This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier: 33kPp3b9ZZuOJ86awYAvPiR4sEq0jxm/xCgNpwnctEI=
Subject key identifier: B6:0E:52:12:AF:03:3D:EF:72:8E:B2:2D:47:83:06:A9:58:87:8F:DA
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number: 0171
Signing time: Fri 05 Dec 2025 02:05:27 +0000
Manifest this update: Fri 05 Dec 2025 02:05:26 +0000
Manifest next update: Fri 12 Dec 2025 02:05:26 +0000
Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: nYIvr6vjBWulQg0q5ncwsWr6P3tpQwUk+ZVI+aYn6T4=)
2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=)
3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Dec 5 02:05:26 2025 GMT
Not After : Dec 12 02:05:26 2025 GMT
Subject: CN=69323de6-c152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:7e:32:3b:b9:62:0f:0f:27:eb:fd:97:b4:
76:ea:9e:c2:8d:a1:a9:4e:b3:07:1a:8b:ca:ae:18:
8c:b0:e2:17:b0:10:2f:70:5c:c9:22:c8:b7:18:86:
7a:93:a1:d4:39:f5:da:3f:ea:1d:21:7e:9f:9c:7b:
a1:4b:59:bc:ce:a1:32:f3:62:b9:ed:87:71:41:59:
d0:ec:a3:a4:50:70:cc:9c:99:a7:a2:de:27:d4:36:
81:aa:b7:c1:13:7a:9b:06:f0:40:bc:68:19:a0:b7:
a0:0b:a4:8e:22:a7:49:62:82:79:61:df:71:7c:f7:
c7:c3:5c:d3:22:60:d1:98:b1:8c:c4:f2:1a:05:4d:
f5:cd:67:2a:44:0d:31:ce:e2:06:4d:9e:68:4f:4d:
2d:8b:b0:d8:5f:35:0c:bc:9d:06:35:42:fb:e9:e9:
70:ef:ea:0f:22:59:bb:24:cf:c6:41:d4:58:f2:58:
a0:b7:a1:6a:5e:c3:d7:58:83:5e:b2:3a:74:11:df:
d1:2c:d2:ef:2b:e0:5e:50:9d:df:c2:27:a2:b0:45:
c3:bf:77:39:6f:90:95:41:b5:77:ed:37:db:f9:14:
f0:0c:fc:a6:41:21:fc:0c:4e:34:63:e9:f5:65:93:
f9:32:57:c7:6f:25:b8:c3:5a:1b:ed:c2:9f:43:18:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:52:12:AF:03:3D:EF:72:8E:B2:2D:47:83:06:A9:58:87:8F:DA
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:02:2e:80:25:a0:74:66:0a:a7:d5:c2:8f:bc:b0:c4:cc:80:
50:0b:95:9b:17:da:82:0d:b5:dc:47:34:12:b7:f1:9b:9e:1d:
b0:80:fd:70:bf:d4:0d:d6:dd:e2:ca:3d:c2:37:3a:48:c7:99:
47:78:28:51:ac:36:dc:70:74:75:38:5b:49:e2:92:e9:d6:fc:
fd:e0:7e:fb:a0:cd:94:72:51:ff:8f:3e:23:5a:15:25:bb:b4:
d4:02:28:e1:f8:17:e9:ff:3b:21:2d:33:42:de:c5:92:1e:f4:
02:e4:c7:28:61:df:bd:32:56:f1:f3:75:a5:75:33:f9:59:ee:
46:d3:0b:51:48:ea:59:35:29:5f:ba:f0:5e:eb:7e:b3:c2:e7:
2a:95:20:bb:0e:ca:b6:d6:c4:a5:ba:fb:ea:81:e7:41:c3:0c:
24:ab:f6:04:0a:07:f6:fe:39:c2:17:58:40:e9:55:f5:97:d3:
c9:41:ca:94:dd:d9:16:9f:7a:cc:21:b3:13:f5:b8:76:53:d8:
a5:28:a4:a0:bc:8c:87:af:eb:c2:7e:be:d6:56:35:de:d6:5e:
86:29:80:00:f4:6b:0f:c1:52:d2:f0:4b:27:99:f0:7c:ed:93:
f7:28:ba:48:05:14:67:da:06:6a:1f:e3:3c:a6:af:3f:6d:73:
77:05:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:12:41 2025 by rpki-client