This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: z7rp4vOlfk6sxpHhzlUNMN8GXT+bqCZCwRK6VJgcQE8= Subject key identifier: 53:F2:20:E7:3D:70:11:71:FB:7B:6E:51:9D:59:5C:27:CF:10:7F:4B Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: 0113 Signing time: Mon 29 Dec 2025 04:04:21 +0000 Manifest this update: Mon 29 Dec 2025 04:04:21 +0000 Manifest next update: Mon 05 Jan 2026 04:04:21 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: 7aJyjmAUEfp+EikAyemJ7t3idgHM7ein6nhtW+zZxcI=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: ZZDdEUCyxIX0Eybvqkeb03mNWg+YxSkSpegb3mdW8RE=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: CGn0Q55/AX22nfT4AGCKBK/ILhvxf+/fmsvng3DA1pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 04:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Dec 29 04:04:21 2025 GMT Not After : Jan 5 04:04:21 2026 GMT Subject: CN=6951fdc5-b1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:26:6f:fb:e4:69:90:cc:48:77:40:6b:d5: a6:15:33:4a:6c:77:fa:db:72:4b:8a:e7:28:e0:e0: aa:9a:3a:6f:53:d8:6b:70:04:3b:65:30:91:a2:ad: 15:ff:a1:b1:7a:27:bf:d3:57:b1:b2:49:c2:e5:c9: f3:3f:ff:f1:3d:24:eb:70:ed:7f:b3:bd:18:fa:0c: 07:e2:a7:d8:b4:05:7b:89:3b:93:1f:54:66:e9:a3: 2f:2b:18:fb:bb:ae:20:79:4d:e6:f7:c3:2a:13:bc: 25:bf:c0:56:bd:4c:ee:d1:9e:4e:72:7f:db:db:38: 55:53:82:df:e9:4a:19:d0:02:cf:8f:47:b4:b4:7e: 56:d8:cb:84:cc:c5:ad:ab:98:24:07:76:7f:db:98: 88:0a:27:e9:d7:46:fc:18:c9:56:24:2e:f4:60:5d: 41:a5:1a:f7:f4:20:fa:01:51:c7:34:d5:f0:0a:1b: e6:b5:64:1c:7a:da:58:38:f9:7a:bf:4e:e2:52:1f: 72:37:59:b2:11:96:1a:ed:18:d6:3e:41:fc:fb:5c: 76:6f:aa:ff:70:b5:80:74:f3:e6:5a:e2:df:99:21: 3a:4d:74:a2:39:86:d4:dd:3d:a7:11:df:5e:f9:47: 6d:85:9c:12:1d:89:6b:07:80:2f:ba:08:03:04:a7: b7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F2:20:E7:3D:70:11:71:FB:7B:6E:51:9D:59:5C:27:CF:10:7F:4B X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dd:31:0e:db:45:d4:f1:85:42:42:36:51:28:f1:15:1c:f2: 5c:7b:41:12:56:72:21:b4:f1:16:b4:a8:05:33:91:2d:b1:7f: 8f:98:89:77:83:cb:51:31:cd:82:9d:c5:44:f8:1e:f2:48:40: 15:1f:8d:2f:f4:1a:4f:cb:66:a7:06:af:88:95:e6:48:6a:41: 48:8e:b5:9b:58:54:f6:67:19:c3:32:2f:42:08:3d:81:98:03: 8e:4b:c7:d1:a0:13:88:e9:a6:db:79:b9:2e:42:72:fb:a8:28: 4c:92:ab:21:b6:a8:e1:5d:71:a5:83:44:5f:76:4d:c8:db:c8: fd:18:3a:04:85:88:93:45:2c:cc:6e:e1:fb:4f:c7:0c:b5:51: a4:38:21:88:45:e2:f6:1e:ee:db:ad:a9:24:a6:31:33:de:e7: 47:cf:8e:66:d6:15:54:15:cd:dc:90:32:25:66:79:83:a8:67: 52:6e:fb:d9:8c:00:cd:f5:59:7d:a3:6f:c9:f0:4a:ac:20:e4: 43:c9:6e:1b:93:57:f1:0d:38:38:f8:47:a3:63:c0:ba:b1:c6: 07:3e:99:ae:db:c9:92:3d:f9:21:88:e9:60:1c:a3:de:cf:dc: 90:8e:85:71:46:e1:fd:a4:01:37:53:50:c3:66:25:6e:f4:e3: 26:fa:c9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjUxMjI5MDQwNDIxWhcNMjYwMTA1MDQwNDIxWjAYMRYwFAYD VQQDDA02OTUxZmRjNS1iMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF0mb/vkaZDMSHdAa9WmFTNKbHf623JLiuco4OCqmjpvU9hrcAQ7ZTCRoq0V /6Gxeie/01exsknC5cnzP//xPSTrcO1/s70Y+gwH4qfYtAV7iTuTH1Rm6aMvKxj7 u64geU3m98MqE7wlv8BWvUzu0Z5Ocn/b2zhVU4Lf6UoZ0ALPj0e0tH5W2MuEzMWt q5gkB3Z/25iICifp10b8GMlWJC70YF1BpRr39CD6AVHHNNXwChvmtWQcetpYOPl6 v07iUh9yN1myEZYa7RjWPkH8+1x2b6r/cLWAdPPmWuLfmSE6TXSiOYbU3T2nEd9e +UdthZwSHYlrB4AvuggDBKe3aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPyIOc9 cBFx+3tuUZ1ZXCfPEH9LMB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr3TEO20XU8YVCQjZRKPEVHPJce0ESVnIhtPEWtKgFM5EtsX+PmIl3 g8tRMc2CncVE+B7ySEAVH40v9BpPy2anBq+IleZIakFIjrWbWFT2ZxnDMi9CCD2B mAOOS8fRoBOI6abbebkuQnL7qChMkqshtqjhXXGlg0Rfdk3I28j9GDoEhYiTRSzM buH7T8cMtVGkOCGIReL2Hu7brakkpjEz3udHz45m1hVUFc3ckDIlZnmDqGdSbvvZ jADN9Vl9o2/J8EqsIORDyW4bk1fxDTg4+EejY8C6scYHPpmu28mSPfkhiOlgHKPe z9yQjoVxRuH9pAE3U1DDZiVu9OMm+snx -----END CERTIFICATE-----Generated at Tue Dec 30 07:16:36 2025 by rpki-client