This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: roIIut/cptvK0SlDB+y1a11geLidyUf51Pt94kxVMUE= Subject key identifier: A0:4F:FC:CA:82:5F:89:CB:E4:9B:B2:1E:3E:61:F7:D3:01:FB:E2:C1 Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 062B Signing time: Thu 04 Dec 2025 21:33:26 +0000 Manifest this update: Thu 04 Dec 2025 21:33:25 +0000 Manifest next update: Thu 11 Dec 2025 21:33:25 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: gJV/Q9lU6uTvqSEsy2bcRTCX0X945pZxibeaOrV7vqA=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: D/6BYkGqlNOLOYOgY8KQs7LafMiP8Rro2RlyCrKrnhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: Dec 4 21:33:25 2025 GMT Not After : Dec 11 21:33:25 2025 GMT Subject: CN=6931fe25-91cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:e1:3e:61:28:e7:df:b2:3f:e9:6b:15:50: 03:37:08:c2:88:cc:55:c1:f8:91:9b:c0:6c:61:9f: 49:f1:ec:2c:0a:7f:c9:83:d6:2d:81:85:6d:95:86: 9b:06:78:69:46:bc:49:06:93:9a:1f:32:45:ff:84: 3d:54:d3:cb:e3:b2:8d:76:9f:f4:12:72:bc:3e:65: a4:e9:be:65:6b:89:33:39:75:8f:ad:1d:40:9a:a9: 6b:2e:95:87:e1:81:8e:19:33:3c:f1:70:e4:ce:38: e8:43:09:34:97:b1:c6:a3:b9:98:c2:94:e4:eb:57: 51:cf:be:de:ff:93:ba:ee:c4:6e:07:51:4a:18:22: cf:38:4f:03:85:ee:5c:cc:f3:13:16:f7:ec:14:a8: 96:f1:4f:cd:1e:f7:ff:94:0b:eb:6a:a2:2e:d8:ce: 8a:8b:9b:95:62:1d:e4:a5:a3:5b:09:39:6f:95:05: 9a:4f:ba:d4:5f:0d:39:dd:7a:97:e3:dc:f2:7e:12: a6:73:3a:66:9e:42:6a:28:e2:4e:4b:f7:e6:92:48: 39:b3:7f:d9:89:88:7a:35:24:17:31:4e:6a:cf:d5: 70:3f:5c:15:0a:bf:75:45:82:dc:96:94:5e:70:2e: 03:9f:ff:13:cd:51:e5:ef:65:a8:c7:b9:32:9c:50: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4F:FC:CA:82:5F:89:CB:E4:9B:B2:1E:3E:61:F7:D3:01:FB:E2:C1 X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:62:1e:d3:6c:47:2b:67:76:9f:e8:0b:2d:cf:a7:b3:ef:76: e5:47:ba:c1:32:36:a9:97:1d:14:01:df:34:f8:41:80:6c:6f: 8e:d9:22:d6:87:5a:4b:dd:78:8b:41:c5:ed:6b:dc:b2:6a:32: 49:57:38:6f:18:61:af:0a:f8:6d:39:79:9a:65:27:7c:9e:9c: 4e:a6:83:11:e3:db:43:a5:4d:84:6e:fb:e2:50:34:26:a0:37: fd:c6:ae:09:e9:8e:d3:ac:f0:e5:ee:f5:88:86:41:6f:f2:4a: 2c:24:cb:f0:a9:57:0a:cd:34:01:7a:ad:81:67:08:63:e5:e8: 19:1c:e7:5d:ce:12:1d:d9:a1:59:a2:04:de:52:bb:e8:ad:f9: e3:68:8e:6d:94:1e:35:15:b2:79:e1:32:c6:fb:c9:b6:f8:c8: 21:bb:e7:9e:8f:dc:25:5e:0d:bd:f0:f6:cc:ca:44:64:96:3a: 5d:84:0b:bd:dd:ab:80:16:2c:f8:ed:ed:f8:3e:4f:a2:5d:b0: 88:93:d0:92:76:da:e5:f7:df:06:2d:17:0c:fb:e5:15:8d:0e: 27:44:cb:8a:de:54:34:80:fe:61:0a:cc:63:db:fc:e0:ba:fb: e2:c7:a1:5c:ba:1d:d7:5a:71:c5:89:6b:4d:ad:aa:be:ee:88: b9:80:ad:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUxMjA0MjEzMzI1WhcNMjUxMjExMjEzMzI1WjAYMRYwFAYD VQQDEw02OTMxZmUyNS05MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Y/hPmEo59+yP+lrFVADNwjCiMxVwfiRm8BsYZ9J8ewsCn/Jg9YtgYVtlYab BnhpRrxJBpOaHzJF/4Q9VNPL47KNdp/0EnK8PmWk6b5la4kzOXWPrR1AmqlrLpWH 4YGOGTM88XDkzjjoQwk0l7HGo7mYwpTk61dRz77e/5O67sRuB1FKGCLPOE8Dhe5c zPMTFvfsFKiW8U/NHvf/lAvraqIu2M6Ki5uVYh3kpaNbCTlvlQWaT7rUXw053XqX 49zyfhKmczpmnkJqKOJOS/fmkkg5s3/ZiYh6NSQXMU5qz9VwP1wVCr91RYLclpRe cC4Dn/8TzVHl72Wox7kynFCL+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBP/MqC X4nL5JuyHj5h99MB++LBMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNYh7TbEcrZ3af6Astz6ez73blR7rBMjaplx0UAd80+EGAbG+O2SLW h1pL3XiLQcXta9yyajJJVzhvGGGvCvhtOXmaZSd8npxOpoMR49tDpU2EbvviUDQm oDf9xq4J6Y7TrPDl7vWIhkFv8kosJMvwqVcKzTQBeq2BZwhj5egZHOddzhId2aFZ ogTeUrvorfnjaI5tlB41FbJ54TLG+8m2+Mghu+eej9wlXg298PbMykRkljpdhAu9 3auAFiz47e34Pk+iXbCIk9CSdtrl998GLRcM++UVjQ4nRMuK3lQ0gP5hCsxj2/zg uvvix6Fcuh3XWnHFiWtNraq+7oi5gK2d -----END CERTIFICATE-----Generated at Sat Dec 6 19:25:02 2025 by rpki-client