This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: Uxwfd6dqvzVrcAuGa2CzfwGK99x3CFmWwFZ5HqRCcto= Subject key identifier: 2E:DB:3A:1B:5C:58:DF:19:DC:28:F1:CE:2A:B7:EE:8C:FC:72:25:09 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D2B Signing time: Sat 20 Dec 2025 17:41:39 +0000 Manifest this update: Sat 20 Dec 2025 17:41:39 +0000 Manifest next update: Sat 27 Dec 2025 17:41:39 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: hhN+VRnUs7bSYL5zOsYTN3GbkO+HT0qriZjJu6NK8nY=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Dec 20 17:41:39 2025 GMT Not After : Dec 27 17:41:39 2025 GMT Subject: CN=6946dfd3-dcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:d1:b3:7f:38:c3:b9:49:46:7c:f5:26:4a: bf:2b:ec:ab:cb:21:b1:16:ad:da:5f:a0:e7:ea:00: b0:62:30:38:cf:67:b4:e4:d5:e4:c1:fe:cf:3c:34: 63:90:b1:d3:da:05:fa:5d:30:5d:b2:6c:81:21:fe: 0a:c8:7a:d3:51:3f:49:72:ef:4f:a6:6c:18:3b:76: fc:89:82:00:35:09:ed:70:dc:be:63:eb:1c:4c:60: 6f:57:e2:28:df:48:39:67:20:b2:17:3c:18:2c:8d: 8d:36:82:a2:b4:2b:0a:d5:7e:4c:fe:6b:83:4b:77: 8b:8f:d9:d5:57:d3:d3:a8:fe:24:78:3f:db:2a:15: 46:00:f5:21:2f:51:93:a8:5a:62:e7:01:d4:5f:b5: 1f:64:0e:c9:9b:42:28:ef:73:54:29:73:be:01:45: 3a:29:67:93:af:4f:a1:2d:32:75:5e:22:eb:be:81: 60:d1:7c:36:f1:6e:ae:a6:be:79:f5:b4:e8:51:66: 16:08:2a:1c:79:15:a0:dc:52:f4:2e:54:5c:83:45: ca:52:16:fb:07:33:9b:c7:2e:76:44:ce:45:f9:77: 0f:db:f2:3f:6a:26:b0:3b:48:bc:5a:7d:4c:d7:4c: 27:13:8d:19:d1:19:94:ee:59:6b:75:c4:7e:a1:95: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DB:3A:1B:5C:58:DF:19:DC:28:F1:CE:2A:B7:EE:8C:FC:72:25:09 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6f:28:6e:12:cf:30:1b:6d:6d:23:40:ac:25:87:62:38:9c: fd:3c:8d:a7:58:1a:e1:dc:4d:01:d6:00:be:b9:c0:6d:da:6a: 19:5e:ea:18:04:6f:d0:8a:5a:f9:7c:79:c4:73:2b:3d:ad:e4: 0d:01:86:0c:b7:44:8f:51:02:ec:f6:35:2f:af:29:70:43:83: 0f:a5:4e:7c:ab:2e:8b:f0:56:eb:a5:f1:f4:bc:83:f7:b9:f4: 49:42:db:b6:d7:c1:42:15:db:28:b3:6a:2d:e0:5a:1c:9f:fe: 66:ed:bb:17:de:23:d3:b7:70:8d:7e:4d:29:82:62:28:84:9c: ab:a0:cd:b6:a6:8a:09:1f:ea:fe:5a:42:7a:5b:43:f6:29:27: dc:4b:f6:0b:66:c5:6d:67:71:19:96:ad:f2:ca:29:06:ca:22: 93:06:02:cc:09:37:58:c8:47:37:a0:0c:e2:50:c4:67:83:2c: 57:3f:db:74:cf:08:0b:a0:f7:30:09:30:bc:b4:d7:27:bb:fd: 7b:7f:e9:e3:bc:d1:25:8b:85:04:58:35:f8:ee:59:66:05:3d: 3c:20:b1:69:20:1b:3c:de:a9:d6:b0:ae:43:b7:29:e2:ce:78: 93:ac:5e:f6:28:39:87:29:03:71:7e:16:9b:ef:5e:e7:7c:fc: 91:f5:56:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUxMjIwMTc0MTM5WhcNMjUxMjI3MTc0MTM5WjAYMRYwFAYD VQQDDA02OTQ2ZGZkMy1kY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWrRs384w7lJRnz1Jkq/K+yryyGxFq3aX6Dn6gCwYjA4z2e05NXkwf7PPDRj kLHT2gX6XTBdsmyBIf4KyHrTUT9Jcu9PpmwYO3b8iYIANQntcNy+Y+scTGBvV+Io 30g5ZyCyFzwYLI2NNoKitCsK1X5M/muDS3eLj9nVV9PTqP4keD/bKhVGAPUhL1GT qFpi5wHUX7UfZA7Jm0Io73NUKXO+AUU6KWeTr0+hLTJ1XiLrvoFg0Xw28W6upr55 9bToUWYWCCoceRWg3FL0LlRcg0XKUhb7BzObxy52RM5F+XcP2/I/aiawO0i8Wn1M 10wnE40Z0RmU7llrdcR+oZXiYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7bOhtc WN8Z3Cjxziq37oz8ciUJMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtbyhuEs8wG21tI0CsJYdiOJz9PI2nWBrh3E0B1gC+ucBt2moZXuoY BG/Qilr5fHnEcys9reQNAYYMt0SPUQLs9jUvrylwQ4MPpU58qy6L8FbrpfH0vIP3 ufRJQtu218FCFdsos2ot4Focn/5m7bsX3iPTt3CNfk0pgmIohJyroM22pooJH+r+ WkJ6W0P2KSfcS/YLZsVtZ3EZlq3yyikGyiKTBgLMCTdYyEc3oAziUMRngyxXP9t0 zwgLoPcwCTC8tNcnu/17f+njvNEli4UEWDX47llmBT08ILFpIBs83qnWsK5Dtyni zniTrF72KDmHKQNxfhab717nfPyR9VaO -----END CERTIFICATE-----Generated at Sun Dec 21 11:07:23 2025 by rpki-client