This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: 8PS5eRvBIduKmahslZYMaDVTfbN9wuIgU9HtPv1DMxc= Subject key identifier: 36:D4:84:37:02:F2:1D:5D:8B:68:25:93:EE:85:4B:6E:7B:21:17:7C Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 016D Signing time: Fri 19 Dec 2025 02:45:47 +0000 Manifest this update: Fri 19 Dec 2025 02:45:47 +0000 Manifest next update: Fri 26 Dec 2025 02:45:47 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: Dt9jTpHDuL+vAxOw71Qcnewn6ja8N8eHYTWl+JXPnF8=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Dec 19 02:45:47 2025 GMT Not After : Dec 26 02:45:47 2025 GMT Subject: CN=6944bc5b-496c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:7a:54:f9:d1:4f:93:e9:69:9b:7a:f6:80: 41:02:ca:be:20:6f:a8:b3:ba:01:cd:b6:7b:85:51: 42:02:73:b5:fd:ba:30:d8:3b:85:c3:a9:23:d6:ac: 6b:4c:6d:d1:d7:c0:19:b0:5c:91:8b:e8:f2:8f:24: 14:0f:25:ec:71:88:67:46:4c:79:27:a3:10:10:b6: 87:c0:ba:f0:44:e7:c0:1f:86:90:ad:0f:a7:35:69: fc:49:f9:17:0a:05:73:70:f8:1e:fb:ee:14:53:1b: e8:0c:a1:63:3e:2e:bb:fd:f2:79:6f:eb:fe:64:35: 50:8f:77:03:97:7a:d5:97:a5:af:1f:1f:47:8b:1d: 6b:3b:2e:f3:87:38:55:6e:2d:d7:45:57:79:58:4a: 9b:4c:d2:27:79:76:4c:e1:4d:b0:90:04:ed:a3:de: 6d:e2:80:5e:4e:d4:58:ef:63:93:ef:83:e6:36:f1: 24:2f:a8:1f:d7:76:69:5b:8e:2e:92:80:98:21:ea: f4:04:7c:44:f8:27:a2:fb:da:ae:5d:75:66:3b:8a: 03:a9:19:44:e7:14:e6:ec:5b:f8:35:c6:6b:45:d7: 41:f0:58:05:6b:77:88:4b:b0:70:99:8e:47:89:0d: 3c:28:49:b6:18:c1:74:91:86:ff:53:7e:4c:fe:eb: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D4:84:37:02:F2:1D:5D:8B:68:25:93:EE:85:4B:6E:7B:21:17:7C X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:75:58:4b:ab:81:96:46:8d:3b:e4:12:d7:21:a8:39:0f:9c: 7a:a6:ec:d2:da:21:42:4d:79:4e:48:61:25:4d:29:2b:68:85: a3:b8:25:99:34:81:9c:39:2e:9e:81:6d:d4:7b:4f:ae:7f:74: 85:4e:00:c1:5f:e5:e8:26:a0:57:2b:62:25:0b:4f:cc:bb:85: a2:35:3d:3d:58:fc:4b:3d:70:1a:49:42:06:78:11:21:ae:a2: 51:b1:e1:70:fb:93:62:5e:d9:cb:b3:f4:44:fd:9f:d7:f8:c6: 2a:50:37:aa:d3:47:45:42:a7:dd:3e:05:0c:53:a6:48:46:6d: 40:ae:1c:21:26:7c:a8:40:0e:02:75:87:59:bc:5a:fc:50:2e: 5d:22:9d:46:cf:04:52:51:37:b5:da:71:d9:26:f4:d4:ac:4a: 6b:d8:7b:ba:c4:e6:bb:c0:de:ce:19:5a:e3:1c:f2:02:af:d3: cd:30:65:0d:30:bc:d9:e1:3c:9c:e3:72:bf:26:d2:bf:31:e8: 15:30:a0:bd:d2:94:2d:40:8f:80:69:3b:39:44:7b:e7:64:b3: 32:d4:86:c7:1c:97:c8:f3:03:b1:ec:49:32:c5:02:74:16:32: 23:4d:ae:b7:db:fc:c8:e1:62:00:b6:6e:bf:13:4f:e3:89:fd: dd:86:50:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUxMjE5MDI0NTQ3WhcNMjUxMjI2MDI0NTQ3WjAYMRYwFAYD VQQDDA02OTQ0YmM1Yi00OTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgp6VPnRT5PpaZt69oBBAsq+IG+os7oBzbZ7hVFCAnO1/bow2DuFw6kj1qxr TG3R18AZsFyRi+jyjyQUDyXscYhnRkx5J6MQELaHwLrwROfAH4aQrQ+nNWn8SfkX CgVzcPge++4UUxvoDKFjPi67/fJ5b+v+ZDVQj3cDl3rVl6WvHx9Hix1rOy7zhzhV bi3XRVd5WEqbTNIneXZM4U2wkATto95t4oBeTtRY72OT74PmNvEkL6gf13ZpW44u koCYIer0BHxE+Cei+9quXXVmO4oDqRlE5xTm7Fv4NcZrRddB8FgFa3eIS7BwmY5H iQ08KEm2GMF0kYb/U35M/uvEdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbUhDcC 8h1di2glk+6FS257IRd8MB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJdVhLq4GWRo075BLXIag5D5x6puzS2iFCTXlOSGElTSkraIWjuCWZ NIGcOS6egW3Ue0+uf3SFTgDBX+XoJqBXK2IlC0/Mu4WiNT09WPxLPXAaSUIGeBEh rqJRseFw+5NiXtnLs/RE/Z/X+MYqUDeq00dFQqfdPgUMU6ZIRm1ArhwhJnyoQA4C dYdZvFr8UC5dIp1GzwRSUTe12nHZJvTUrEpr2Hu6xOa7wN7OGVrjHPICr9PNMGUN MLzZ4Tyc43K/JtK/MegVMKC90pQtQI+AaTs5RHvnZLMy1IbHHJfI8wOx7EkyxQJ0 FjIjTa632/zI4WIAtm6/E0/jif3dhlDj -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:36 2025 by rpki-client