This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: /vzzteAXdPM2zBcDeLI54AowWfBu2meybmECKcXUuyA= Subject key identifier: 34:AE:66:EB:C6:52:DF:2E:DA:A1:CE:43:59:8B:97:F1:20:B9:50:1C Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: 010E Signing time: Fri 19 Dec 2025 04:09:42 +0000 Manifest this update: Fri 19 Dec 2025 04:09:42 +0000 Manifest next update: Fri 26 Dec 2025 04:09:42 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: B7QsB7J5CQczJearB/rJfbKjRY8TaH8r+/6EvUE95Ew=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: ZZDdEUCyxIX0Eybvqkeb03mNWg+YxSkSpegb3mdW8RE=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: CGn0Q55/AX22nfT4AGCKBK/ILhvxf+/fmsvng3DA1pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Dec 19 04:09:42 2025 GMT Not After : Dec 26 04:09:42 2025 GMT Subject: CN=6944d006-3116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:22:13:53:0f:df:0f:62:96:01:17:b1:58: 90:8b:dc:97:e9:5a:26:69:ce:a5:98:e2:1a:ab:65: 70:09:5e:73:68:83:4d:e9:25:33:fd:2f:fd:31:50: 5c:82:26:b6:09:91:ff:18:af:75:5a:6f:79:1a:b4: 87:bf:25:28:9b:22:67:ee:a0:34:56:35:52:01:15: ad:f1:c0:26:d7:4c:5a:60:d7:04:87:76:fc:5b:3b: 22:f1:0b:77:cb:52:50:5b:19:b3:6b:d8:b2:c3:b0: 7d:3e:f9:2e:50:ec:81:b7:9b:26:ae:49:b1:f1:5c: d5:55:20:28:d5:a7:4f:e5:f7:fb:2f:04:ac:84:00: e8:76:c8:0f:1b:41:95:be:36:a4:38:d5:15:c3:1d: 5e:ce:7c:bf:4a:98:ed:64:09:ec:70:b9:6c:42:b6: b3:98:6e:b5:9d:22:88:71:0b:b6:0d:be:11:1a:9c: 1e:c6:3e:06:08:33:e4:17:9b:c6:ee:0c:28:c9:f0: 7d:61:86:57:b4:8c:f6:89:a6:c6:7c:20:de:e6:71: c9:05:21:64:45:ec:13:a4:cf:21:95:25:df:cf:ce: 84:ef:0f:b7:26:84:5c:10:e7:14:ba:2a:98:e4:45: 97:56:ea:35:c7:d0:88:65:35:c3:83:c8:f6:4c:05: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AE:66:EB:C6:52:DF:2E:DA:A1:CE:43:59:8B:97:F1:20:B9:50:1C X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:fc:80:37:d9:af:67:1b:14:5b:5a:48:9e:c1:9d:f9:d3:56: cc:9a:29:31:43:79:67:49:64:d5:95:73:c9:b3:93:79:91:2e: 3e:cb:9e:c1:1a:b5:9a:68:0f:89:95:4b:59:0c:10:8b:3d:05: a6:66:17:8e:1c:49:94:ce:67:a1:56:34:ea:42:94:52:f1:e3: c7:d6:06:e3:07:dc:87:51:bb:3c:98:3c:b9:20:02:2c:ef:e2: ff:c5:e4:c1:4c:6d:ad:c3:f4:a8:62:2b:dc:07:52:6e:5d:fe: 8b:9e:46:bf:dd:b1:00:cd:23:05:0d:97:32:79:6e:a9:08:c9: 06:0e:69:b4:fe:05:9b:81:f5:3a:f6:0c:0c:96:a1:fc:c3:11: 6f:31:01:64:e9:95:7f:61:51:36:c2:6c:c2:84:76:8a:bf:01: 85:96:78:31:cd:d4:69:35:d4:fa:8e:da:4e:e2:f3:19:8f:9a: 74:3a:5a:09:f6:33:78:77:7c:41:87:c1:01:cb:40:3e:70:94: dc:a8:b7:20:1e:22:f6:69:59:b8:c9:94:9d:50:07:9e:c2:35: d2:d4:dd:5c:43:31:16:dd:a2:82:80:dd:62:4f:67:50:58:f2: 88:e0:7e:2b:88:d4:43:50:0c:e6:b7:74:dc:d8:bf:30:1f:11: 95:02:f9:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjUxMjE5MDQwOTQyWhcNMjUxMjI2MDQwOTQyWjAYMRYwFAYD VQQDDA02OTQ0ZDAwNi0zMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/kiE1MP3w9ilgEXsViQi9yX6Vomac6lmOIaq2VwCV5zaINN6SUz/S/9MVBc gia2CZH/GK91Wm95GrSHvyUomyJn7qA0VjVSARWt8cAm10xaYNcEh3b8Wzsi8Qt3 y1JQWxmza9iyw7B9PvkuUOyBt5smrkmx8VzVVSAo1adP5ff7LwSshADodsgPG0GV vjakONUVwx1ezny/SpjtZAnscLlsQrazmG61nSKIcQu2Db4RGpwexj4GCDPkF5vG 7gwoyfB9YYZXtIz2iabGfCDe5nHJBSFkRewTpM8hlSXfz86E7w+3JoRcEOcUuiqY 5EWXVuo1x9CIZTXDg8j2TAWNMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSuZuvG Ut8u2qHOQ1mLl/EguVAcMB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS/IA32a9nGxRbWkiewZ3501bMmikxQ3lnSWTVlXPJs5N5kS4+y57B GrWaaA+JlUtZDBCLPQWmZheOHEmUzmehVjTqQpRS8ePH1gbjB9yHUbs8mDy5IAIs 7+L/xeTBTG2tw/SoYivcB1JuXf6Lnka/3bEAzSMFDZcyeW6pCMkGDmm0/gWbgfU6 9gwMlqH8wxFvMQFk6ZV/YVE2wmzChHaKvwGFlngxzdRpNdT6jtpO4vMZj5p0OloJ 9jN4d3xBh8EBy0A+cJTcqLcgHiL2aVm4yZSdUAeewjXS1N1cQzEW3aKCgN1iT2dQ WPKI4H4riNRDUAzmt3Tc2L8wHxGVAvmb -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:13 2025 by rpki-client