This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: Z3Nr7ulVfvNJfgK9PJ6fNTU7pGsW0xpYM3qoC8DeNww= Subject key identifier: A1:9E:C6:88:0D:B0:EB:D3:5B:35:63:EE:E8:C2:D3:17:86:6F:D7:CF Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 0178 Signing time: Fri 05 Dec 2025 01:59:41 +0000 Manifest this update: Fri 05 Dec 2025 01:59:40 +0000 Manifest next update: Fri 12 Dec 2025 01:59:40 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: ZxnN0iugUOEW9TjefHfFuB8hrgEekdvteYeaMeHdzcc=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: BrMg7LC27FVuPN/a8T84kbw3q38OJLbwQWRqwjiM6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: Dec 5 01:59:40 2025 GMT Not After : Dec 12 01:59:40 2025 GMT Subject: CN=69323c8c-ca3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:20:75:c8:7f:6a:e8:8b:b6:8d:35:58:58: c4:5f:8b:93:4f:88:47:40:d8:46:f3:08:b0:cb:94: 96:e1:ea:b7:60:0c:33:97:1e:3a:b8:94:38:c1:9b: e6:df:f2:eb:fd:ef:8c:44:61:f8:f1:6f:1a:fa:25: e1:47:8f:65:f5:ed:f2:56:e2:9c:a0:a5:78:fb:8c: 23:5e:89:dd:1e:47:60:3d:ef:ca:f3:ff:a6:62:27: 14:68:b4:6d:2a:6e:ed:d5:8f:43:b0:a8:4c:a9:ab: 6e:d0:03:5c:91:b5:16:d5:5b:03:11:9e:a5:50:55: 29:9f:34:df:5e:64:10:80:b4:87:73:64:0f:ea:8a: 25:6a:a5:ca:5f:56:3c:d3:ac:b5:cc:2e:82:50:98: a1:8f:de:8e:05:9c:a0:79:8a:d6:90:c3:c2:c8:0b: 05:07:6f:4a:45:da:dd:6d:61:a4:e0:e6:bd:01:ff: 8f:0e:af:1c:37:1b:90:4e:d5:23:30:1d:5d:af:52: 3e:2c:87:36:d7:4f:7a:04:f9:58:7f:71:49:4f:6d: 79:7d:d0:fa:b5:17:94:bf:e6:e5:a8:46:78:0b:b3: 49:81:cd:3e:41:58:07:e8:00:12:e4:5b:d6:9e:5d: dc:8d:19:7d:cb:94:35:ec:3d:bb:f9:57:ef:0e:f8: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:C6:88:0D:B0:EB:D3:5B:35:63:EE:E8:C2:D3:17:86:6F:D7:CF X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7a:98:0b:21:cd:d4:ba:7f:9e:80:83:fd:0a:65:34:bb:4c: 9d:df:cd:61:0a:01:bb:b1:bd:e3:11:d0:f1:f0:bb:d8:ca:b7: d5:7d:33:19:f9:8e:9e:d6:70:0d:d5:6f:cd:a8:af:91:24:6e: b4:8c:03:3d:5e:60:c2:e7:4c:ea:1e:96:fe:c8:ff:1e:83:a5: 03:a6:46:a8:c3:10:20:af:87:e1:cc:bc:28:ab:3c:11:d3:c9: 27:8f:29:27:14:9e:31:f9:dc:f8:b2:99:a5:7a:bf:6f:75:6f: 0f:2f:fd:68:a0:8a:06:e9:1a:11:2d:44:f9:21:ff:e4:b9:e2: d3:d2:e8:91:41:9e:a2:09:a0:df:fc:72:76:4b:b3:f3:ed:4d: 46:38:16:28:bf:06:b1:aa:14:49:13:f4:36:77:da:76:82:c6: 70:04:6d:cc:d8:5d:fd:2e:1f:e6:27:e6:83:4d:c4:26:3c:56: 15:6a:66:4a:c7:21:50:97:c3:de:4d:e5:03:4e:46:78:46:14: 70:bf:46:1f:59:eb:69:ca:9e:a6:81:3e:2d:34:a0:2e:cc:70: f6:85:23:58:bd:50:19:58:c9:46:ab:b1:4f:ec:ee:8d:25:4d: 15:26:e1:a7:c2:e1:56:fe:b4:ef:0b:97:59:3b:08:b8:41:dc: f9:8e:94:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjUxMjA1MDE1OTQwWhcNMjUxMjEyMDE1OTQwWjAYMRYwFAYD VQQDEw02OTMyM2M4Yy1jYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszAgdch/auiLto01WFjEX4uTT4hHQNhG8wiwy5SW4eq3YAwzlx46uJQ4wZvm 3/Lr/e+MRGH48W8a+iXhR49l9e3yVuKcoKV4+4wjXondHkdgPe/K8/+mYicUaLRt Km7t1Y9DsKhMqatu0ANckbUW1VsDEZ6lUFUpnzTfXmQQgLSHc2QP6oolaqXKX1Y8 06y1zC6CUJihj96OBZygeYrWkMPCyAsFB29KRdrdbWGk4Oa9Af+PDq8cNxuQTtUj MB1dr1I+LIc21096BPlYf3FJT215fdD6tReUv+blqEZ4C7NJgc0+QVgH6AAS5FvW nl3cjRl9y5Q17D27+VfvDvj0iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGexogN sOvTWzVj7ujC0xeGb9fPMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiepgLIc3Uun+egIP9CmU0u0yd381hCgG7sb3jEdDx8LvYyrfVfTMZ +Y6e1nAN1W/NqK+RJG60jAM9XmDC50zqHpb+yP8eg6UDpkaowxAgr4fhzLwoqzwR 08knjyknFJ4x+dz4spmler9vdW8PL/1ooIoG6RoRLUT5If/kueLT0uiRQZ6iCaDf /HJ2S7Pz7U1GOBYovwaxqhRJE/Q2d9p2gsZwBG3M2F39Lh/mJ+aDTcQmPFYVamZK xyFQl8PeTeUDTkZ4RhRwv0YfWetpyp6mgT4tNKAuzHD2hSNYvVAZWMlGq7FP7O6N JU0VJuGnwuFW/rTvC5dZOwi4Qdz5jpRQ -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:04 2025 by rpki-client