This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: JpBhFAW+msTPBm6g8qCpllDn3sLqx1eDrSS3IrMBKNU= Subject key identifier: 54:9E:86:CF:DF:28:21:F4:12:34:FD:7C:34:4F:D9:F6:FC:59:8A:03 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0EBA Signing time: Thu 18 Dec 2025 17:32:08 +0000 Manifest this update: Thu 18 Dec 2025 17:32:08 +0000 Manifest next update: Thu 25 Dec 2025 17:32:08 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: XqSzqN3sXGHBNdVj0FxyuwS6y+bY8amMc66yB2edsno=) 2: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: h1piDIbFbu2D+AHr+FNeuVa8V0LAf8dUKVxZfkw96aI=) 3: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: DsQ8k2r18shy7gg+hUBL2SO8HUEFyNSKHtxB+WEbNG4=) 4: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: uul2CdaEoquPtSKMLPmrjkbQbRp1WUkF6rtkLx9zg64=) 5: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: wbUo+m2N2pVjNOlqoJ9Ve/RDUUkR0+GFezmtrgOfh+0=) 6: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: hPUFimj9BE3+BwwQ7RyTBe4Kb4UDlyO5v1n1M99BRDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3850 (0xf0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Dec 18 17:32:08 2025 GMT Not After : Dec 25 17:32:08 2025 GMT Subject: CN=69443a98-76e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:6e:b4:34:99:78:de:26:bc:28:79:01:cf: 1f:a3:e7:a5:a3:1b:9d:50:26:dc:46:41:e1:7e:bc: c4:70:a9:c5:fb:23:c0:50:c7:f5:35:ec:ea:98:bd: d3:f7:49:f8:b9:62:52:82:55:9b:f9:11:ba:02:5d: 96:d0:9a:e3:30:03:e8:4e:da:7f:f4:04:c7:c3:5a: 09:6b:f5:40:e6:95:37:a8:cc:98:24:d3:5c:ca:36: 20:43:77:3d:cb:5c:1a:0e:6a:0b:34:8c:80:6e:76: d6:47:f4:a0:bd:3a:91:56:c4:07:de:72:aa:f0:71: 6e:ec:85:be:39:4b:36:df:fd:61:17:16:ce:2f:91: a5:f8:39:41:6a:9b:58:e2:b4:45:a5:d6:e6:9f:57: b5:2d:bc:d6:a7:3b:6d:21:c2:d6:e4:59:dc:37:41: 8b:07:75:7e:5d:de:5e:8f:45:01:5f:4a:a2:78:56: b1:f4:65:2d:c4:9f:1f:5f:c3:14:81:e6:ef:55:ab: a0:55:dc:12:6b:a6:d6:43:f9:1e:61:a6:4c:95:30: 16:f6:1a:7d:0a:02:c0:61:63:b3:02:ea:2c:be:d9: ec:9e:14:48:4c:4e:82:09:f7:90:e8:f9:83:97:7e: a7:7b:90:52:5b:9f:ab:8f:25:35:8b:0e:02:82:de: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9E:86:CF:DF:28:21:F4:12:34:FD:7C:34:4F:D9:F6:FC:59:8A:03 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ba:c8:9b:ed:75:0b:c3:6d:a0:48:3f:44:9e:ab:71:14:86: 9a:24:ee:9f:da:39:fb:73:fe:f2:22:fd:50:3d:76:ba:62:20: 91:09:68:35:43:7c:b1:1d:82:15:b9:4d:ae:37:88:ce:0f:c2: 05:e5:16:da:b0:de:4f:07:2e:5d:de:52:d7:c7:68:83:0d:96: 48:58:15:52:3b:da:56:9b:cd:22:fa:17:9c:bf:b4:45:e6:86: a5:28:40:81:e7:d8:71:1b:25:8f:f8:d9:6f:e0:72:33:28:c6: 82:a6:95:a4:e5:c5:f0:6e:8b:26:9b:49:84:fa:ae:15:3c:14: 67:63:97:5c:12:ca:07:53:79:82:bc:09:59:dd:25:1c:ce:c1: 78:29:7f:78:54:37:c3:ac:13:b6:54:05:19:33:e6:dc:04:01: 68:67:47:62:af:0f:83:9f:ba:d0:b8:fb:41:7e:36:2e:02:97: bd:34:db:d5:ba:f2:53:05:d3:23:6c:26:45:b9:56:5b:e0:8e: c8:aa:4d:b7:c1:c5:d7:4c:a3:f7:ad:77:80:fc:3f:d7:ff:f4: 0b:4d:93:16:62:63:9b:f7:fd:c1:3f:31:37:77:d0:36:23:94: ca:8a:ca:f9:51:19:11:d8:b1:33:6f:a3:eb:86:51:e1:55:cb: 29:0e:fe:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjUxMjE4MTczMjA4WhcNMjUxMjI1MTczMjA4WjAYMRYwFAYD VQQDDA02OTQ0M2E5OC03NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsVutDSZeN4mvCh5Ac8fo+eloxudUCbcRkHhfrzEcKnF+yPAUMf1NezqmL3T 90n4uWJSglWb+RG6Al2W0JrjMAPoTtp/9ATHw1oJa/VA5pU3qMyYJNNcyjYgQ3c9 y1waDmoLNIyAbnbWR/SgvTqRVsQH3nKq8HFu7IW+OUs23/1hFxbOL5Gl+DlBaptY 4rRFpdbmn1e1LbzWpzttIcLW5FncN0GLB3V+Xd5ej0UBX0qieFax9GUtxJ8fX8MU gebvVaugVdwSa6bWQ/keYaZMlTAW9hp9CgLAYWOzAuosvtnsnhRITE6CCfeQ6PmD l36ne5BSW5+rjyU1iw4Cgt6a1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSehs/f KCH0EjT9fDRP2fb8WYoDMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqusib7XULw22gSD9EnqtxFIaaJO6f2jn7c/7yIv1QPXa6YiCRCWg1 Q3yxHYIVuU2uN4jOD8IF5RbasN5PBy5d3lLXx2iDDZZIWBVSO9pWm80i+hecv7RF 5oalKECB59hxGyWP+Nlv4HIzKMaCppWk5cXwbosmm0mE+q4VPBRnY5dcEsoHU3mC vAlZ3SUczsF4KX94VDfDrBO2VAUZM+bcBAFoZ0dirw+Dn7rQuPtBfjYuApe9NNvV uvJTBdMjbCZFuVZb4I7Iqk23wcXXTKP3rXeA/D/X//QLTZMWYmOb9/3BPzE3d9A2 I5TKisr5URkR2LEzb6PrhlHhVcspDv5q -----END CERTIFICATE-----Generated at Fri Dec 19 19:24:07 2025 by rpki-client