This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json) Hash identifier: B3X6UVyK3LSWCixLLgdudoEnlVmGFsYP/Q3r/4v3l7I= Subject key identifier: AF:1F:00:DC:F6:34:56:DF:ED:D7:C4:15:F3:C0:DC:10:A4:87:63:5C Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft Manifest number: 06B2 Signing time: Sun 28 Dec 2025 21:37:43 +0000 Manifest this update: Sun 28 Dec 2025 21:37:43 +0000 Manifest next update: Sun 04 Jan 2026 21:37:43 +0000 Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: Bv63r4bSNCwLhI0nvO8Xxb3Rwq6bj/eqQBm2G0yevCw=) 2: C51F34AAC46711F09831793EC4F9AE02.roa (hash: m5fQia28aN0SeiS47PeAtdpG/HWjYs+FsWqbdr95Tkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Validity Not Before: Dec 28 21:37:43 2025 GMT Not After : Jan 4 21:37:43 2026 GMT Subject: CN=6951a327-8a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:f8:b0:8f:17:31:e6:eb:91:e3:df:a0:9f: 25:0b:ba:b0:e8:49:7a:e5:9c:3b:96:cc:6d:0a:08: a3:26:e1:09:a4:98:08:83:7c:d0:bc:16:6c:a3:c6: 71:e1:f2:a0:1a:52:03:21:7f:69:0f:e7:8a:01:4c: 1f:56:5c:a0:7f:18:0e:ef:30:3a:04:ff:68:ea:a7: 08:6f:8f:97:3f:76:25:f3:8e:eb:f8:2c:aa:d5:25: 6e:ed:05:a7:f7:2a:bb:24:f9:37:20:23:f3:d2:c3: cf:b4:f3:ac:67:bb:07:dc:35:6a:23:c2:4c:d8:8c: cb:36:f6:be:74:cb:80:28:ec:b3:d1:d0:20:ac:d7: 52:85:f2:92:eb:54:95:99:c0:4c:65:38:c3:b1:c1: ef:29:6c:16:8a:3c:c2:cb:50:63:5d:87:dd:81:e2: e6:93:a2:99:7b:2f:74:91:a9:8b:ce:3f:9c:71:e8: dc:1d:16:13:2e:6e:5a:f9:9c:77:c6:a2:ff:7f:a1: d3:1c:76:a0:eb:bb:0c:77:64:ce:ac:ea:c4:6f:42: e3:06:46:9d:34:a7:9c:e9:b0:bb:32:f7:b6:ea:5a: fb:19:59:ad:9d:0c:32:dd:e2:b9:6c:f9:ba:a5:50: 82:1c:89:92:0e:91:c3:d1:4a:0f:b3:16:c1:ab:b3: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1F:00:DC:F6:34:56:DF:ED:D7:C4:15:F3:C0:DC:10:A4:87:63:5C X509v3 Authority Key Identifier: keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:cb:46:a0:dc:8c:7d:30:62:ce:67:2e:cd:81:d0:12:f4:48: c9:cb:50:1c:f8:cd:04:32:9b:9b:65:02:6b:92:f7:47:72:f9: 95:e1:3a:54:3f:92:4b:0f:99:6e:d7:7c:43:55:ac:f6:75:6a: fd:fa:b1:aa:c0:b5:ca:cb:a8:ec:da:26:9a:5f:ed:f8:e1:e5: bb:40:4e:ac:ff:89:69:66:c7:6e:6d:fc:a4:34:67:0e:7f:f3: 09:5b:9f:f6:0f:2e:e1:81:ad:80:5b:aa:fb:00:c3:5b:4e:5a: 40:0d:49:1e:4f:0c:7d:af:c6:e4:b7:92:6f:45:cb:6b:6e:4b: eb:2a:fc:cc:ab:6e:ec:4c:19:bf:7c:27:f1:fc:13:df:9d:f8: 7b:ef:3f:39:f8:60:1e:4a:36:c0:b6:66:e6:fb:12:1d:82:73: 7e:b6:1f:c6:70:13:9a:08:43:70:bc:c8:29:24:fa:2d:a0:04: bc:e9:49:eb:04:fe:4e:d0:92:6e:9f:c9:76:e3:a8:f9:29:6e: 94:0d:05:94:cc:32:9a:5e:74:bb:a9:e1:1b:c1:ac:86:04:04: c4:9b:b5:58:24:72:2b:b2:06:6a:83:67:0b:f7:b0:ba:31:10: fb:17:ed:13:76:ba:4b:78:f2:70:50:3c:45:12:da:59:33:28: 42:f7:89:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFBQTAxMTAvBgNVBAUTKDJBRDUyNkRGRDlDN0U5MENBMzBDMzFGQ0E0RTE4MjUw MUI3MDA3NTMwHhcNMjUxMjI4MjEzNzQzWhcNMjYwMTA0MjEzNzQzWjAYMRYwFAYD VQQDDA02OTUxYTMyNy04YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCT4sI8XMebrkePfoJ8lC7qw6El65Zw7lsxtCgijJuEJpJgIg3zQvBZso8Zx 4fKgGlIDIX9pD+eKAUwfVlygfxgO7zA6BP9o6qcIb4+XP3Yl847r+Cyq1SVu7QWn 9yq7JPk3ICPz0sPPtPOsZ7sH3DVqI8JM2IzLNva+dMuAKOyz0dAgrNdShfKS61SV mcBMZTjDscHvKWwWijzCy1BjXYfdgeLmk6KZey90kamLzj+ccejcHRYTLm5a+Zx3 xqL/f6HTHHag67sMd2TOrOrEb0LjBkadNKec6bC7Mve26lr7GVmtnQwy3eK5bPm6 pVCCHImSDpHD0UoPsxbBq7PM3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8fANz2 NFbf7dfEFfPA3BCkh2NcMB8GA1UdIwQYMBaAFCrVJt/Zx+kMowwx/KThglAbcAdT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUFBMC8yMjgzOTZCQTk1 RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZReWpEREg4cE9HQ1VCdHdC MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0VW0zOW5INlF5akRESDhwT0dDVUJ0d0IxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUFBMC8yMjgzOTZCQTk1RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZR eWpEREg4cE9HQ1VCdHdCMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVy0ag3Ix9MGLOZy7NgdAS9EjJy1Ac+M0EMpubZQJrkvdHcvmV4TpU P5JLD5lu13xDVaz2dWr9+rGqwLXKy6js2iaaX+344eW7QE6s/4lpZsdubfykNGcO f/MJW5/2Dy7hga2AW6r7AMNbTlpADUkeTwx9r8bkt5JvRctrbkvrKvzMq27sTBm/ fCfx/BPfnfh77z85+GAeSjbAtmbm+xIdgnN+th/GcBOaCENwvMgpJPotoAS86Unr BP5O0JJun8l246j5KW6UDQWUzDKaXnS7qeEbwayGBATEm7VYJHIrsgZqg2cL97C6 MRD7F+0TdrpLePJwUDxFEtpZMyhC94nT -----END CERTIFICATE-----Generated at Tue Dec 30 06:24:04 2025 by rpki-client