This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: PfLjuKcVfTCTDg+LQxyjifc9WJai4Tn3Rgx0oK9B6t4= Subject key identifier: 85:B9:98:6D:D4:FC:13:FC:37:B1:E5:6B:1B:E0:5A:B6:44:2C:31:30 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 0166 Signing time: Fri 05 Dec 2025 01:51:58 +0000 Manifest this update: Fri 05 Dec 2025 01:51:57 +0000 Manifest next update: Fri 12 Dec 2025 01:51:57 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: 22u4GcXMzid5O/IHNkju3f6c+AgrR+VY4QvflU9KcaY=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Dec 5 01:51:57 2025 GMT Not After : Dec 12 01:51:57 2025 GMT Subject: CN=69323abd-ba28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:67:db:74:44:a5:27:df:23:9b:cb:fb:c5: c2:9c:5a:30:ca:f0:56:31:cd:48:32:6f:38:31:4e: 9e:7d:17:b7:6e:c9:39:3f:48:63:a4:54:59:4b:f9: 69:f8:9b:9a:ac:15:92:ec:5b:6b:61:46:2d:37:11: ad:e3:bd:22:17:c4:51:5b:72:54:c9:d4:7c:a9:78: 1d:25:3b:20:ea:dc:e1:75:78:11:96:9f:05:ee:0d: e6:93:f5:27:f2:ca:3f:cf:fd:23:d0:62:6e:7b:50: ca:6c:5f:65:12:03:26:b9:c8:4f:6d:44:30:1b:92: 56:6c:f6:33:52:44:47:3a:37:12:72:b2:49:55:4d: 76:bf:13:c6:b8:46:37:20:08:d4:2b:52:81:87:c3: fc:54:e4:3e:83:68:04:3a:ff:ac:44:cc:da:c4:8e: cf:46:7f:2f:48:40:c8:16:b4:09:22:f8:b8:5d:fb: bd:9c:11:f2:5d:75:29:dc:2f:29:fd:87:e0:96:f2: c2:19:4c:82:39:bd:7d:89:95:d5:fd:cc:c7:f2:f3: f9:3f:68:ab:b7:19:5d:3c:81:ee:72:4c:ed:e7:ea: c1:5f:8b:ad:8b:ba:42:a6:f2:f3:4d:a3:73:f8:9d: e1:58:f0:6a:1b:49:db:80:2f:43:fa:54:16:9c:ab: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B9:98:6D:D4:FC:13:FC:37:B1:E5:6B:1B:E0:5A:B6:44:2C:31:30 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ac:65:6e:0b:55:8c:42:4d:e2:8b:03:f5:58:ed:ae:72:00: 53:81:82:3a:5a:4d:58:c9:22:c4:80:9c:90:5d:de:4c:c3:14: 46:8b:ae:52:d5:1f:f1:bf:51:15:b0:bb:9a:cb:da:0f:e5:1f: ad:d9:d3:b9:d5:3f:ab:b0:bf:c0:a3:0d:04:ce:a8:c6:0f:51: a2:bb:db:0f:46:ca:00:11:12:3c:16:c1:7e:bd:f2:39:ff:0c: 66:bd:93:0b:ac:1b:2d:af:e0:37:1d:13:f9:8f:99:e0:a3:9b: d8:0f:10:fa:02:27:66:28:89:b7:62:a5:c1:46:54:2b:63:96: ba:fe:92:0b:6c:ae:9f:57:e4:9f:88:0a:22:9c:41:e4:76:7a: 43:ba:0e:d2:7f:b5:9a:ed:22:66:dd:31:cf:24:36:a5:dd:fa: cf:c1:c7:0b:d1:0d:be:84:a7:d4:73:12:34:34:d2:72:18:6b: c9:9d:38:aa:da:95:fe:a0:fa:4a:58:76:71:bd:af:8e:b5:a2: 04:dd:f4:4a:c8:ff:b5:1b:54:86:4e:40:f9:9d:de:1b:d1:e7: a5:ba:20:d3:fe:fb:e9:71:5b:63:86:c9:89:40:72:7c:79:fd: d0:fb:a9:ce:b4:bc:00:ba:a8:e1:e5:95:b7:0a:56:bd:25:55: 78:bd:cb:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUxMjA1MDE1MTU3WhcNMjUxMjEyMDE1MTU3WjAYMRYwFAYD VQQDEw02OTMyM2FiZC1iYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KVn23REpSffI5vL+8XCnFowyvBWMc1IMm84MU6efRe3bsk5P0hjpFRZS/lp +JuarBWS7FtrYUYtNxGt470iF8RRW3JUydR8qXgdJTsg6tzhdXgRlp8F7g3mk/Un 8so/z/0j0GJue1DKbF9lEgMmuchPbUQwG5JWbPYzUkRHOjcScrJJVU12vxPGuEY3 IAjUK1KBh8P8VOQ+g2gEOv+sRMzaxI7PRn8vSEDIFrQJIvi4Xfu9nBHyXXUp3C8p /YfglvLCGUyCOb19iZXV/czH8vP5P2irtxldPIHuckzt5+rBX4uti7pCpvLzTaNz +J3hWPBqG0nbgC9D+lQWnKsOKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW5mG3U /BP8N7HlaxvgWrZELDEwMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLrGVuC1WMQk3iiwP1WO2ucgBTgYI6Wk1YySLEgJyQXd5MwxRGi65S 1R/xv1EVsLuay9oP5R+t2dO51T+rsL/Aow0EzqjGD1Giu9sPRsoAERI8FsF+vfI5 /wxmvZMLrBstr+A3HRP5j5ngo5vYDxD6AidmKIm3YqXBRlQrY5a6/pILbK6fV+Sf iAoinEHkdnpDug7Sf7Wa7SJm3THPJDal3frPwccL0Q2+hKfUcxI0NNJyGGvJnTiq 2pX+oPpKWHZxva+OtaIE3fRKyP+1G1SGTkD5nd4b0eeluiDT/vvpcVtjhsmJQHJ8 ef3Q+6nOtLwAuqjh5ZW3Cla9JVV4vcsA -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:10 2025 by rpki-client