This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json) Hash identifier: Uy2Ht60EDUDfCG1p2YpE/4fX9r8c8YP/1hnkxTPiJnU= Subject key identifier: 55:B9:F1:6C:19:12:D9:2E:A5:EB:CE:57:ED:D5:B6:EE:9D:A9:D1:EF Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft Manifest number: 29 Signing time: Sun 25 Jan 2026 06:43:17 +0000 Manifest this update: Sun 25 Jan 2026 06:43:16 +0000 Manifest next update: Sun 01 Feb 2026 06:43:16 +0000 Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 9p6jlmEBQdgjN+8gGvc4YMKUvryv3KIcvQVDvp8C0nk=) 2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: iFszXnez3BpB7Nejqqha0Uy0GZNQHVhj2pVkoNknBhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Jan 25 06:43:16 2026 GMT Not After : Feb 1 06:43:16 2026 GMT Subject: CN=6975bb84-55ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:d7:5a:30:3b:8b:81:32:e9:2c:81:aa:41: 64:1a:9f:6f:63:17:7a:e8:71:10:f7:11:98:38:e1: 56:7e:97:a8:af:1b:a7:bb:cd:91:b3:c4:11:ec:47: 95:72:72:32:ab:09:55:d8:2d:f7:ab:d3:45:ec:70: d3:15:10:2f:70:65:39:d7:9b:c6:a2:f8:94:06:f0: f6:5c:8e:c7:d5:10:4a:48:21:e7:a7:25:0d:b1:c1: ec:86:88:e3:ee:4c:85:a1:a3:96:2b:03:82:8f:f1: 57:64:13:15:5f:50:2b:9e:5e:90:e3:d5:24:67:15: 95:8e:97:2f:c7:14:00:08:4a:61:34:ed:e7:e7:5c: 7c:bc:39:39:28:a2:b2:0b:df:3b:d3:3a:cb:43:24: 80:89:0d:e5:b3:ad:20:e0:1b:93:89:81:d2:41:1e: 11:2d:dc:3b:af:7a:e4:44:e6:72:64:98:03:57:81: 33:f6:d3:eb:0d:81:75:24:d8:b8:06:e8:4c:28:d9: d4:3f:3d:9b:69:3e:0c:60:12:95:a7:5e:7e:65:c5: f9:15:e8:f5:e3:ff:ce:6d:b6:96:e8:a2:c3:e6:60: 6c:f4:28:27:00:f9:ac:1a:42:6f:c6:66:c9:8d:eb: b8:b5:a6:9b:67:70:c5:a6:bd:dd:5f:3b:b5:b3:94: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B9:F1:6C:19:12:D9:2E:A5:EB:CE:57:ED:D5:B6:EE:9D:A9:D1:EF X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:bc:e6:58:fc:0f:b8:10:83:8d:5f:76:5f:34:35:3b:47:5c: e9:e5:bb:17:fa:87:92:5f:30:ed:1a:d2:b3:a8:95:2b:a9:99: 15:44:9d:e3:23:2a:2f:b2:63:0a:2a:1d:b3:ad:6a:7c:82:0d: ce:49:f7:44:ae:d2:5b:ed:71:ea:4e:2b:b6:3a:31:a1:06:85: e0:b6:fc:7d:81:35:63:21:72:77:af:5c:8f:13:7c:75:c5:25: 11:5f:97:9b:a1:9c:f8:51:ea:c1:aa:a7:a8:76:95:45:23:51: ae:5a:1d:e8:cf:c9:35:e8:4c:bf:ee:11:68:82:c0:0c:cd:cd: 27:3b:0c:9a:ce:62:8a:0b:de:2b:51:14:b0:e4:8e:03:b8:1f: 71:f5:e0:c2:b4:98:fc:7f:11:38:ce:58:b5:4e:a9:df:ec:39: 4c:24:99:9e:8d:a4:32:d3:7b:3d:39:e3:9c:23:32:6c:a5:0e: df:73:dc:9d:63:e0:7d:9d:c2:17:9b:50:b1:98:ea:23:f2:3c: 64:f1:88:26:86:c6:74:9a:3e:d4:c0:10:38:68:d1:63:ed:86: 8b:db:74:e9:61:ed:d1:d6:8a:4c:e1:d1:33:11:ec:de:08:46: 26:a6:2c:49:89:4c:7f:2d:32:15:8f:36:5a:e3:16:ef:32:e0: 3b:d8:0d:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNjAxMjUwNjQzMTZaFw0yNjAyMDEwNjQzMTZaMBgxFjAUBgNV BAMMDTY5NzViYjg0LTU1YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuwNdaMDuLgTLpLIGqQWQan29jF3rocRD3EZg44VZ+l6ivG6e7zZGzxBHsR5Vy cjKrCVXYLfer00XscNMVEC9wZTnXm8ai+JQG8PZcjsfVEEpIIeenJQ2xweyGiOPu TIWho5YrA4KP8VdkExVfUCueXpDj1SRnFZWOly/HFAAISmE07efnXHy8OTkoorIL 3zvTOstDJICJDeWzrSDgG5OJgdJBHhEt3DuveuRE5nJkmANXgTP20+sNgXUk2LgG 6Ewo2dQ/PZtpPgxgEpWnXn5lxfkV6PXj/85ttpboosPmYGz0KCcA+awaQm/GZsmN 67i1pptncMWmvd1fO7WzlLUVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVbnxbBkS 2S6l685X7dW27p2p0e8wHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz Qjg3LzIzRDE1MjhBQkNFMzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055 U1U3QXVKVDJ6dm5SYXFGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKG85lj8D7gQg41fdl80NTtHXOnluxf6h5JfMO0a0rOolSupmRVEneMj Ki+yYwoqHbOtanyCDc5J90Su0lvtcepOK7Y6MaEGheC2/H2BNWMhcnevXI8TfHXF JRFfl5uhnPhR6sGqp6h2lUUjUa5aHejPyTXoTL/uEWiCwAzNzSc7DJrOYooL3itR FLDkjgO4H3H14MK0mPx/ETjOWLVOqd/sOUwkmZ6NpDLTez0545wjMmylDt9z3J1j 4H2dwhebULGY6iPyPGTxiCaGxnSaPtTAEDho0WPthovbdOlh7dHWikzh0TMR7N4I RiamLEmJTH8tMhWPNlrjFu8y4DvYDTI= -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:06 2026 by rpki-client