This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft File: k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json) Hash identifier: UX9VYd79eS+5hAd98iU2AJoSnJ9Z2x5MTRQl8r85VHk= Subject key identifier: 60:D9:BC:EB:89:1E:2C:FF:B4:76:80:06:14:64:65:9D:E2:EC:AF:07 Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98 Certificate issuer: /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft Manifest number: 024D Signing time: Sun 21 Dec 2025 00:59:50 +0000 Manifest this update: Sun 21 Dec 2025 00:59:50 +0000 Manifest next update: Sun 28 Dec 2025 00:59:50 +0000 Files and hashes: 1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: L84+bcOLFKDeM+mWsUML7xcXDDErtjIVD94uREKE+7A=) 2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: mvL+Nx41RdHY+v59BWP5LMWkyChMsslC0cZzMH9xusc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98 Validity Not Before: Dec 21 00:59:50 2025 GMT Not After : Dec 28 00:59:50 2025 GMT Subject: CN=69474686-35d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:3f:ac:7a:e9:83:f8:8c:4e:42:6a:f2:c9: 08:7b:cd:63:9a:1d:0f:12:21:e7:50:92:3c:00:61: 66:ab:4a:f4:c3:e5:13:0f:71:e4:42:6d:07:ea:ad: 7b:68:b8:57:b5:3e:c3:70:b3:18:45:70:9e:ee:27: 78:0e:e4:1c:78:78:4f:83:f5:8e:40:6b:d0:b3:06: 0b:a7:77:a2:5c:38:71:51:28:e0:58:f2:fb:01:bd: 4f:20:76:6c:eb:1e:45:08:c9:93:03:32:7f:a0:36: 02:72:72:64:94:a7:00:a9:a4:07:c5:55:e7:d3:07: 8b:30:1e:77:0d:81:8f:b6:46:e0:a2:cb:09:34:30: b6:2f:3b:54:aa:19:56:ec:82:e2:7e:a1:af:df:31: dd:34:ca:40:ba:64:b8:12:ad:be:f2:0d:b6:89:8a: fd:97:24:27:e2:06:a2:60:51:95:95:5f:9a:5a:9a: 6a:be:41:af:c9:f1:89:68:3c:ae:b6:61:93:4b:f2: d7:db:44:e8:ce:46:e7:a3:94:f2:99:e4:d6:02:24: 6c:e7:fe:c0:d7:15:04:28:11:9e:71:c4:6f:bc:51: a1:c0:0b:1f:94:83:07:7a:0e:f8:75:26:54:ee:ed: db:24:f2:23:81:a4:29:49:74:24:20:49:67:dd:97: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D9:BC:EB:89:1E:2C:FF:B4:76:80:06:14:64:65:9D:E2:EC:AF:07 X509v3 Authority Key Identifier: keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:69:20:16:6d:21:b0:f2:f5:78:02:2d:4b:7e:ef:7c:77:49: 37:62:4e:94:87:ae:64:b4:78:a4:c1:e4:50:86:57:b6:4c:73: 9a:28:fa:a6:84:98:56:fa:c7:d0:f3:08:d1:70:4c:bf:fb:11: fe:7e:db:9c:06:6b:85:cd:1d:21:37:4c:7a:0a:0c:6b:49:6d: 07:02:01:72:94:56:cf:3e:12:39:89:6a:e5:9a:91:89:47:4e: 3c:c7:aa:88:c7:9a:70:7d:fd:2f:c7:45:72:c7:5a:1a:97:3c: 83:8c:c7:e6:d5:1a:66:b2:12:58:21:27:01:16:21:38:c9:4f: 43:d3:95:62:4d:c3:82:3a:a2:13:4f:99:87:c0:0b:b7:87:0e: b1:ec:c0:7b:7e:cf:35:1b:a8:f3:4e:c9:3b:24:50:46:61:0d: 9e:3c:d0:c5:ef:7d:36:a0:c8:1b:10:b4:8a:e7:b3:ca:b8:6a: 9f:b7:55:33:21:43:90:d7:8d:3a:a8:85:2d:5d:fd:ac:90:2c: 86:09:b4:d1:75:8c:d8:c5:15:44:ef:a3:df:d9:e1:d7:ac:9e: 64:c8:e5:32:80:85:b4:40:3b:dd:5f:b5:bd:b2:ef:ae:99:86: 8c:5b:cd:1f:22:da:d0:ff:11:a5:7e:8c:28:43:78:15:77:bf: 1a:44:28:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE3ODgxMTAvBgNVBAUTKDkzQzBCQTE3OUFDQUExQzA3OUQzM0M2NjkzRjQ0Njcw MTA0RkNEOTgwHhcNMjUxMjIxMDA1OTUwWhcNMjUxMjI4MDA1OTUwWjAYMRYwFAYD VQQDDA02OTQ3NDY4Ni0zNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dw/rHrpg/iMTkJq8skIe81jmh0PEiHnUJI8AGFmq0r0w+UTD3HkQm0H6q17 aLhXtT7DcLMYRXCe7id4DuQceHhPg/WOQGvQswYLp3eiXDhxUSjgWPL7Ab1PIHZs 6x5FCMmTAzJ/oDYCcnJklKcAqaQHxVXn0weLMB53DYGPtkbgossJNDC2LztUqhlW 7ILifqGv3zHdNMpAumS4Eq2+8g22iYr9lyQn4gaiYFGVlV+aWppqvkGvyfGJaDyu tmGTS/LX20Tozkbno5TymeTWAiRs5/7A1xUEKBGeccRvvFGhwAsflIMHeg74dSZU 7u3bJPIjgaQpSXQkIEln3ZdjhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDZvOuJ Hiz/tHaABhRkZZ3i7K8HMB8GA1UdIwQYMBaAFJPAuheayqHAedM8ZpP0RnAQT82Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTc4OC8zRDA1MTVBMDU5 QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29jQjUwenhta19SR2NCQlB6 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QzZGNXJLb2NCNTB6eG1rX1JHY0JCUHpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTc4OC8zRDA1MTVBMDU5QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29j QjUwenhta19SR2NCQlB6WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoaSAWbSGw8vV4Ai1Lfu98d0k3Yk6Uh65ktHikweRQhle2THOaKPqm hJhW+sfQ8wjRcEy/+xH+ftucBmuFzR0hN0x6CgxrSW0HAgFylFbPPhI5iWrlmpGJ R048x6qIx5pwff0vx0Vyx1oalzyDjMfm1RpmshJYIScBFiE4yU9D05ViTcOCOqIT T5mHwAu3hw6x7MB7fs81G6jzTsk7JFBGYQ2ePNDF7302oMgbELSK57PKuGqft1Uz IUOQ1406qIUtXf2skCyGCbTRdYzYxRVE76Pf2eHXrJ5kyOUygIW0QDvdX7W9su+u mYaMW80fItrQ/xGlfowoQ3gVd78aRCiH -----END CERTIFICATE-----Generated at Mon Dec 22 00:13:53 2025 by rpki-client