This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: OGwiSW4SroJnVISpT5q0Odr+0eFwufuUhLYVclVK3dc= Subject key identifier: E3:96:2A:C8:24:97:74:8B:05:E5:61:B7:17:1C:3E:8F:EC:1C:60:AB Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 06A7 Signing time: Thu 04 Dec 2025 21:08:12 +0000 Manifest this update: Thu 04 Dec 2025 21:08:11 +0000 Manifest next update: Thu 11 Dec 2025 21:08:11 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: ifgEQbjS7UfKCdP+XH0EE62CFukLAchuIWD8upY4g30=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: kyXa2/fOky6ixQEZzJ/YTQjRwQzmiBb1i8hW42gK6jE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Dec 4 21:08:11 2025 GMT Not After : Dec 11 21:08:11 2025 GMT Subject: CN=6931f83b-a9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:3b:d7:09:a8:c6:ca:36:3f:a8:4e:91:95: ee:8f:a8:b8:4d:a6:46:a1:fe:09:35:2a:f3:c7:49: c4:fa:21:76:15:12:c3:42:bb:3c:38:6a:71:24:f4: 09:e7:c1:70:74:93:73:24:6a:f8:b8:45:66:64:58: ec:ae:02:95:16:22:99:5a:71:c9:27:61:49:04:2a: 6d:25:89:b9:fd:a3:25:b2:8c:6a:71:72:43:2a:42: f1:1e:0d:93:f3:36:31:66:d2:3e:5e:82:dd:56:db: c2:02:b9:de:95:92:2c:01:42:81:a9:70:5a:52:aa: cf:bc:67:97:a0:e6:04:00:16:bb:a6:bf:0b:df:24: 50:17:59:2e:d6:80:72:6a:f6:97:11:c8:c0:0c:75: 45:e3:df:bf:27:f5:17:de:c7:58:4e:80:91:d2:1a: f4:14:b2:09:2d:15:0b:36:da:18:72:6a:86:3d:24: 2c:1d:a3:6b:69:df:b0:c7:98:9c:37:ec:df:c5:2f: d0:80:81:ca:9c:34:05:37:f8:58:d6:c1:52:ea:84: 8f:a8:da:1d:96:19:8e:65:ce:0a:cc:0f:c4:37:2c: c5:10:b6:c2:58:73:ab:6f:9f:f3:b2:22:c6:68:f6: ac:a3:c2:10:3f:3d:ae:f6:cf:0e:38:e1:39:d5:d1: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:96:2A:C8:24:97:74:8B:05:E5:61:B7:17:1C:3E:8F:EC:1C:60:AB X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:d8:18:9c:c3:44:66:59:cc:94:ba:f4:14:ac:54:6d:fb: 9d:55:f9:0f:76:6e:c2:b8:aa:70:dd:53:8f:1f:c0:34:03:b6: 7f:19:d5:18:9c:8a:b9:6b:88:7c:93:01:06:a3:d2:bd:49:8a: 76:75:30:b6:47:cb:8b:69:16:b4:f4:a5:96:15:f4:dd:ef:da: ef:81:61:0d:50:54:ea:2d:ea:bb:2b:0c:6e:32:a3:6e:cb:6a: 85:5c:0b:66:08:0a:97:40:9e:3c:bd:37:12:0a:ea:54:10:a0: f1:83:be:07:f9:70:6d:b1:52:dc:c7:0a:8f:ed:3f:62:36:be: 38:7d:12:97:a2:10:97:13:1d:d6:2f:b4:c7:f9:95:ff:39:53: 86:b4:4e:04:0d:b3:41:68:47:8a:18:3a:94:74:7a:4b:39:53: 9b:fa:91:3d:89:4d:a2:a1:f1:c6:0f:5a:7a:81:3e:15:5e:f6: 20:86:c1:db:e4:c6:40:93:cd:07:b2:50:fb:45:e2:04:40:fe: 9b:e6:ba:a7:af:ba:b7:f9:b8:be:13:58:8a:66:eb:8c:6d:4f: 87:3f:2f:33:30:dd:ac:f8:3a:10:46:e8:78:cd:85:3e:7c:69: 1f:13:54:79:19:4e:13:eb:3a:4a:29:26:95:57:31:6a:bc:b2: 3b:87:6b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUxMjA0MjEwODExWhcNMjUxMjExMjEwODExWjAYMRYwFAYD VQQDEw02OTMxZjgzYi1hOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD071wmoxso2P6hOkZXuj6i4TaZGof4JNSrzx0nE+iF2FRLDQrs8OGpxJPQJ 58FwdJNzJGr4uEVmZFjsrgKVFiKZWnHJJ2FJBCptJYm5/aMlsoxqcXJDKkLxHg2T 8zYxZtI+XoLdVtvCArnelZIsAUKBqXBaUqrPvGeXoOYEABa7pr8L3yRQF1ku1oBy avaXEcjADHVF49+/J/UX3sdYToCR0hr0FLIJLRULNtoYcmqGPSQsHaNrad+wx5ic N+zfxS/QgIHKnDQFN/hY1sFS6oSPqNodlhmOZc4KzA/ENyzFELbCWHOrb5/zsiLG aPaso8IQPz2u9s8OOOE51dEi+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOWKsgk l3SLBeVhtxccPo/sHGCrMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG3tgYnMNEZlnMlLr0FKxUbfudVfkPdm7CuKpw3VOPH8A0A7Z/GdUY nIq5a4h8kwEGo9K9SYp2dTC2R8uLaRa09KWWFfTd79rvgWENUFTqLeq7KwxuMqNu y2qFXAtmCAqXQJ48vTcSCupUEKDxg74H+XBtsVLcxwqP7T9iNr44fRKXohCXEx3W L7TH+ZX/OVOGtE4EDbNBaEeKGDqUdHpLOVOb+pE9iU2iofHGD1p6gT4VXvYghsHb 5MZAk80HslD7ReIEQP6b5rqnr7q3+bi+E1iKZuuMbU+HPy8zMN2s+DoQRuh4zYU+ fGkfE1R5GU4T6zpKKSaVVzFqvLI7h2um -----END CERTIFICATE-----Generated at Sat Dec 6 22:11:51 2025 by rpki-client