This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json) Hash identifier: SdISgRNnft0MA92rW6iChh9aTzm9h38uMK/vy1/rJg0= Subject key identifier: 84:C8:99:CD:79:90:73:9E:41:82:18:71:AA:AE:04:B8:1D:4D:D4:51 Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft Manifest number: 5B Signing time: Fri 05 Dec 2025 05:01:28 +0000 Manifest this update: Fri 05 Dec 2025 05:01:27 +0000 Manifest next update: Fri 12 Dec 2025 05:01:27 +0000 Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: cX/Kcm80YdF0PyCn9pU9REFt06h0aHG/N2KYw/VELqU=) 2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: 6V3Y0qKzoR1SIE/C41B0Si9iayed9FecyNH/7XoNeQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Dec 5 05:01:27 2025 GMT Not After : Dec 12 05:01:27 2025 GMT Subject: CN=69326728-1f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:b6:e4:ad:b6:19:50:ff:42:e9:e2:04:ad: f0:ac:c0:df:f8:da:15:5b:4b:df:ef:39:13:4f:c4: 97:0a:e6:c8:ff:12:f4:67:d3:95:cf:5a:5c:bb:86: 22:a6:fe:b0:b8:d3:94:ac:c3:dd:b5:44:9a:af:be: e4:5d:95:cc:a9:1f:49:93:e0:26:c5:92:9a:34:a5: 9f:23:63:4c:20:10:88:6c:2d:e0:13:81:c0:14:23: 68:64:86:4f:69:66:60:b0:11:d7:82:ff:69:41:2d: 46:bb:af:c3:13:37:20:61:c9:57:af:93:4e:dc:82: 27:14:fa:d4:bf:99:9c:ce:0f:6c:68:ed:7f:ed:cb: 68:f8:16:8e:11:c4:85:f1:f7:37:3b:15:b2:f5:1b: aa:84:64:8e:73:79:ee:e8:fe:1b:d4:bc:48:ba:87: a3:b8:8b:9b:7a:3f:f6:10:82:ac:59:3c:32:8e:2f: b5:53:b7:6f:5d:59:b6:8f:5b:52:b3:19:ed:57:a9: 13:4e:d6:32:f8:9e:06:b9:50:5a:f6:c9:ba:0c:d1: c9:53:3f:27:d5:5e:27:d2:b6:6a:bd:72:45:f3:19: 22:17:58:ae:99:e1:4f:21:36:e9:47:67:5b:41:ba: 28:be:d0:6e:af:63:0b:07:73:d6:34:33:61:82:35: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C8:99:CD:79:90:73:9E:41:82:18:71:AA:AE:04:B8:1D:4D:D4:51 X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:84:80:67:27:9c:ed:a0:57:16:ee:d6:c9:a3:f9:d3:2d:a8: 8a:39:46:da:aa:7e:30:a4:56:63:72:90:7e:bd:48:4f:c0:61: 99:a3:f3:dd:bf:03:94:57:a6:56:78:de:e5:82:fe:b5:27:50: 0d:0e:06:18:31:de:10:9e:a1:ff:87:fa:6f:14:e4:a2:0c:a8: 92:fc:a0:eb:03:8a:a2:0f:4b:6a:75:3f:72:e6:23:04:09:f2: 38:ff:06:4f:28:c2:93:31:b4:04:d8:a2:7e:a4:b0:aa:b9:16: b8:23:92:ba:4f:39:12:3a:43:41:c0:41:66:5e:2d:e4:32:75: 3b:91:52:9e:37:ef:d2:ec:57:e3:a4:85:4d:cd:14:c2:49:a7: fc:f6:54:a8:d4:d8:8f:a3:e0:92:25:7a:3e:d0:1b:5d:2e:ea: 4f:78:d3:09:7c:d2:92:5e:14:93:ad:2d:4f:c8:52:6a:ff:64: 75:72:f8:c2:93:75:9f:47:c7:a1:be:ad:f4:c6:de:e5:d2:4a: 71:12:75:4a:d9:6b:7f:a5:9c:09:49:b7:70:fd:5e:4f:f5:c6: 32:bb:3e:11:82:31:f8:a0:f3:95:ae:eb:ee:6b:51:c8:2e:00: 13:86:81:b5:25:0a:52:84:74:ff:ad:ea:57:78:9a:49:6a:a8: 9a:cf:23:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUEyNzExMC8GA1UEBRMoOTI4RThBQTgwRDk5QTcyM0Y2QTkwMjFBRTVFN0IwMzJB Q0VEREI3QTAeFw0yNTEyMDUwNTAxMjdaFw0yNTEyMTIwNTAxMjdaMBgxFjAUBgNV BAMTDTY5MzI2NzI4LTFmMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLI7bkrbYZUP9C6eIErfCswN/42hVbS9/vORNPxJcK5sj/EvRn05XPWly7hiKm /rC405Ssw921RJqvvuRdlcypH0mT4CbFkpo0pZ8jY0wgEIhsLeATgcAUI2hkhk9p ZmCwEdeC/2lBLUa7r8MTNyBhyVevk07cgicU+tS/mZzOD2xo7X/ty2j4Fo4RxIXx 9zc7FbL1G6qEZI5zee7o/hvUvEi6h6O4i5t6P/YQgqxZPDKOL7VTt29dWbaPW1Kz Ge1XqRNO1jL4nga5UFr2yboM0clTPyfVXifStmq9ckXzGSIXWK6Z4U8hNulHZ1tB uii+0G6vYwsHc9Y0M2GCNdhzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhMiZzXmQ c55Bghhxqq4EuB1N1FEwHwYDVR0jBBgwFoAUko6KqA2ZpyP2qQIa5eewMqzt23ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QTI3LzlEQzIyMDU0NEE1 ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva282S3FBMlpweVAycVFJYTVlZXdNcXp0MjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 QTI3LzlEQzIyMDU0NEE1ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQ MnFRSWE1ZWV3TXF6dDIzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMiEgGcnnO2gVxbu1smj+dMtqIo5RtqqfjCkVmNykH69SE/AYZmj892/ A5RXplZ43uWC/rUnUA0OBhgx3hCeof+H+m8U5KIMqJL8oOsDiqIPS2p1P3LmIwQJ 8jj/Bk8owpMxtATYon6ksKq5FrgjkrpPORI6Q0HAQWZeLeQydTuRUp4379LsV+Ok hU3NFMJJp/z2VKjU2I+j4JIlej7QG10u6k940wl80pJeFJOtLU/IUmr/ZHVy+MKT dZ9Hx6G+rfTG3uXSSnESdUrZa3+lnAlJt3D9Xk/1xjK7PhGCMfig85Wu6+5rUcgu ABOGgbUlClKEdP+t6ld4mklqqJrPI5s= -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:19 2025 by rpki-client