This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: ZmUH9nFoDP5cImUD7mzpuG/3UNYKYyE+Yp9sZl4vwsk=
Subject key identifier: 98:4F:F2:D1:D0:BD:FB:92:71:D7:0D:19:2F:D6:99:9B:FC:0C:7B:FE
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: 010D
Signing time: Fri 19 Dec 2025 04:19:32 +0000
Manifest this update: Fri 19 Dec 2025 04:19:31 +0000
Manifest next update: Fri 26 Dec 2025 04:19:31 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: UjKtOjFMUGwC/BkYkDqlvDeHfWfXZ+A/h/jlKGnyLro=)
2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: vhbGmjHPdOQaH+bh64NTaxDM6fa2DZigRG71btxol5I=)
3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: P73GyQ+xRG30WPGNAHQCLDV4zJy6doRK0RrvTedfB+M=)
4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: /OrLVPVfTQAPE0kSOqhjwV7inTaQkqbRHnBk9gH3iZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Dec 19 04:19:31 2025 GMT
Not After : Dec 26 04:19:31 2025 GMT
Subject: CN=6944d253-8329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:96:87:bb:09:2a:3c:90:83:77:8d:c6:1e:
e2:25:16:b8:31:73:f0:8a:91:96:2e:3b:3f:59:95:
27:6a:38:6c:b8:3a:1c:7a:35:00:50:6d:9b:ba:36:
e8:ef:62:94:2a:ed:27:ee:9b:81:5c:09:b9:ba:83:
a2:76:e5:25:26:a5:c4:ef:f6:ca:fa:69:34:fd:64:
9f:4e:6f:16:d6:9b:0e:f4:27:32:a6:90:2b:72:cf:
6e:36:4b:ff:95:84:bd:aa:ce:40:76:ae:fe:21:57:
f7:a1:f6:04:48:af:80:23:2f:dd:78:cd:78:6f:47:
e9:9e:9d:fb:88:49:75:74:06:f1:63:2e:5c:7c:33:
49:93:7b:6b:2e:14:86:cd:1f:8c:4b:4d:dd:0e:a9:
c4:87:11:bd:10:a5:f3:b1:8b:53:d3:e0:60:1b:88:
23:fc:00:6f:5c:60:e7:82:14:73:01:9d:14:93:53:
50:be:12:a5:66:6f:f2:a5:74:49:4d:9d:c2:c8:f9:
e5:ac:56:c9:cd:aa:aa:3c:68:ff:b1:6d:42:6a:6e:
c6:01:42:61:23:43:6e:47:2a:0f:12:f2:42:ee:65:
c2:9a:c3:33:5c:f6:ce:1f:3c:36:33:d5:4d:31:2a:
cc:93:99:d9:45:bb:2b:f5:78:b4:ec:af:8c:cd:b0:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:F2:D1:D0:BD:FB:92:71:D7:0D:19:2F:D6:99:9B:FC:0C:7B:FE
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:81:38:a5:3b:5b:e0:db:97:ab:ee:73:16:41:f0:63:5a:52:
e1:0a:fe:a3:63:33:88:2b:4a:14:17:b9:32:e9:c0:67:68:bd:
cd:e0:c4:49:b7:92:04:46:1c:ed:06:62:48:df:ca:4c:de:11:
1d:98:34:f8:66:67:62:12:9c:8e:66:4e:69:67:e4:60:34:f0:
6f:fc:b8:d4:0b:fc:f0:33:8b:83:6e:a8:62:cc:60:78:e1:b7:
2d:38:7d:e5:bb:91:22:c3:5d:b6:24:8c:8a:3a:0f:ce:a5:7c:
65:ad:6a:c7:c9:38:0a:e1:0c:59:fb:8b:7e:71:f3:95:da:cb:
79:76:e8:27:51:2a:d6:70:bd:93:98:15:2c:0b:d6:ce:c5:4c:
61:94:96:21:b2:2d:d7:b7:44:8a:7c:bf:40:0c:73:d0:bb:6e:
0c:24:68:27:d7:a3:4c:5f:2d:73:bb:70:24:ae:92:23:7e:cb:
40:70:4f:8f:66:04:40:61:b2:60:e0:33:89:b3:c0:c2:a9:41:
37:fa:89:db:c4:35:f9:ae:96:ec:5a:18:17:9a:7f:06:ea:9c:
0e:aa:47:1a:a0:46:0d:7b:57:7f:06:5c:95:3f:b6:66:79:34:
4d:a9:ed:39:d4:6c:65:d4:14:27:98:04:1b:c9:85:25:24:90:
bb:de:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:53 2025 by rpki-client