This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json) Hash identifier: MPFP8joExDCJjdKACXuYKjSGN7l6Nj3FSxW+XHWF1q4= Subject key identifier: F6:96:D0:9F:B1:17:CA:B0:B3:58:A7:18:34:E2:31:79:30:6C:3F:2F Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft Manifest number: 0F Signing time: Fri 05 Dec 2025 05:46:13 +0000 Manifest this update: Fri 05 Dec 2025 05:46:12 +0000 Manifest next update: Fri 12 Dec 2025 05:46:12 +0000 Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: h2d1trWoq8TZwOoM806ChRJ7mlUD2ba1N/cM/0pWXE0=) 2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: iFszXnez3BpB7Nejqqha0Uy0GZNQHVhj2pVkoNknBhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Dec 5 05:46:12 2025 GMT Not After : Dec 12 05:46:12 2025 GMT Subject: CN=693271a5-f2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:f9:1b:1f:e5:38:92:76:26:21:57:f1:d6: 99:bb:96:cc:0b:23:7c:f6:6a:b3:40:10:0b:56:7b: 69:ac:ec:60:18:0c:18:ab:e5:8f:44:a2:45:cf:b6: 8d:d4:55:88:13:7d:76:f5:58:ad:09:10:9c:bf:95: 74:53:dd:46:c9:2b:bf:11:c5:df:77:de:f3:0f:ad: 32:9d:90:9e:db:85:7f:be:cb:e3:6e:54:e2:16:44: f0:75:be:87:61:82:ba:47:e4:11:24:51:e0:d5:16: 33:94:58:73:eb:54:26:d5:e4:a1:29:ca:eb:ab:ba: 20:24:53:a8:92:18:b8:f3:26:de:6a:2e:e3:0d:54: 19:ba:b6:43:4c:41:7e:8f:46:52:d7:c0:34:55:e4: 95:f6:52:0f:4a:e7:cb:d8:9c:68:e5:d6:49:ad:d5: 85:55:d3:4c:57:fe:10:68:53:31:fd:78:88:49:2a: 73:1c:ff:80:93:32:77:54:ba:d7:20:98:9e:51:9d: 30:0d:4b:57:5c:f1:89:e6:e3:27:c9:25:92:17:4b: e2:13:3a:84:29:04:a1:54:99:51:bc:b0:bb:11:af: f8:5a:0c:15:fd:98:f4:37:56:ee:a7:db:ee:16:7f: 78:87:f3:6b:ef:bf:bf:f0:df:95:68:07:56:2b:da: de:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:96:D0:9F:B1:17:CA:B0:B3:58:A7:18:34:E2:31:79:30:6C:3F:2F X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fd:39:08:0b:dc:bf:36:79:d6:5f:32:74:9f:5d:b4:2b:d2: 1b:61:e7:0a:04:2c:2d:94:b4:6b:1c:d1:f1:bb:3f:ae:3d:43: 45:c3:29:75:87:65:7e:f4:89:9b:81:69:db:cf:8b:f3:df:46: 6c:93:60:82:95:14:52:40:fb:fd:0b:b3:03:98:8d:1a:4d:ed: 34:84:ee:b8:7c:3e:88:1e:b1:69:1f:73:8f:d5:d9:4a:08:44: c8:1d:1d:86:da:03:61:4d:1f:9a:5c:30:cb:03:46:03:4b:97: 72:5a:b1:46:97:90:df:37:47:4c:49:33:46:85:e2:c4:42:75: ff:93:b0:8a:91:db:13:e8:35:ce:9f:fa:2b:66:43:9d:76:b4: b5:9f:d9:5b:b6:07:e2:6d:eb:c8:72:57:d3:56:bd:de:69:d9: 4c:b8:e9:f7:2a:3a:0f:a1:2c:ce:c8:f2:2c:a4:71:31:4d:ca: cd:d6:d0:39:a7:14:40:40:62:8a:b9:3a:bb:5f:05:eb:4a:6f: 34:f4:82:f2:83:c2:de:49:7f:e4:46:b0:e1:43:84:43:36:9b: 90:54:fc:5a:ed:e5:10:70:b9:b7:e2:38:98:97:8d:f4:cf:98: c1:8b:52:de:07:1e:10:5e:c6:ed:ca:52:63:fd:be:f1:11:2d: 00:b3:4f:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNTEyMDUwNTQ2MTJaFw0yNTEyMTIwNTQ2MTJaMBgxFjAUBgNV BAMTDTY5MzI3MWE1LWYyZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDflfkbH+U4knYmIVfx1pm7lswLI3z2arNAEAtWe2ms7GAYDBir5Y9EokXPto3U VYgTfXb1WK0JEJy/lXRT3UbJK78Rxd933vMPrTKdkJ7bhX++y+NuVOIWRPB1vodh grpH5BEkUeDVFjOUWHPrVCbV5KEpyuuruiAkU6iSGLjzJt5qLuMNVBm6tkNMQX6P RlLXwDRV5JX2Ug9K58vYnGjl1kmt1YVV00xX/hBoUzH9eIhJKnMc/4CTMndUutcg mJ5RnTANS1dc8Ynm4yfJJZIXS+ITOoQpBKFUmVG8sLsRr/haDBX9mPQ3Vu6n2+4W f3iH82vvv7/w35VoB1Yr2t4VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9pbQn7EX yrCzWKcYNOIxeTBsPy8wHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz Qjg3LzIzRDE1MjhBQkNFMzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055 U1U3QXVKVDJ6dm5SYXFGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAD9OQgL3L82edZfMnSfXbQr0hth5woELC2UtGsc0fG7P649Q0XDKXWH ZX70iZuBadvPi/PfRmyTYIKVFFJA+/0LswOYjRpN7TSE7rh8PogesWkfc4/V2UoI RMgdHYbaA2FNH5pcMMsDRgNLl3JasUaXkN83R0xJM0aF4sRCdf+TsIqR2xPoNc6f +itmQ512tLWf2Vu2B+Jt68hyV9NWvd5p2Uy46fcqOg+hLM7I8iykcTFNys3W0Dmn FEBAYoq5OrtfBetKbzT0gvKDwt5Jf+RGsOFDhEM2m5BU/Frt5RBwubfiOJiXjfTP mMGLUt4HHhBexu3KUmP9vvERLQCzT+k= -----END CERTIFICATE-----Generated at Sun Dec 7 02:23:33 2025 by rpki-client