This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: Zet0Z2sCax4KkJ+zxkkZj1RO1ijquCZA5frUP1TctWk= Subject key identifier: F9:D0:AE:2D:67:4B:A0:10:11:E0:A3:C8:56:6F:8E:7A:9C:DD:7E:83 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 0240 Signing time: Thu 25 Dec 2025 00:59:54 +0000 Manifest this update: Thu 25 Dec 2025 00:59:54 +0000 Manifest next update: Thu 01 Jan 2026 00:59:54 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: 6OBrPxgbLb1R1WJ/1tdshhODXUcldm+gP3N6Udb44Gc=) 2: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 3: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) 4: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 5: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Dec 25 00:59:54 2025 GMT Not After : Jan 1 00:59:54 2026 GMT Subject: CN=694c8c8a-b602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:17:aa:dd:1f:a9:0a:24:70:63:7d:1c:5b: 5f:6b:b6:9a:4e:36:a8:e5:b4:65:27:9e:96:80:28: d5:94:30:71:e5:84:12:7e:1d:fe:60:2a:11:65:b9: 94:6e:fc:b2:92:fe:7d:f0:c0:6d:9f:ef:e8:cf:9d: c8:42:ab:42:b5:40:f0:cb:92:8a:db:f2:5c:01:e4: ce:c1:74:57:5c:cf:ff:6d:44:90:71:40:0a:aa:0c: 41:39:f2:df:9a:4c:bf:84:f2:66:f8:8c:48:86:d1: 09:2b:ce:d9:9c:05:47:c8:3e:16:62:0a:00:b0:fa: 20:8b:92:35:8d:b7:75:81:14:c3:b0:63:91:47:b3: ac:9b:4a:0a:56:48:8a:6f:66:23:28:61:2f:66:72: 5a:c4:7c:19:55:33:84:cf:03:de:3c:56:75:26:32: b2:f4:bf:78:4c:aa:cb:78:44:3e:31:b2:25:a1:7f: 19:05:8e:72:39:a0:0f:77:82:33:b9:6d:d7:b4:97: 7d:e7:e8:aa:4d:ba:da:54:45:de:37:be:cc:4c:a7: 0b:27:ef:09:2d:cf:a7:d5:97:22:d5:b7:6f:e6:9b: e5:6e:42:12:01:b8:42:d1:92:c9:7f:44:31:80:4e: a8:0c:1e:77:2c:d1:be:7c:33:e1:45:09:ff:52:82: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D0:AE:2D:67:4B:A0:10:11:E0:A3:C8:56:6F:8E:7A:9C:DD:7E:83 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f3:fe:c0:b0:af:f0:8f:d3:97:ba:0f:55:8b:4f:88:0b:c1: b8:7e:ed:4a:81:e6:27:66:4e:f2:d6:66:60:c8:12:1b:cb:78: 34:5c:a5:6f:fd:6e:d3:e7:4a:86:b5:ec:6c:ab:ba:77:f4:fd: de:9c:27:2a:b1:62:66:ed:88:2c:7d:7a:15:f5:c4:97:fd:8a: f7:3c:ee:3d:b2:12:09:d1:23:71:d4:be:58:3a:31:a9:38:4e: 97:e1:95:ce:ae:96:4c:1e:b8:6c:66:33:1f:90:e1:07:64:83: b8:5d:7e:8c:cc:8b:1e:9b:35:86:ba:17:b8:1f:15:83:d5:95: fd:75:59:d7:ab:21:e2:5e:f0:e7:29:e7:24:20:ad:fd:98:48: 76:c9:63:58:da:4a:93:5a:a2:7c:10:04:2a:0d:09:24:b8:c9: e2:6c:3e:53:d2:e6:a6:64:97:86:7c:29:2f:c6:70:76:21:cf: d1:49:2b:fc:9f:d7:93:78:c3:fa:44:cb:4c:7f:89:a3:3b:20: 55:24:00:c9:4d:2f:b4:6d:0d:c1:21:e0:85:e9:5f:54:0c:3f: 7a:66:9a:85:d0:f2:de:b2:56:c9:06:f1:cd:c2:3a:54:cc:12: f6:b0:0a:6a:cf:76:5c:52:4f:f1:ed:05:d2:1f:26:57:9d:4d: 2a:fa:d3:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUxMjI1MDA1OTU0WhcNMjYwMTAxMDA1OTU0WjAYMRYwFAYD VQQDDA02OTRjOGM4YS1iNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSMXqt0fqQokcGN9HFtfa7aaTjao5bRlJ56WgCjVlDBx5YQSfh3+YCoRZbmU bvyykv598MBtn+/oz53IQqtCtUDwy5KK2/JcAeTOwXRXXM//bUSQcUAKqgxBOfLf mky/hPJm+IxIhtEJK87ZnAVHyD4WYgoAsPogi5I1jbd1gRTDsGORR7Osm0oKVkiK b2YjKGEvZnJaxHwZVTOEzwPePFZ1JjKy9L94TKrLeEQ+MbIloX8ZBY5yOaAPd4Iz uW3XtJd95+iqTbraVEXeN77MTKcLJ+8JLc+n1Zci1bdv5pvlbkISAbhC0ZLJf0Qx gE6oDB53LNG+fDPhRQn/UoLE1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnQri1n S6AQEeCjyFZvjnqc3X6DMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN8/7AsK/wj9OXug9Vi0+IC8G4fu1KgeYnZk7y1mZgyBIby3g0XKVv /W7T50qGtexsq7p39P3enCcqsWJm7YgsfXoV9cSX/Yr3PO49shIJ0SNx1L5YOjGp OE6X4ZXOrpZMHrhsZjMfkOEHZIO4XX6MzIsemzWGuhe4HxWD1ZX9dVnXqyHiXvDn KeckIK39mEh2yWNY2kqTWqJ8EAQqDQkkuMnibD5T0uamZJeGfCkvxnB2Ic/RSSv8 n9eTeMP6RMtMf4mjOyBVJADJTS+0bQ3BIeCF6V9UDD96ZpqF0PLeslbJBvHNwjpU zBL2sApqz3ZcUk/x7QXSHyZXnU0q+tON -----END CERTIFICATE-----Generated at Fri Dec 26 04:53:11 2025 by rpki-client