This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: He6hx14KLbeNK60yAF+VSyOGKJIkTbXXb8pnALcPi1k= Subject key identifier: 01:AD:40:07:03:31:5B:94:44:D4:9F:19:A8:C9:21:B9:66:73:02:28 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 0A49 Signing time: Mon 22 Dec 2025 15:55:31 +0000 Manifest this update: Mon 22 Dec 2025 15:55:30 +0000 Manifest next update: Mon 29 Dec 2025 15:55:30 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: xyO1oFfAX/1s1GB69MnySqsji57osGQbvgn/++L9gaM=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Dec 22 15:55:30 2025 GMT Not After : Dec 29 15:55:30 2025 GMT Subject: CN=694969f3-91d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:d5:3d:58:ba:6c:5e:b7:b4:0e:dd:4c:1a: c0:0a:d2:75:0d:19:a1:7b:7d:d9:11:c2:be:fe:d7: 91:a1:b9:30:80:e9:96:eb:5b:57:55:fe:77:46:c8: 17:ca:f3:bd:f4:d1:b1:6a:7e:de:c1:21:b7:1c:65: 2a:05:96:6c:91:bb:d0:51:a4:10:5d:a3:8b:31:94: d4:65:ba:56:7d:0b:41:d7:6c:13:00:52:60:93:6c: a3:31:06:c2:97:4d:30:81:2c:07:25:28:e9:9a:8a: 7b:48:bb:3b:0c:6b:3f:e2:c5:01:c1:8b:cd:ac:d5: d4:3f:05:72:1b:e0:ba:ce:3a:31:f1:9f:ec:c1:ce: 21:51:f3:bf:52:cd:73:68:1e:b0:2d:9e:96:5d:29: f5:d5:44:28:1b:32:b1:64:53:48:52:d6:a3:e4:76: 0c:a8:b3:e7:76:07:1b:99:0d:03:c8:f2:5c:a0:e1: d3:e1:e6:a8:7c:97:c6:e7:c5:0d:2c:51:18:26:c9: f5:07:92:9b:eb:2f:67:95:fc:32:8b:0b:40:72:e1: 35:40:f9:19:b2:b7:5d:40:5b:a6:ed:bd:2c:71:ed: c9:a5:9c:c4:77:61:18:87:b5:70:d8:04:30:2a:d2: 92:da:d7:50:28:1b:3d:78:35:e4:20:fb:2e:8f:a9: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AD:40:07:03:31:5B:94:44:D4:9F:19:A8:C9:21:B9:66:73:02:28 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c3:e0:49:e9:f0:1d:e5:5c:99:97:c0:0f:2d:ae:29:a0:25: ae:85:7d:5a:8e:9c:98:09:97:bf:8e:ff:19:3b:35:ef:94:52: f4:3e:d3:ce:e5:ae:28:fd:96:04:ee:d2:1d:af:69:27:c7:4b: ff:6a:11:4e:1a:06:4c:77:ce:ed:d8:ae:3a:5f:12:38:5a:d3: 9f:44:9e:a1:8d:66:61:67:83:3a:27:8b:ef:b9:c7:ce:3b:80: 67:a5:d3:52:77:0d:8f:82:bf:02:dc:e8:ce:ff:38:14:25:92: 7c:0e:fc:ec:92:99:7b:f8:a8:3a:a1:57:89:fa:7a:8b:35:1b: 3b:c7:ab:b1:1b:ef:ba:84:1e:c1:67:41:10:90:5d:6d:82:0b: de:4c:2c:ba:64:8c:e9:65:ee:c0:e2:3c:a6:b3:4b:40:32:b8: a4:e8:50:db:92:d2:73:84:fa:2d:52:d1:e9:a7:3d:b3:7b:eb: 05:46:09:dd:37:0b:b7:76:9d:d5:55:3e:d8:6e:37:45:00:d3: 67:18:b2:0f:fe:42:f3:2a:ae:f9:36:77:7b:61:62:ed:bd:96: 56:23:db:36:4b:db:ac:44:6c:14:ff:a1:46:33:19:b0:76:7e: 18:9f:56:b7:91:71:f7:0b:e8:f1:30:f3:cb:11:54:ef:4e:6c: ce:71:a6:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUxMjIyMTU1NTMwWhcNMjUxMjI5MTU1NTMwWjAYMRYwFAYD VQQDDA02OTQ5NjlmMy05MWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+fVPVi6bF63tA7dTBrACtJ1DRmhe33ZEcK+/teRobkwgOmW61tXVf53RsgX yvO99NGxan7ewSG3HGUqBZZskbvQUaQQXaOLMZTUZbpWfQtB12wTAFJgk2yjMQbC l00wgSwHJSjpmop7SLs7DGs/4sUBwYvNrNXUPwVyG+C6zjox8Z/swc4hUfO/Us1z aB6wLZ6WXSn11UQoGzKxZFNIUtaj5HYMqLPndgcbmQ0DyPJcoOHT4eaofJfG58UN LFEYJsn1B5Kb6y9nlfwyiwtAcuE1QPkZsrddQFum7b0sce3JpZzEd2EYh7Vw2AQw KtKS2tdQKBs9eDXkIPsuj6mPKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGtQAcD MVuURNSfGajJIblmcwIoMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJw+BJ6fAd5VyZl8APLa4poCWuhX1ajpyYCZe/jv8ZOzXvlFL0PtPO 5a4o/ZYE7tIdr2knx0v/ahFOGgZMd87t2K46XxI4WtOfRJ6hjWZhZ4M6J4vvucfO O4BnpdNSdw2Pgr8C3OjO/zgUJZJ8Dvzskpl7+Kg6oVeJ+nqLNRs7x6uxG++6hB7B Z0EQkF1tggveTCy6ZIzpZe7A4jyms0tAMrik6FDbktJzhPotUtHppz2ze+sFRgnd Nwu3dp3VVT7YbjdFANNnGLIP/kLzKq75Nnd7YWLtvZZWI9s2S9usRGwU/6FGMxmw dn4Yn1a3kXH3C+jxMPPLEVTvTmzOcab3 -----END CERTIFICATE-----Generated at Mon Dec 22 17:20:35 2025 by rpki-client