This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: HIARoEwHFcmfg+b0V0Aspy1W5X2/dPiBUGMtZX6Jlqs= Subject key identifier: C2:EA:AD:CC:CA:7B:C4:79:B2:39:28:77:CD:C4:BC:78:65:6D:A9:A8 Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0CCB Signing time: Thu 18 Dec 2025 17:55:38 +0000 Manifest this update: Thu 18 Dec 2025 17:55:38 +0000 Manifest next update: Thu 25 Dec 2025 17:55:38 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: +2gBSCm6UQooOM83MOMgqJPjAEZTXIU6yQNCKMFRMKI=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Dec 18 17:55:38 2025 GMT Not After : Dec 25 17:55:38 2025 GMT Subject: CN=6944401a-c2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:78:8c:64:42:12:dc:41:a8:51:a8:80:fe: 9a:c1:45:8f:62:22:b5:df:54:4f:11:02:79:bd:89: ad:5d:82:59:4f:2b:e5:d4:1c:39:4a:d3:fb:11:0b: ad:5b:a5:06:3e:c3:aa:e1:81:a1:9d:39:d3:db:11: 17:1d:55:5e:57:fe:2c:e4:27:fd:78:6f:a3:ba:15: d0:9b:c9:4f:fc:3d:14:97:b2:c7:87:bb:c4:89:20: 43:0e:11:61:7d:9d:13:8d:27:54:b7:69:26:2b:96: 2e:84:f9:9e:e5:ba:8c:3c:12:35:f1:8c:97:35:83: 01:41:ff:da:34:51:65:c8:79:c4:54:33:d5:bc:37: 23:9a:70:bc:5b:39:63:b4:9d:0c:87:45:51:1b:f6: 12:d8:da:b6:18:a5:64:96:6e:c5:a3:ab:da:6e:e2: b0:d6:00:d8:ef:20:da:de:eb:79:56:d7:db:0d:e1: f9:a3:9e:d4:4e:d5:3e:80:a3:b2:7f:aa:af:bc:f7: 11:3c:08:26:66:45:d8:fc:e3:5a:c3:08:1c:10:06: 8f:94:9b:57:22:7a:6f:2a:a5:93:0c:42:d8:06:9f: 83:c8:79:f0:49:f9:3f:d7:38:e2:de:e7:8c:11:0e: 03:a4:44:8d:d6:4a:fa:f5:19:23:e8:36:c8:b8:8e: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:AD:CC:CA:7B:C4:79:B2:39:28:77:CD:C4:BC:78:65:6D:A9:A8 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:67:9d:64:ab:d9:c5:d6:dd:d0:69:3e:ba:53:71:17:4e:80: 25:d2:b2:cb:2a:d9:17:2e:38:0b:a3:a9:c1:40:a0:7a:68:cf: 56:48:d6:e1:59:ba:a9:6c:47:10:93:21:ec:76:d5:54:8f:e8: dc:c7:91:d9:a2:22:02:31:bd:5e:10:7a:8d:32:ac:99:32:61: 78:09:ca:3e:87:e0:ff:82:e6:ff:8c:02:92:f3:a1:2d:82:54: ff:8f:52:8b:9a:aa:e1:2f:8a:da:99:ee:95:16:e8:b6:09:be: 06:fc:55:43:53:fe:33:e1:36:00:e7:2b:ea:c8:d2:6e:81:fe: a6:ed:ce:b0:8d:a4:f1:2f:16:71:da:4e:4d:03:fc:2f:76:1b: 57:a5:cb:82:a6:5f:83:cf:5a:80:22:98:42:c7:12:fa:43:27: f0:36:f7:88:4f:85:61:f7:d9:f4:3b:a0:71:98:76:fb:92:d1: c5:dc:3d:f7:22:02:4e:cd:99:28:c3:81:b4:60:90:54:33:46: 68:ae:f6:e2:ba:29:c3:85:62:bd:db:98:98:e6:fd:40:93:92: ea:5a:0e:98:b3:c3:59:b3:61:92:9f:8d:44:0e:9e:61:3a:03: 30:b5:cc:2c:e6:d0:97:df:07:ee:69:18:c9:a8:ad:14:e9:b4: fe:73:15:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjUxMjE4MTc1NTM4WhcNMjUxMjI1MTc1NTM4WjAYMRYwFAYD VQQDDA02OTQ0NDAxYS1jMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYt4jGRCEtxBqFGogP6awUWPYiK131RPEQJ5vYmtXYJZTyvl1Bw5StP7EQut W6UGPsOq4YGhnTnT2xEXHVVeV/4s5Cf9eG+juhXQm8lP/D0Ul7LHh7vEiSBDDhFh fZ0TjSdUt2kmK5YuhPme5bqMPBI18YyXNYMBQf/aNFFlyHnEVDPVvDcjmnC8Wzlj tJ0Mh0VRG/YS2Nq2GKVklm7Fo6vabuKw1gDY7yDa3ut5VtfbDeH5o57UTtU+gKOy f6qvvPcRPAgmZkXY/ONawwgcEAaPlJtXInpvKqWTDELYBp+DyHnwSfk/1zji3ueM EQ4DpESN1kr69Rkj6DbIuI77tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLqrczK e8R5sjkod83EvHhlbamoMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdZ51kq9nF1t3QaT66U3EXToAl0rLLKtkXLjgLo6nBQKB6aM9WSNbh WbqpbEcQkyHsdtVUj+jcx5HZoiICMb1eEHqNMqyZMmF4Cco+h+D/gub/jAKS86Et glT/j1KLmqrhL4rame6VFui2Cb4G/FVDU/4z4TYA5yvqyNJugf6m7c6wjaTxLxZx 2k5NA/wvdhtXpcuCpl+Dz1qAIphCxxL6QyfwNveIT4Vh99n0O6BxmHb7ktHF3D33 IgJOzZkow4G0YJBUM0ZorvbiuinDhWK925iY5v1Ak5LqWg6Ys8NZs2GSn41EDp5h OgMwtcws5tCX3wfuaRjJqK0U6bT+cxXE -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:51 2025 by rpki-client