This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: lcMFydRLYg529x0ZF4xC/DEDjEqMjWrJpbWKVnec0Ic= Subject key identifier: B6:C1:44:CD:3B:A2:25:4E:11:A6:BC:CB:DC:05:20:3A:1D:F1:DB:54 Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 266D Signing time: Thu 04 Dec 2025 16:02:04 +0000 Manifest this update: Thu 04 Dec 2025 16:02:03 +0000 Manifest next update: Thu 11 Dec 2025 16:02:03 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: LDfszbJFm9BFbn3YhxAcogGik7fqRhSzpi0tk705YXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: Dec 4 16:02:03 2025 GMT Not After : Dec 11 16:02:03 2025 GMT Subject: CN=6931b07c-8cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:9f:7a:e4:1f:2d:90:25:75:7c:58:a7:12: a1:32:57:a5:98:bb:b9:97:d9:6b:6b:52:e5:3d:a5: 4d:22:5d:40:fe:0b:7c:90:07:02:42:1d:ed:c8:4f: 21:89:24:e8:b5:8c:70:c8:f7:41:d5:c2:8a:08:b0: 90:60:13:02:97:9c:8b:9f:cc:41:8b:c5:7b:72:e2: ae:10:c7:6d:ab:2b:7c:b6:05:f8:c9:9b:40:77:c8: c8:24:47:2c:5d:36:d1:27:ed:8a:d8:08:9f:8e:1c: bd:e6:6f:26:9e:f8:e1:a9:ea:88:ed:51:c9:11:41: a5:bd:6e:8f:b0:00:09:a6:46:8a:c5:68:4c:a1:53: 28:a4:a0:8b:a1:7c:50:0d:76:ba:1c:17:4f:98:17: 6f:b1:44:9d:0e:e7:c0:54:94:06:92:0c:c6:84:1e: ff:c6:dd:c4:b1:7d:08:5a:a5:6e:5f:fe:82:22:b8: 4a:9d:3b:f9:c4:73:bc:1e:5b:73:d4:2c:69:db:2c: fa:7a:10:95:54:f5:cc:af:8a:a3:a8:dd:5c:1f:0c: e7:bc:1d:04:f2:6c:83:c2:af:fb:7f:c5:15:cd:96: 28:06:ec:d8:26:1b:38:53:ef:32:c4:b5:a3:1f:fc: 30:2d:32:ff:80:6d:0a:09:a0:49:65:ed:96:4f:17: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C1:44:CD:3B:A2:25:4E:11:A6:BC:CB:DC:05:20:3A:1D:F1:DB:54 X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7d:7a:d3:9f:23:42:75:d5:c4:ef:db:10:69:56:12:6d:78: ea:5f:55:f7:fa:a2:fe:ca:00:11:28:3d:9e:29:40:bd:e5:71: bc:ce:7c:68:1e:06:fd:dc:30:22:f1:b0:a2:31:f0:ab:2e:99: 92:77:ad:08:2c:95:fa:57:fe:8d:ec:15:b9:39:72:51:ba:51: 02:de:00:a4:64:14:35:15:2a:f1:8c:a9:fb:f7:57:f1:88:b4: 14:7d:3b:4a:89:7b:d2:38:4e:09:31:2a:0a:10:6e:96:36:d8: f3:c7:4d:4f:89:7a:c7:22:e0:56:48:06:a6:1c:4d:7d:d7:7f: cb:c6:56:5f:02:b3:96:b3:dc:90:e5:b2:70:30:fd:16:5f:53: 62:a3:f3:29:f2:40:05:22:01:b2:93:5c:fe:42:f0:5b:81:60: a8:9c:bf:d8:fd:d2:72:7f:72:86:95:d6:b1:38:94:ec:8d:b1: 51:89:68:ae:b6:85:11:a0:dd:38:aa:e8:6a:4f:85:98:a9:26: 89:c1:ed:2b:d7:c9:72:61:85:f9:62:03:05:86:72:8c:85:ae: 82:5c:7a:0f:61:1b:c4:96:93:d0:02:80:fd:fa:12:63:e2:ec: 92:e7:11:cd:8d:c4:b5:2b:63:6c:6e:40:30:05:b8:6f:ca:0c: a8:9a:b5:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjUxMjA0MTYwMjAzWhcNMjUxMjExMTYwMjAzWjAYMRYwFAYD VQQDEw02OTMxYjA3Yy04Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsOfeuQfLZAldXxYpxKhMlelmLu5l9lra1LlPaVNIl1A/gt8kAcCQh3tyE8h iSTotYxwyPdB1cKKCLCQYBMCl5yLn8xBi8V7cuKuEMdtqyt8tgX4yZtAd8jIJEcs XTbRJ+2K2Aifjhy95m8mnvjhqeqI7VHJEUGlvW6PsAAJpkaKxWhMoVMopKCLoXxQ DXa6HBdPmBdvsUSdDufAVJQGkgzGhB7/xt3EsX0IWqVuX/6CIrhKnTv5xHO8Hltz 1Cxp2yz6ehCVVPXMr4qjqN1cHwznvB0E8myDwq/7f8UVzZYoBuzYJhs4U+8yxLWj H/wwLTL/gG0KCaBJZe2WTxcPrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbBRM07 oiVOEaa8y9wFIDod8dtUMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACfXrTnyNCddXE79sQaVYSbXjqX1X3+qL+ygARKD2eKUC95XG8znxo Hgb93DAi8bCiMfCrLpmSd60ILJX6V/6N7BW5OXJRulEC3gCkZBQ1FSrxjKn791fx iLQUfTtKiXvSOE4JMSoKEG6WNtjzx01PiXrHIuBWSAamHE1913/LxlZfArOWs9yQ 5bJwMP0WX1Nio/Mp8kAFIgGyk1z+QvBbgWConL/Y/dJyf3KGldaxOJTsjbFRiWiu toURoN04quhqT4WYqSaJwe0r18lyYYX5YgMFhnKMha6CXHoPYRvElpPQAoD9+hJj 4uyS5xHNjcS1K2NsbkAwBbhvygyomrW7 -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:52 2025 by rpki-client