This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: p0WhV26ZgRmL3vxrJkrQlXpEM0HJh98TpgbifMGqTuA= Subject key identifier: 9E:82:3E:72:D8:11:88:10:4D:8E:4A:3E:DA:7C:09:CE:F7:05:8D:6A Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 07C9 Signing time: Thu 04 Dec 2025 20:19:20 +0000 Manifest this update: Thu 04 Dec 2025 20:19:19 +0000 Manifest next update: Thu 11 Dec 2025 20:19:19 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: CFpxHv8SmzpIbM+SRBZ+pH0zML03nbQMkFW2S85Pvnk=) 2: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: YmO5r9I5M9hSwRgGeW2RzV0SplpKUhcFG78XAfWS68g=) 3: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: So5qFFxmGcF1ctOBdOf/BGE9FgCEBqSycNLllCKsDto=) 4: FF7010DCAE9811F081180758C4F9AE02.roa (hash: VvmYkMG4uoU0S75QpcNmSN4i51xgi+sqh80k/T/yC00=) 5: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: dccnAsVRG5F4BLVx9qqI8mfwjXOuUJp1z+4BKIb0lIY=) 6: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: 5JkdXg8obUFlMSitt9szb1JTAobrjQW+JairCkgY4a4=) 7: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: Os+URuFoZ2zAOXDoDv8uqqxEF42zo4igT1qvd2MJXSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Dec 4 20:19:19 2025 GMT Not After : Dec 11 20:19:19 2025 GMT Subject: CN=6931ecc7-86b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:82:17:44:e4:da:93:4c:51:29:10:58:0a: 69:05:61:39:14:67:72:6e:26:c9:52:0e:cc:95:bf: 55:c0:cb:40:5c:c6:c3:a7:3e:37:24:82:5c:dc:86: 7c:fc:cb:53:e0:ce:93:fa:fa:37:6f:00:2a:ee:37: 47:ce:25:90:bd:49:fd:16:3c:49:ac:d2:a3:ac:0b: 15:62:f5:f0:db:75:3c:5a:10:f9:93:7d:6d:f8:cd: 2f:4b:ec:cc:48:df:58:e9:3d:1f:0a:fe:c7:92:f8: 29:ba:e5:cd:9c:07:c1:e5:97:56:15:d6:8e:bd:97: cd:9e:97:4c:3c:ec:0e:3f:ba:0b:ba:d5:0e:d0:2d: ad:11:c5:96:81:2e:7f:72:31:89:1f:7a:b3:68:84: 29:89:cb:85:88:be:89:38:2c:c8:1c:68:65:c6:af: 51:3f:ac:42:80:58:6e:16:5c:32:de:c8:91:6e:94: 1d:23:d5:1a:79:e6:ca:eb:c6:89:92:12:f2:60:1e: a1:18:20:fb:4d:2c:41:b3:7d:8d:9e:3a:74:8c:36: 14:aa:b4:ca:36:74:b7:bf:77:68:4d:10:e8:c8:31: a7:19:b8:33:48:78:bf:8c:73:dc:27:0a:30:e2:67: f3:29:2e:f7:61:db:ee:ab:cf:94:f3:b8:f7:e2:e8: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:82:3E:72:D8:11:88:10:4D:8E:4A:3E:DA:7C:09:CE:F7:05:8D:6A X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9d:42:a8:7a:ec:e7:8c:91:50:ff:81:fe:a7:2f:05:3b:f4: ef:c7:8a:b2:79:e7:f7:2f:18:25:3e:d7:77:39:89:ba:ea:98: 06:12:db:09:3c:74:32:67:74:12:28:9f:5d:3c:84:3f:30:49: dc:aa:81:0e:1b:3d:b0:9d:0e:23:4a:06:e8:33:5f:e5:e0:a2: d7:26:78:74:3f:5b:aa:95:74:04:51:9f:5c:7a:83:10:2c:54: f2:3b:b3:d3:11:84:46:a9:61:95:e3:30:85:be:09:af:3c:28: fe:6b:26:22:27:b3:7e:29:6c:ef:92:bf:93:e6:61:12:b4:c4: eb:17:03:17:92:5e:94:43:a0:1d:b5:83:55:0d:b4:46:2f:c6: d8:d3:75:6b:db:b5:a6:37:a3:37:8a:c8:bf:69:c3:99:4a:ef: 73:f9:ae:4a:60:4f:84:5b:e2:80:81:68:1b:a6:d5:15:f3:03: a3:f9:76:16:96:fc:2d:6b:7f:72:2c:4e:78:48:ab:34:bb:60: 5a:2f:c6:cf:b5:77:f5:25:8c:9e:d8:11:90:65:88:45:ab:77: 12:f4:f8:f7:ca:be:2f:63:96:85:97:57:c6:d4:1e:2a:b5:bc: 12:f4:75:ae:b8:49:cb:2e:45:7d:99:fe:4c:28:58:c2:63:d1: b2:1e:d7:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUxMjA0MjAxOTE5WhcNMjUxMjExMjAxOTE5WjAYMRYwFAYD VQQDEw02OTMxZWNjNy04NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYmCF0Tk2pNMUSkQWAppBWE5FGdybibJUg7Mlb9VwMtAXMbDpz43JIJc3IZ8 /MtT4M6T+vo3bwAq7jdHziWQvUn9FjxJrNKjrAsVYvXw23U8WhD5k31t+M0vS+zM SN9Y6T0fCv7HkvgpuuXNnAfB5ZdWFdaOvZfNnpdMPOwOP7oLutUO0C2tEcWWgS5/ cjGJH3qzaIQpicuFiL6JOCzIHGhlxq9RP6xCgFhuFlwy3siRbpQdI9UaeebK68aJ khLyYB6hGCD7TSxBs32Nnjp0jDYUqrTKNnS3v3doTRDoyDGnGbgzSHi/jHPcJwow 4mfzKS73Ydvuq8+U87j34ui0BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6CPnLY EYgQTY5KPtp8Cc73BY1qMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsnUKoeuznjJFQ/4H+py8FO/Tvx4qyeef3LxglPtd3OYm66pgGEtsJ PHQyZ3QSKJ9dPIQ/MEncqoEOGz2wnQ4jSgboM1/l4KLXJnh0P1uqlXQEUZ9ceoMQ LFTyO7PTEYRGqWGV4zCFvgmvPCj+ayYiJ7N+KWzvkr+T5mEStMTrFwMXkl6UQ6Ad tYNVDbRGL8bY03Vr27WmN6M3isi/acOZSu9z+a5KYE+EW+KAgWgbptUV8wOj+XYW lvwta39yLE54SKs0u2BaL8bPtXf1JYye2BGQZYhFq3cS9Pj3yr4vY5aFl1fG1B4q tbwS9HWuuEnLLkV9mf5MKFjCY9GyHtfD -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:22 2025 by rpki-client