This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json) Hash identifier: 3fdGK9tfeFKLUMuTAtq0MqBZL2pSEmR3vQxYRWKOpec= Subject key identifier: 65:52:3A:C9:15:8A:4C:1F:9B:7E:8A:54:D9:DA:EC:E1:26:65:57:2C Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft Manifest number: 0123 Signing time: Sat 27 Dec 2025 03:39:05 +0000 Manifest this update: Sat 27 Dec 2025 03:39:04 +0000 Manifest next update: Sat 03 Jan 2026 03:39:04 +0000 Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: fXoknNKzRrFJ6FuATQ/wvQ2g8JGh5KJz/vgmb+rqWtw=) 2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: GgtpbCe0DWHXE3n4d7zrRXZLNfKbReC9s/SOQ0QeSio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 03:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Validity Not Before: Dec 27 03:39:04 2025 GMT Not After : Jan 3 03:39:04 2026 GMT Subject: CN=694f54d9-dbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:28:79:b7:75:f9:a6:11:b0:eb:b4:b4:7f: a9:8d:cc:6d:d3:e4:3b:4d:88:7c:3e:13:f7:d3:53: 9c:cb:b2:b7:01:bf:72:45:9b:33:65:a4:85:6c:03: e9:79:8a:92:de:63:0f:6f:4c:75:5d:c3:33:34:39: c6:62:59:7f:1b:33:6a:0e:07:e2:2e:0b:68:da:42: 5b:73:01:40:50:0a:f3:35:a1:64:29:24:91:49:b3: 54:80:f3:8d:e2:b1:dc:61:8a:8f:a2:e5:27:65:c2: da:ad:1f:21:95:ec:2e:3d:32:21:09:94:31:f3:b3: 3a:98:ba:94:da:2e:89:78:d9:0b:14:58:22:1c:9b: 78:a2:b2:35:b3:9e:61:a1:ac:15:fe:98:0f:ab:f0: ad:74:a3:bb:f4:93:f5:f9:c7:bd:e2:3f:b2:6c:1e: 6b:f1:f8:6a:b6:ff:83:d1:02:30:ff:80:9a:98:e2: 3e:ee:df:e0:c7:86:a2:a1:7a:1c:30:2e:e0:f8:4f: 9c:e2:03:72:2a:0f:47:2c:9a:eb:1e:2e:9c:33:b2: d9:b4:0f:3b:ec:05:0c:34:37:c1:32:05:ce:82:64: 77:fe:e0:e4:17:61:8b:93:1f:20:ff:7b:a9:c3:a1: 8b:25:b9:10:98:cc:15:4c:8b:2f:fa:4f:0d:59:09: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:52:3A:C9:15:8A:4C:1F:9B:7E:8A:54:D9:DA:EC:E1:26:65:57:2C X509v3 Authority Key Identifier: keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d8:9e:e9:90:0e:9e:52:d4:69:d0:7a:4b:82:57:a4:4f:f5: 6d:d0:69:1d:cc:e3:e8:b9:02:46:96:27:20:2c:61:34:1c:cb: 5a:95:cb:c5:48:ca:8a:7b:c9:c0:0a:eb:92:64:d3:cd:1a:bd: 1e:a5:8b:0d:34:3d:1e:72:38:93:84:66:fd:81:d9:6a:a4:f4: a1:5b:cc:2d:7b:a3:60:9f:fb:87:0b:d6:04:a7:d8:a3:a0:56: 94:d5:37:ad:8e:62:14:8a:aa:62:e4:64:7a:0f:15:4f:d0:bf: 62:4a:2c:21:e5:31:b1:aa:37:2d:06:dd:e3:50:5c:c4:61:32: 61:8c:12:33:9b:b5:66:d5:65:77:8c:64:0c:1c:56:14:21:fa: 02:84:22:f8:ce:d2:77:88:57:01:b8:44:e4:1f:11:74:f1:72: 94:d4:d0:a8:11:2b:21:d0:ef:d2:52:1c:4a:69:e1:14:88:b3: a4:81:b1:7e:79:92:ed:64:23:04:7f:0c:41:83:73:56:ce:2c: 0a:ff:b5:2d:de:4b:4e:56:34:dc:82:11:6e:81:2d:20:33:ae: 87:cc:d9:7a:54:72:37:c9:bf:b5:f8:ed:66:73:02:a7:93:15: b4:02:44:7d:79:c1:85:83:fd:11:a5:93:dc:61:f5:99:87:96: bc:2c:1d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy RkYxOTIwMzgwHhcNMjUxMjI3MDMzOTA0WhcNMjYwMTAzMDMzOTA0WjAYMRYwFAYD VQQDDA02OTRmNTRkOS1kYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySAoebd1+aYRsOu0tH+pjcxt0+Q7TYh8PhP301Ocy7K3Ab9yRZszZaSFbAPp eYqS3mMPb0x1XcMzNDnGYll/GzNqDgfiLgto2kJbcwFAUArzNaFkKSSRSbNUgPON 4rHcYYqPouUnZcLarR8hlewuPTIhCZQx87M6mLqU2i6JeNkLFFgiHJt4orI1s55h oawV/pgPq/CtdKO79JP1+ce94j+ybB5r8fhqtv+D0QIw/4CamOI+7t/gx4aioXoc MC7g+E+c4gNyKg9HLJrrHi6cM7LZtA877AUMNDfBMgXOgmR3/uDkF2GLkx8g/3up w6GLJbkQmMwVTIsv+k8NWQnS4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVSOskV ikwfm36KVNna7OEmZVcsMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH M05weExtWWZiWjh2OFpJRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf2J7pkA6eUtRp0HpLglekT/Vt0GkdzOPouQJGlicgLGE0HMtalcvF SMqKe8nACuuSZNPNGr0epYsNND0ecjiThGb9gdlqpPShW8wte6Ngn/uHC9YEp9ij oFaU1TetjmIUiqpi5GR6DxVP0L9iSiwh5TGxqjctBt3jUFzEYTJhjBIzm7Vm1WV3 jGQMHFYUIfoChCL4ztJ3iFcBuETkHxF08XKU1NCoESsh0O/SUhxKaeEUiLOkgbF+ eZLtZCMEfwxBg3NWziwK/7Ut3ktOVjTcghFugS0gM66HzNl6VHI3yb+1+O1mcwKn kxW0AkR9ecGFg/0RpZPcYfWZh5a8LB0z -----END CERTIFICATE-----Generated at Sat Dec 27 07:04:35 2025 by rpki-client