98:3f:86:d9:95:11:3c:9f:75:b4:99:d6:72: cd:98:c7:4d:5e:f2:06:46:2c:d3:d3:63:5a:9d:ec: bf:20:f5:8a:bb:d8:a9:60:a0:60:c4:8c:f1:ae:b2: e8:a0:c2:53:43:89:2f:6f:b4:ab:96:64:a9:d6:86: 02:ca:ba:ab:9e:ec:fb:e4:ac:f8:f1:6c:b4:4c:62: 26:c3:5b:96:f0:bd:45:e0:19:ab:61:96:38:54:20: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D6:CF:49:A4:D1:00:DA:D9:0A:6F:64:83:1A:E7:73:C2:F0:2A:59 X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:e4:f8:91:f0:80:67:8c:94:fb:e4:00:c3:9f:b5:0d:c4:b8: c0:91:1a:9f:45:6f:9e:0d:a8:d3:1f:50:ba:07:92:74:97:38: 49:85:cb:17:61:0e:9c:a5:76:e4:7f:d0:20:22:35:25:d9:f7: 42:a8:2d:0e:7c:a3:b7:9f:f1:e1:3e:f8:fd:82:7d:d7:1d:26: 82:67:25:6a:30:35:22:1d:2d:7d:d3:76:11:9a:9a:41:09:9f: 95:c4:2e:4e:7a:c0:51:83:50:12:f6:3b:7a:ac:54:5c:e2:a0: 80:2c:cc:41:05:73:74:3b:a1:e5:05:e2:41:0a:cf:8d:be:50: d4:d2:bf:3e:17:37:79:b7:38:33:bf:87:4b:92:30:ec:04:b4: 4b:a9:3f:1d:ea:5d:e5:d4:c6:f4:06:b6:19:b2:3f:a4:c5:39: 2c:27:2a:e2:5f:aa:04:ee:7b:38:75:9b:df:b4:fd:a6:fe:d0: c7:bd:da:1a:c0:b5:f9:b7:4b:c2:7f:17:f1:df:41:a2:68:da: f9:00:f7:c8:ea:eb:7f:35:1e:db:9c:d7:fc:f2:8e:46:4e:29: 11:f5:03:1e:12:b8:79:ef:d5:63:ad:28:0d:3b:44:dc:8b:de: 5e:71:00:8d:60:1b:27:3c:fd:7b:29:7b:30:b0:73:93:d6:9d: a8:a0:7a:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUxMjE4MjA0NjA0WhcNMjUxMjI1MjA0NjA0WjAYMRYwFAYD VQQDDA02OTQ0NjgwYy0zNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiwbblRoUjAxlW3lzQtLWsWp3IQ8ZP6nx+8/jzvz2V3nywKPGjRVDUcn3y94y iWkHsME1C3LYb7v6TYadOs4O2XjjP7tLRaTY6D8QgXJ2w9jKggD9MnmziRRSpHvL SRWGmyscLoKV56/xNJqAbJRNt5q/KLoXSQoFW3Ib4Q7tBknvVWWOIDZ1NsTw/SvX vfvOB8dYoKCfTfDSgWt7yfQHvSj4osmxWpg/htmVETyfdbSZ1nLNmMdNXvIGRizT 02Naney/IPWKu9ipYKBgxIzxrrLooMJTQ4kvb7SrlmSp1oYCyrqrnuz75Kz48Wy0 TGImw1uW8L1F4BmrYZY4VCCH3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDWz0mk 0QDa2QpvZIMa53PC8CpZMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDt5PiR8IBnjJT75ADDn7UNxLjAkRqfRW+eDajTH1C6B5J0lzhJhcsX YQ6cpXbkf9AgIjUl2fdCqC0OfKO3n/HhPvj9gn3XHSaCZyVqMDUiHS1903YRmppB CZ+VxC5OesBRg1AS9jt6rFRc4qCALMxBBXN0O6HlBeJBCs+NvlDU0r8+Fzd5tzgz v4dLkjDsBLRLqT8d6l3l1Mb0BrYZsj+kxTksJyriX6oE7ns4dZvftP2m/tDHvdoa wLX5t0vCfxfx30GiaNr5APfI6ut/NR7bnNf88o5GTikR9QMeErh579VjrSgNO0Tc i95ecQCNYBsnPP17KXswsHOT1p2ooHoo -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:16 2025 by rpki-client