This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: 0vBrd/nLgXe5+KgV7fL7g4Zw74XX0zhoVJZby7fL3lM= Subject key identifier: 88:1C:8D:C9:5C:E3:29:07:D3:7B:69:9D:81:EA:BF:D8:E2:25:96:F4 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1ACC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1AAA Signing time: Thu 18 Dec 2025 16:14:13 +0000 Manifest this update: Thu 18 Dec 2025 16:14:12 +0000 Manifest next update: Thu 25 Dec 2025 16:14:12 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: vmrsj+WbMfDSflKNhhZpJj+zzdijRruz+/ZfnQw+XtA=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: D4FdDOMn9kYOe8wUYl/7g0SwBt2d9VcBYOrZDNcFK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6860 (0x1acc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Dec 18 16:14:12 2025 GMT Not After : Dec 25 16:14:12 2025 GMT Subject: CN=69442855-b7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:5e:24:d1:ca:d7:cd:ad:b3:74:91:a7:fe: b4:03:8b:ba:ac:49:dc:ac:38:bd:34:4b:46:04:25: e4:71:09:3e:d0:15:97:00:3d:65:8b:4c:ac:c9:67: c4:7a:8d:e2:bf:86:bb:c4:08:5c:49:22:40:52:26: 14:b5:67:4e:6d:29:e1:5b:e9:07:a2:1a:59:ba:8a: 7e:21:01:93:bf:a3:b6:42:43:14:df:89:9a:d8:09: 14:c8:c1:00:38:9c:4c:e0:f1:b9:32:a7:e6:a0:85: b4:0b:5a:b0:95:7d:5c:9e:74:5c:25:0a:d4:53:28: 99:6c:a3:1b:67:cd:4c:a1:b6:1d:76:bc:3f:77:b6: 16:8c:c5:d3:0d:28:58:50:60:62:54:92:57:41:85: b2:91:07:5d:8f:22:25:8b:ba:ed:50:15:0f:e5:6d: cc:c4:0c:8e:50:42:0d:a8:ae:db:7c:f2:7c:a8:c6: ef:58:d0:af:ec:d7:7b:84:cd:1d:f7:af:aa:5c:e2: 92:67:7e:e4:26:1a:2d:d3:20:37:f9:0d:f9:2d:b8: c3:17:87:a4:1e:a8:d8:94:35:4c:b7:1d:b1:fe:9e: 1d:8d:62:88:6d:3c:29:ac:c8:24:ea:a8:d4:38:1c: 82:ff:d3:16:db:42:78:db:88:6d:f4:c5:bb:bb:34: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1C:8D:C9:5C:E3:29:07:D3:7B:69:9D:81:EA:BF:D8:E2:25:96:F4 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:88:03:f0:8e:17:2d:a0:54:72:7e:6c:a4:0e:0f:c5:22:42: 22:92:d7:ab:27:94:ce:15:df:32:82:7b:46:2a:a3:d1:6f:4e: 3c:d3:56:4a:82:d8:34:0c:a8:74:f4:90:c2:49:60:32:9e:bc: 3f:cd:db:5b:ef:28:1d:1f:ff:d8:3a:0d:ed:13:af:e7:7b:8e: 61:b8:20:7b:15:30:fa:08:9c:ad:87:d2:bb:0a:b5:6e:17:4c: 1a:a3:1e:09:ab:4b:43:f2:c5:0c:11:42:e8:3f:bb:7b:ca:fe: 75:f6:fe:8b:b2:b5:c6:54:66:8a:6b:41:75:a1:5a:da:68:17: b4:82:09:f1:c0:fb:a0:c0:71:05:81:6d:49:af:8b:ea:39:58: 20:c2:86:81:a5:97:cd:e7:e6:3a:cc:b0:0d:9d:12:d7:2e:86: 42:fb:cf:53:05:f1:92:23:58:24:d8:c2:e8:30:23:2d:fd:9d: ac:dd:cb:fa:ec:f7:b8:18:dd:90:62:77:bc:43:ea:43:20:4e: f3:07:0a:35:6d:ce:c0:b5:59:c8:24:d1:80:d2:84:62:0f:1b: 8c:42:86:cc:78:93:66:0f:c9:9d:14:ce:70:34:1b:00:77:75: 50:95:5a:fe:2c:bc:f8:eb:8e:5f:d8:99:aa:21:95:2f:f3:8e: 9a:9c:92:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUxMjE4MTYxNDEyWhcNMjUxMjI1MTYxNDEyWjAYMRYwFAYD VQQDDA02OTQ0Mjg1NS1iN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS1eJNHK182ts3SRp/60A4u6rEncrDi9NEtGBCXkcQk+0BWXAD1li0ysyWfE eo3iv4a7xAhcSSJAUiYUtWdObSnhW+kHohpZuop+IQGTv6O2QkMU34ma2AkUyMEA OJxM4PG5MqfmoIW0C1qwlX1cnnRcJQrUUyiZbKMbZ81MobYddrw/d7YWjMXTDShY UGBiVJJXQYWykQddjyIli7rtUBUP5W3MxAyOUEINqK7bfPJ8qMbvWNCv7Nd7hM0d 96+qXOKSZ37kJhot0yA3+Q35LbjDF4ekHqjYlDVMtx2x/p4djWKIbTwprMgk6qjU OByC/9MW20J424ht9MW7uzSiBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgcjclc 4ykH03tpnYHqv9jiJZb0MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkiAPwjhctoFRyfmykDg/FIkIikterJ5TOFd8ygntGKqPRb04801ZK gtg0DKh09JDCSWAynrw/zdtb7ygdH//YOg3tE6/ne45huCB7FTD6CJyth9K7CrVu F0waox4Jq0tD8sUMEULoP7t7yv519v6LsrXGVGaKa0F1oVraaBe0ggnxwPugwHEF gW1Jr4vqOVggwoaBpZfN5+Y6zLANnRLXLoZC+89TBfGSI1gk2MLoMCMt/Z2s3cv6 7Pe4GN2QYne8Q+pDIE7zBwo1bc7AtVnIJNGA0oRiDxuMQobMeJNmD8mdFM5wNBsA d3VQlVr+LLz4645f2JmqIZUv846anJK3 -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:57 2025 by rpki-client