This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: hhkJMgJMzXDvwKDQyfuPPua9eg4xboOfkbVoOEyVgEs= Subject key identifier: 52:9E:D6:9E:DC:83:BD:38:48:A7:0C:C1:32:66:40:20:77:87:0C:19 Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: FC Signing time: Fri 19 Dec 2025 04:16:18 +0000 Manifest this update: Fri 19 Dec 2025 04:16:17 +0000 Manifest next update: Fri 26 Dec 2025 04:16:17 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: /VPy5GBEiegPMsMrAvJNxQv6Qch8m8TlpLpYEGDMpRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: Dec 19 04:16:17 2025 GMT Not After : Dec 26 04:16:17 2025 GMT Subject: CN=6944d191-96c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:3f:e8:73:9d:6e:b3:04:47:f4:97:75:2d: e0:10:4f:ac:1d:0f:5e:ab:25:9c:34:65:69:4a:9b: de:46:ae:31:bc:e9:72:67:52:ff:62:a9:76:b2:87: 99:c3:aa:a5:45:c9:7e:fb:41:87:8a:ee:2d:ed:3e: d1:4f:33:fd:25:74:f5:90:db:59:87:95:d6:89:65: 08:b8:62:df:92:34:fc:23:57:3d:c3:34:75:36:13: bd:f9:81:fb:19:3f:05:d6:5e:1e:b1:2e:c4:4f:30: f9:dc:11:93:7f:32:99:4f:3e:e7:09:d5:21:3c:5b: 02:93:68:86:0b:bb:5c:eb:1c:47:3e:5c:24:df:5f: 26:90:da:ec:03:45:0a:f4:61:40:05:86:00:3e:3a: ec:18:f1:b4:42:5e:f4:62:74:3a:34:fe:08:5b:0a: 1a:b2:9c:34:08:61:98:f4:79:c8:87:4e:76:6e:7b: ad:12:04:5b:d1:cc:d1:61:79:50:05:10:f2:96:8b: 30:66:5d:4d:4e:a7:83:09:4c:d7:0d:35:21:39:f9: b6:24:92:3a:fe:b9:cd:0a:80:3e:ea:61:08:87:4a: 1b:fe:d8:9d:68:1f:f5:ab:38:24:4e:12:4c:7b:3c: 78:9c:ef:82:16:ae:7a:48:11:87:88:5d:a2:e7:a1: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:D6:9E:DC:83:BD:38:48:A7:0C:C1:32:66:40:20:77:87:0C:19 X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c6:88:22:24:82:ac:2e:23:2f:52:1d:23:47:29:35:fb:e7: 8e:81:5e:9c:e7:21:c5:87:cf:45:28:25:b2:bb:11:c1:c3:e2: e8:e2:9d:d3:7c:ad:59:4f:73:6c:28:65:b6:82:ce:36:ae:1a: 81:4e:52:15:60:5d:62:4d:2d:67:4f:37:86:04:6a:82:72:60: 4e:6c:70:cf:0d:c2:9b:04:03:1d:52:ea:e5:ae:bb:9b:d1:9e: bf:18:64:1a:30:6f:b1:12:e0:0b:d0:fe:a7:d0:fb:a8:9f:94: cd:5d:7e:e2:c0:08:fc:0e:f1:42:fa:da:44:6f:d6:b7:51:7b: 07:d8:71:59:7c:4f:0f:69:1a:3b:4e:17:78:d3:4b:2a:17:f7: 53:35:c7:ae:92:ba:2d:ad:dd:18:03:c0:e5:52:93:33:c7:bc: e1:8e:20:5d:fd:87:da:b8:e1:0d:02:ea:5b:62:07:5a:f2:c0: ea:b7:ee:70:cd:43:ef:29:21:11:bb:e3:65:18:b3:ff:df:74: d5:0c:44:b7:fe:e4:e1:33:24:25:2d:86:54:ec:3a:12:bd:85: 60:0f:36:94:f9:38:26:6a:a9:99:05:38:dc:d9:f8:62:69:53: 5a:0e:14:63:55:ff:07:d4:dc:66:c8:bf:9b:a3:6e:fe:30:72: 62:22:69:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjUxMjE5MDQxNjE3WhcNMjUxMjI2MDQxNjE3WjAYMRYwFAYD VQQDDA02OTQ0ZDE5MS05NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkw/6HOdbrMER/SXdS3gEE+sHQ9eqyWcNGVpSpveRq4xvOlyZ1L/Yql2soeZ w6qlRcl++0GHiu4t7T7RTzP9JXT1kNtZh5XWiWUIuGLfkjT8I1c9wzR1NhO9+YH7 GT8F1l4esS7ETzD53BGTfzKZTz7nCdUhPFsCk2iGC7tc6xxHPlwk318mkNrsA0UK 9GFABYYAPjrsGPG0Ql70YnQ6NP4IWwoaspw0CGGY9HnIh052bnutEgRb0czRYXlQ BRDyloswZl1NTqeDCUzXDTUhOfm2JJI6/rnNCoA+6mEIh0ob/tidaB/1qzgkThJM ezx4nO+CFq56SBGHiF2i56EZZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKe1p7c g704SKcMwTJmQCB3hwwZMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADxogiJIKsLiMvUh0jRyk1++eOgV6c5yHFh89FKCWyuxHBw+Lo4p3T fK1ZT3NsKGW2gs42rhqBTlIVYF1iTS1nTzeGBGqCcmBObHDPDcKbBAMdUurlrrub 0Z6/GGQaMG+xEuAL0P6n0Puon5TNXX7iwAj8DvFC+tpEb9a3UXsH2HFZfE8PaRo7 Thd400sqF/dTNceukrotrd0YA8DlUpMzx7zhjiBd/YfauOENAupbYgda8sDqt+5w zUPvKSERu+NlGLP/33TVDES3/uThMyQlLYZU7DoSvYVgDzaU+TgmaqmZBTjc2fhi aVNaDhRjVf8H1NxmyL+bo27+MHJiImmp -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:43 2025 by rpki-client