This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json) Hash identifier: zM1akhNeZ9B+pcFJ2A+aBhrYx90/JIjIAKmjlZ00Gow= Subject key identifier: 4B:58:E7:A7:AA:E2:84:B1:D6:FB:66:87:2D:D6:72:0C:B9:0A:79:B1 Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 0935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft Manifest number: 0919 Signing time: Thu 18 Dec 2025 19:49:26 +0000 Manifest this update: Thu 18 Dec 2025 19:49:26 +0000 Manifest next update: Thu 25 Dec 2025 19:49:26 +0000 Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: eJchMXw2R5W47qKnC67y3E/tOeF3wlDg49gVLzNTQ3U=) 2: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=) 3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: /WRRbCj0rNywmLtoXv249Ng7AC0zIvGMMjOEBzIrMR0=) 4: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=) 5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: u9rGnfekIAlkNgYfnuzbJex52uZyoGapNCA6gJzdd2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: Dec 18 19:49:26 2025 GMT Not After : Dec 25 19:49:26 2025 GMT Subject: CN=69445ac6-3ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:df:5e:32:57:d6:b6:86:01:87:4d:a7:70: de:45:f5:f1:fa:cc:0f:86:82:4d:2b:98:f9:3c:81: e3:7b:9e:32:b2:76:1e:f2:65:5e:9a:78:ea:32:ae: bb:6b:78:d0:96:d1:68:1a:ff:d3:f2:58:46:56:71: f0:ce:a6:d7:77:3e:f2:c3:78:07:c7:11:6b:77:fc: 16:50:ed:48:08:b6:41:ff:9e:67:ea:fd:7e:27:05: 86:43:1a:d2:48:c2:a2:f0:93:57:61:73:d9:00:c5: 8b:be:da:57:5c:61:7f:e2:5d:1d:90:87:33:ac:c8: 17:37:ef:d5:a1:b1:24:91:c7:da:87:a6:bd:c6:a4: e0:6a:d8:16:70:60:34:b9:e8:14:d9:de:b7:8d:2c: 69:b5:55:1f:98:45:bc:82:28:0b:3b:6c:5e:54:59: 15:c7:c9:f7:f3:00:c4:6b:8e:a9:37:08:ab:4a:4a: 74:36:df:eb:77:09:2e:7f:31:ce:fd:e5:74:01:5c: 68:90:7d:02:37:1b:7f:c6:e3:34:db:ef:36:53:16: f5:74:34:02:42:df:1f:cf:1a:26:f4:80:d1:19:9a: 6e:6c:41:20:14:dd:a0:4a:21:c4:22:8d:53:f2:8b: d2:c9:72:73:11:a3:3d:6c:ee:f3:60:64:29:b8:a2: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:E7:A7:AA:E2:84:B1:D6:FB:66:87:2D:D6:72:0C:B9:0A:79:B1 X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3c:f1:41:53:b7:c0:16:9f:4d:78:a4:44:0d:86:3f:6a:c5: 63:7e:dc:d6:bf:d6:87:30:6f:85:a7:ce:07:02:e4:2a:31:a2: b3:20:fa:8f:b1:14:a4:ca:71:41:f3:25:d9:e9:f4:71:7c:b6: e7:ba:f6:75:21:3b:95:a0:85:83:5c:0c:f2:94:dd:5a:b7:77: 98:a1:ce:48:5c:da:b0:8c:02:c5:6e:97:9f:3b:08:d3:d3:e9: 5c:9b:b2:72:3e:05:b4:59:7d:c7:31:70:b6:e4:ba:7f:25:53: 69:68:36:a8:c9:ac:6f:0e:34:0a:2d:bd:b2:25:fb:57:19:34: 48:6d:11:2c:a1:fd:d3:b2:54:c3:7e:d6:c8:23:1b:d5:5a:6f: ef:49:c1:b3:47:1d:b4:bc:f4:bd:80:8d:9b:f7:1a:66:fe:3d: 9c:43:04:2b:95:10:7e:7c:dd:c0:57:ca:3a:50:c0:6e:4d:06: 49:b7:34:3f:a8:04:a8:b6:a6:6b:a7:e4:69:a6:35:b3:60:ba: 7d:21:8b:38:6d:e0:fa:f1:51:4b:fc:9a:30:ab:c2:2e:32:f0: 37:b3:b3:d2:d6:1a:51:74:9c:be:16:8d:79:50:33:f8:57:d9: 4d:e2:23:88:86:3a:83:33:4b:9f:82:39:15:66:9d:9c:e5:34: fe:f9:e5:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjUxMjE4MTk0OTI2WhcNMjUxMjI1MTk0OTI2WjAYMRYwFAYD VQQDDA02OTQ0NWFjNi0zZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpzfXjJX1raGAYdNp3DeRfXx+swPhoJNK5j5PIHje54ysnYe8mVemnjqMq67 a3jQltFoGv/T8lhGVnHwzqbXdz7yw3gHxxFrd/wWUO1ICLZB/55n6v1+JwWGQxrS SMKi8JNXYXPZAMWLvtpXXGF/4l0dkIczrMgXN+/VobEkkcfah6a9xqTgatgWcGA0 uegU2d63jSxptVUfmEW8gigLO2xeVFkVx8n38wDEa46pNwirSkp0Nt/rdwkufzHO /eV0AVxokH0CNxt/xuM02+82Uxb1dDQCQt8fzxom9IDRGZpubEEgFN2gSiHEIo1T 8ovSyXJzEaM9bO7zYGQpuKJo3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtY56eq 4oSx1vtmhy3Wcgy5CnmxMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV eWd1UkJja25IZXJ6bmJ5R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABPPFBU7fAFp9NeKREDYY/asVjftzWv9aHMG+Fp84HAuQqMaKzIPqP sRSkynFB8yXZ6fRxfLbnuvZ1ITuVoIWDXAzylN1at3eYoc5IXNqwjALFbpefOwjT 0+lcm7JyPgW0WX3HMXC25Lp/JVNpaDaoyaxvDjQKLb2yJftXGTRIbREsof3TslTD ftbIIxvVWm/vScGzRx20vPS9gI2b9xpm/j2cQwQrlRB+fN3AV8o6UMBuTQZJtzQ/ qASotqZrp+RppjWzYLp9IYs4beD68VFL/Jowq8IuMvA3s7PS1hpRdJy+Fo15UDP4 V9lN4iOIhjqDM0ufgjkVZp2c5TT++eU2 -----END CERTIFICATE-----Generated at Sat Dec 20 03:23:38 2025 by rpki-client