This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: cNSZXuHJfwi11LlqFmZELbSS7+GpFtzd9ZVTBu2iBeY= Subject key identifier: 3E:FA:AF:54:F1:68:B1:E5:3E:4C:10:BD:40:C1:86:DF:EC:C8:E9:7E Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: 015C Signing time: Sun 11 Jan 2026 03:21:52 +0000 Manifest this update: Sun 11 Jan 2026 03:21:52 +0000 Manifest next update: Sun 18 Jan 2026 03:21:52 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: Nm7VpuUsUuMbKanCmesZinLCjyhk8kaSye2L79XmqDg=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: Jan 11 03:21:52 2026 GMT Not After : Jan 18 03:21:52 2026 GMT Subject: CN=69631750-9e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:40:4e:6a:4f:77:5b:29:ac:73:4b:41:b5: 03:f8:b0:43:ce:28:f6:4b:90:06:a2:2f:ec:80:93: 5a:58:20:d8:ab:33:20:10:bd:e2:0e:2f:f3:7c:45: 82:11:90:26:c1:34:6e:bb:dd:e6:d8:a6:5f:d9:13: d6:ea:71:b7:cd:8d:e7:ae:52:68:8c:dc:dc:e6:b5: e2:71:44:71:8c:d3:d9:ba:21:49:be:15:e9:6a:ba: 1d:95:e3:7a:19:5c:c8:08:94:69:c5:8d:c8:28:a3: dc:d9:3c:f5:e4:b8:94:cc:ba:4b:80:ae:b0:7b:39: 83:84:e2:e2:30:4c:d8:e3:2f:41:36:ca:1d:4b:9f: 1a:cc:5b:e5:47:53:88:97:91:07:dd:36:49:22:ce: 51:e3:f5:66:87:54:06:6b:04:f4:f9:b8:2b:c6:6f: d7:65:d4:dc:32:05:e4:b1:b0:1c:e2:ed:a5:5f:80: 88:ff:91:ac:ae:c5:37:5a:8c:8f:04:3d:f9:96:d1: 13:1a:2c:fc:7e:18:d3:b5:79:e1:4f:49:01:4d:ca: cb:e7:67:e3:1d:cb:68:7c:6c:06:86:2c:c0:37:c0: 87:da:6e:b6:c8:78:5b:e5:cc:05:72:bf:51:e2:b9: 6d:c5:7b:64:46:f7:5f:fa:2f:dc:f4:b6:7d:c2:61: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FA:AF:54:F1:68:B1:E5:3E:4C:10:BD:40:C1:86:DF:EC:C8:E9:7E X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9e:91:de:ee:e2:8b:78:c2:ae:16:8a:58:10:00:f9:aa:c5: 08:d0:9c:65:29:12:6d:9c:9c:9c:4e:aa:db:48:bd:40:80:a0: 32:77:06:b6:ba:bc:4c:c4:40:6d:dc:4b:d6:d5:3d:6c:ce:d4: 52:a3:c1:17:0f:da:55:92:2a:22:ef:8c:44:4c:13:af:be:46: 84:26:bc:79:7d:2b:cc:f5:5a:49:d2:eb:4a:53:52:18:df:68: 60:c3:28:32:da:84:86:af:89:1e:1b:6e:37:ea:8c:bc:1d:be: 59:f5:28:fc:24:e9:e5:40:0c:35:41:c8:a2:0a:38:50:e1:e0: 38:74:a3:a3:a5:e4:b1:b4:fb:fa:d2:e9:c2:76:c3:85:22:b4: c2:86:09:c3:ef:2e:fe:bc:d3:7a:b4:a8:63:ba:93:93:1c:05: 71:91:d9:72:d2:3b:db:d3:17:5f:13:eb:0d:33:36:aa:45:eb: bc:a0:1c:9b:a9:8c:ef:42:68:b6:b8:f5:b5:78:ae:09:1e:79: 28:d8:b3:d2:c5:24:4b:23:bd:c6:15:45:1c:7e:dd:ee:a0:b6: 97:1b:10:fa:f7:40:65:ca:55:6f:c0:b4:53:b1:d6:e9:19:31: ed:08:cc:9b:fd:8e:a8:5b:b4:a9:02:8b:46:33:8c:8b:8d:a7: 0f:bc:08:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy NDlDQ0M4RjQwHhcNMjYwMTExMDMyMTUyWhcNMjYwMTE4MDMyMTUyWjAYMRYwFAYD VQQDDA02OTYzMTc1MC05ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVRATmpPd1sprHNLQbUD+LBDzij2S5AGoi/sgJNaWCDYqzMgEL3iDi/zfEWC EZAmwTRuu93m2KZf2RPW6nG3zY3nrlJojNzc5rXicURxjNPZuiFJvhXparodleN6 GVzICJRpxY3IKKPc2Tz15LiUzLpLgK6wezmDhOLiMEzY4y9BNsodS58azFvlR1OI l5EH3TZJIs5R4/Vmh1QGawT0+bgrxm/XZdTcMgXksbAc4u2lX4CI/5GsrsU3WoyP BD35ltETGiz8fhjTtXnhT0kBTcrL52fjHctofGwGhizAN8CH2m62yHhb5cwFcr9R 4rltxXtkRvdf+i/c9LZ9wmGB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD76r1Tx aLHlPkwQvUDBht/syOl+MB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54 ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEnpHe7uKLeMKuFopYEAD5qsUI0JxlKRJtnJycTqrbSL1AgKAydwa2 urxMxEBt3EvW1T1sztRSo8EXD9pVkioi74xETBOvvkaEJrx5fSvM9VpJ0utKU1IY 32hgwygy2oSGr4keG2436oy8Hb5Z9Sj8JOnlQAw1QciiCjhQ4eA4dKOjpeSxtPv6 0unCdsOFIrTChgnD7y7+vNN6tKhjupOTHAVxkdly0jvb0xdfE+sNMzaqReu8oByb qYzvQmi2uPW1eK4JHnko2LPSxSRLI73GFUUcft3uoLaXGxD690BlylVvwLRTsdbp GTHtCMyb/Y6oW7SpAotGM4yLjacPvAhl -----END CERTIFICATE-----Generated at Mon Jan 12 17:21:50 2026 by rpki-client