This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File: KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier: 50eVJc9x6ZUmXcHTgnMIkVVvSUxAvenV3RKC/jYIgfE=
Subject key identifier: 7D:26:EA:F6:B5:81:B7:82:22:45:E8:53:F3:F6:F0:6B:1A:05:5C:57
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 046A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number: 03FB
Signing time: Thu 18 Dec 2025 23:59:31 +0000
Manifest this update: Thu 18 Dec 2025 23:59:31 +0000
Manifest next update: Thu 25 Dec 2025 23:59:31 +0000
Files and hashes: 1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: VTSpAWwzk0SBPbJ2db5dgPFDJHs5cAs0J80AfWtMZRA=)
2: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: baAQ8jjbDnd+yIywZELKI/f+fLzoC+yEEVRka25c/bE=)
3: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: kMVjaoh/nl+HaXtTqo7eTliBreBhvFCgfQya7sUAs84=)
4: 2F24736869C111EF92B54060C4F9AE02.roa (hash: 3Y7RO9a921W0m0+KGz0aqJiJml6RthEQD034mrQPM14=)
5: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: oEcJmw9GBlLPpcX10UQcg9xp3RCQZJ+XOY7mrRgn4Bk=)
6: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: j6YHhVIdNkPdVV6kIT6wpzB9Muw42P+/9W2kK5xhqXo=)
7: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 3biVBRmslEYYBK7sgaVOapllwelbsd+exeLENbjHwjc=)
8: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: MZXl+TpE4PKXHu+CHp6bbz53wt0k4JzbyBQBboqTIP4=)
9: F83786F4030011F0984B974FC4F9AE02.roa (hash: dZbjlWTe8fWMRR6qgpL+ZoRL9VFsmU1Nz8661bmlCro=)
10: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: riBHCo9Gmq1D+0u/pG7iCc4xDo8oVc7na3FG+hNveUk=)
11: F1930FBAEFE011ED81AE706DC4F9AE02.roa (hash: NP4Z7Tt6CY/HSXNtbW7GXldzu9mQG/LCVCiq7fXDLJ8=)
12: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: wASZh3+a4jtcXdGHzHa3qDgrJcrhUIDBhkIcjHP+VMU=)
13: 04AB651469C211EFA06F8562C4F9AE02.roa (hash: YV6zDgOh2QMJi+TbqoW1Wt5O6E3eSYJDwfMJ3aJ2a10=)
14: 458AC21A684111EEA6632877C4F9AE02.roa (hash: rQlxlSsLfUnZ/IhD06ff6PZ8dH3kW3qdosnvLtL69I4=)
15: A336FE62609111EFB751B771C4F9AE02.roa (hash: 52bkXRq+LzImcNciZMVc/RbkFDyxds03UT8vcrTtvWc=)
16: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: e+M4adDsVVtiBfslPnOBJOSyjq+6gRCvAtKsdhjHrg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130 (0x46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 18 23:59:31 2025 GMT
Not After : Dec 25 23:59:31 2025 GMT
Subject: CN=69449563-4593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:96:f4:5d:e5:44:8c:a1:4b:29:f0:10:3c:
94:33:69:b0:04:6c:ae:2c:7c:ab:77:ab:9a:2b:11:
a0:55:06:2f:7a:b6:40:66:c6:8e:c7:ac:64:aa:b6:
3a:4f:68:ac:1a:e3:fe:76:52:75:82:63:5a:af:1b:
46:06:fc:1e:07:d4:2a:36:de:08:58:b3:f8:be:44:
4f:94:bc:94:76:1d:2f:90:a9:63:ed:39:ce:45:6e:
d3:2d:63:a0:72:6b:5d:df:2b:45:32:ca:6a:30:15:
88:32:75:58:29:b4:4c:e7:37:42:0b:9c:5f:82:94:
6a:44:ed:68:56:9f:96:54:ad:6d:7d:3e:d2:35:2a:
83:e6:76:c5:f8:48:e2:11:26:a8:cf:a1:cc:c0:f0:
69:35:71:8c:b3:7f:76:b7:15:8f:67:68:c5:84:65:
5b:4e:ca:b1:0c:49:19:b7:2f:90:09:b4:90:c2:1d:
f7:f3:42:24:96:0e:6c:34:8f:e1:3a:2d:8d:07:08:
92:65:aa:0a:ab:86:6d:82:b2:a9:62:3b:42:d1:81:
05:1b:76:59:f0:c0:e3:db:e7:56:c7:a9:80:b8:78:
be:8f:62:9a:3a:3a:56:0c:27:69:6b:be:33:b4:a4:
ed:88:77:92:43:d9:9f:69:34:c5:e0:b4:2d:43:f0:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:EA:F6:B5:81:B7:82:22:45:E8:53:F3:F6:F0:6B:1A:05:5C:57
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:31:72:36:71:c7:bc:71:99:f3:f3:c8:f6:10:cf:34:2b:7b:
fc:28:7a:47:25:4d:89:90:2f:69:95:cb:7b:f1:3e:af:90:ce:
e7:be:db:33:29:26:df:a0:8b:01:f1:b3:3d:49:5f:dc:3b:dc:
e7:67:04:59:1a:8f:dc:e1:96:fe:07:6d:5a:f2:55:89:85:b0:
34:dc:6b:6a:dc:15:03:3d:9e:81:c3:4d:3d:09:8b:9b:f7:1c:
8f:31:15:9e:1c:a1:ee:37:fe:9f:d4:8f:0a:05:18:71:66:12:
15:75:19:72:1c:3c:b9:b0:8f:a4:a0:f3:8e:e0:e8:af:d6:21:
a1:df:a5:f7:ca:92:ee:2b:9c:28:15:c6:6d:01:e0:b1:df:33:
b1:bd:8a:23:de:eb:f5:d8:f8:21:af:9f:2c:1e:9a:e2:1d:31:
43:45:3d:b7:c1:10:b1:f2:43:52:1a:e6:e4:e9:db:e8:a1:ef:
c8:2c:cc:45:99:b6:b7:72:2f:6c:91:68:fb:f9:62:36:44:13:
56:e5:4a:33:9b:ed:85:10:b3:10:f5:62:d1:ca:ee:33:7e:dd:
32:8e:bb:96:a0:06:95:e7:fc:7e:79:6c:9c:89:ee:27:8e:1f:
eb:39:4c:8c:47:63:12:42:b2:36:8c:8e:2d:a9:d6:c9:cf:f8:
fd:43:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:55:37 2025 by rpki-client