This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json) Hash identifier: pd84MKqknc/Retw5kLMh6tsT218DOtgfOzIuV1x4WHY= Subject key identifier: 06:F7:3F:49:F3:97:50:F3:CE:F3:80:8E:61:A3:73:5D:AE:3A:E4:54 Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft Manifest number: 16 Signing time: Fri 19 Dec 2025 06:46:59 +0000 Manifest this update: Fri 19 Dec 2025 06:46:58 +0000 Manifest next update: Fri 26 Dec 2025 06:46:58 +0000 Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: p6K3UaC+tloE53a1Lw5BxoVvR2hlkAuSdmPNzdTbPIU=) 2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: iFszXnez3BpB7Nejqqha0Uy0GZNQHVhj2pVkoNknBhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Dec 19 06:46:58 2025 GMT Not After : Dec 26 06:46:58 2025 GMT Subject: CN=6944f4e3-ff6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:7e:f8:67:e7:7b:37:25:16:b9:60:88:ee: a9:87:1d:99:26:8f:20:33:66:a1:f9:73:bc:cd:9e: b3:86:0f:a7:2f:9e:70:84:75:8c:8f:c4:a4:e8:eb: 61:89:c5:1d:34:b6:4a:a1:c7:8c:9d:76:cf:ea:bc: 5d:4d:2e:25:0e:c6:31:1f:05:1e:73:18:0c:2e:6a: 36:45:31:24:4c:b0:91:f0:a9:2e:5d:8d:ab:ec:c1: 90:29:40:f3:ec:29:d7:23:90:86:e8:6b:8e:14:41: 54:b9:81:a4:ad:21:31:8f:8e:aa:26:e8:a3:8c:44: 3b:42:38:de:bd:f0:34:6f:23:22:a6:fa:76:1c:42: 47:4c:1b:16:49:7b:91:88:7c:6e:77:75:dc:45:e9: df:61:1a:42:27:09:3b:2a:38:4f:b6:87:77:12:81: 3a:06:0e:fd:5b:b7:7e:0a:31:2b:f1:14:f2:26:4a: e2:62:d3:9a:27:7e:22:3e:02:8d:57:03:b7:3c:4a: b5:57:cd:a5:40:13:c8:0e:9c:82:cb:94:d3:23:d2: c7:a7:81:ce:a7:9c:4d:c3:ca:c5:d6:fd:52:96:d3: 20:4b:d2:ee:c3:f0:83:e5:bb:b8:4a:a3:67:67:57: 0a:25:64:a8:7b:65:e3:53:f2:8f:fc:9e:b8:a7:ca: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F7:3F:49:F3:97:50:F3:CE:F3:80:8E:61:A3:73:5D:AE:3A:E4:54 X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f2:12:16:3d:86:0a:ba:e3:8e:50:0a:d6:8e:ce:e8:cb:22: 2d:85:1a:11:f0:18:b6:75:67:54:39:b8:94:45:24:0b:6d:40: 27:2a:55:13:bc:24:26:a3:4a:3e:56:49:30:3e:b6:fd:57:4b: 59:03:a7:b2:7b:f7:0d:56:da:2b:9f:96:13:b7:b8:e1:5e:15: 12:2f:fa:7a:c5:03:45:20:04:52:43:9d:00:10:54:fe:20:11: f1:d1:ca:97:ec:70:67:0c:11:f7:41:65:34:23:e5:a1:b1:0a: f5:cc:8f:6a:13:90:50:fe:d9:4e:4c:5e:b4:24:49:6e:09:0d: a3:46:db:07:f4:b5:ae:38:de:1c:91:09:8a:97:9c:76:0e:81: 96:e8:1c:2b:d9:a5:1b:a1:0d:1e:4f:f7:b2:09:19:40:91:d7: e0:43:33:4b:0b:fd:a0:e3:3c:23:fb:f6:0c:83:46:8a:38:41: 1a:d9:09:bd:8f:8b:c3:e6:2b:2e:35:c0:4c:94:32:c0:36:69: c8:f6:b7:56:ba:c0:50:66:09:85:27:19:6e:ff:4f:b0:9d:92: ad:1f:53:7d:f1:45:9e:f4:0d:be:1c:5f:f5:81:6c:3e:f2:03: 80:6f:38:60:8f:ad:77:af:e3:eb:4c:17:c5:79:b8:4d:9a:8d: 31:b6:b3:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNTEyMTkwNjQ2NThaFw0yNTEyMjYwNjQ2NThaMBgxFjAUBgNV BAMMDTY5NDRmNGUzLWZmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Jn74Z+d7NyUWuWCI7qmHHZkmjyAzZqH5c7zNnrOGD6cvnnCEdYyPxKTo62GJ xR00tkqhx4ydds/qvF1NLiUOxjEfBR5zGAwuajZFMSRMsJHwqS5djavswZApQPPs KdcjkIboa44UQVS5gaStITGPjqom6KOMRDtCON698DRvIyKm+nYcQkdMGxZJe5GI fG53ddxF6d9hGkInCTsqOE+2h3cSgToGDv1bt34KMSvxFPImSuJi05onfiI+Ao1X A7c8SrVXzaVAE8gOnILLlNMj0sengc6nnE3DysXW/VKW0yBL0u7D8IPlu7hKo2dn VwolZKh7ZeNT8o/8nrinypW7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBvc/SfOX UPPO84COYaNzXa465FQwHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz Qjg3LzIzRDE1MjhBQkNFMzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055 U1U3QXVKVDJ6dm5SYXFGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTyEhY9hgq6445QCtaOzujLIi2FGhHwGLZ1Z1Q5uJRFJAttQCcqVRO8 JCajSj5WSTA+tv1XS1kDp7J79w1W2iuflhO3uOFeFRIv+nrFA0UgBFJDnQAQVP4g EfHRypfscGcMEfdBZTQj5aGxCvXMj2oTkFD+2U5MXrQkSW4JDaNG2wf0ta443hyR CYqXnHYOgZboHCvZpRuhDR5P97IJGUCR1+BDM0sL/aDjPCP79gyDRoo4QRrZCb2P i8PmKy41wEyUMsA2acj2t1a6wFBmCYUnGW7/T7Cdkq0fU33xRZ70Db4cX/WBbD7y A4BvOGCPrXev4+tMF8V5uE2ajTG2szQ= -----END CERTIFICATE-----Generated at Sat Dec 20 00:52:22 2025 by rpki-client