This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: Pj4OEWAtGnau6f3UTDGqgdNxf/CQXigcA1o1mJ+kY7Y= Subject key identifier: 2B:14:65:BD:6A:16:9A:D7:F4:19:CD:4F:36:FE:5F:BB:68:88:78:39 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 02D2 Signing time: Thu 04 Dec 2025 23:43:38 +0000 Manifest this update: Thu 04 Dec 2025 23:43:38 +0000 Manifest next update: Thu 11 Dec 2025 23:43:38 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: Dtq5ddIr2KnMVKRM4uIGpLi4eiTiz5TD3KeEZakgjkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Dec 4 23:43:38 2025 GMT Not After : Dec 11 23:43:38 2025 GMT Subject: CN=69321caa-68e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:1d:d1:9b:c7:2b:d0:a2:7d:ee:01:0c:78: ba:d5:e9:13:af:a6:68:58:3c:c5:e6:b4:da:b9:3d: 21:49:a4:bc:66:e6:cc:0b:ec:a0:5f:a0:36:9f:bf: 5a:c8:0e:b9:f9:85:aa:e4:93:f7:9f:13:8b:2b:78: e2:0a:84:d7:5e:02:88:03:0b:6c:95:05:c0:9d:cd: 8c:5f:bc:dd:c6:e1:5a:c3:7d:8b:9a:2f:5a:ae:79: a5:e7:eb:40:3f:60:fa:c7:82:a1:a2:4b:6f:ee:72: f4:a4:78:41:42:42:51:2c:d0:c3:a3:aa:78:b3:28: 26:32:15:43:26:e7:db:3d:48:af:66:b1:73:56:3f: 81:c8:80:0d:ac:ad:0c:56:87:be:36:2c:20:f7:22: a3:85:9d:3e:44:fe:c2:51:81:54:b3:f3:2a:8a:bf: 31:9d:34:e6:5f:6a:5d:94:4d:8d:88:2a:77:42:1f: 91:38:04:7e:33:a5:41:e9:94:c2:b3:13:42:1a:45: ac:bd:6f:b9:9d:ce:c8:51:f9:9b:8d:33:45:d5:d6: 91:18:90:ad:a8:7f:74:ca:e6:0f:c2:32:6a:0d:d0: f7:e2:74:c5:ec:8b:03:74:ca:4a:a1:54:14:a8:3a: 56:3d:71:78:14:8b:42:52:10:52:39:82:91:f4:00: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:14:65:BD:6A:16:9A:D7:F4:19:CD:4F:36:FE:5F:BB:68:88:78:39 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f5:24:e7:d3:22:c6:b1:24:29:3a:9d:4a:86:d9:a0:6b:96: 47:d4:7e:3d:7c:08:f8:47:7e:28:76:f9:84:f9:e9:45:38:26: 63:47:5e:d6:99:f6:71:97:ff:24:09:63:b3:07:5b:6e:f2:f5: 43:37:3f:90:de:b1:27:3a:df:d1:30:7a:06:77:6a:2f:26:47: 6d:21:7e:8c:0c:1d:2a:b7:3b:7e:b2:02:21:0c:0a:4e:cb:89: c2:dc:df:34:a7:ca:aa:f8:75:9d:ee:a3:62:fb:65:45:9a:72: d7:fb:19:8f:d5:be:3b:bf:4e:51:e6:c6:c9:b5:6e:9f:3a:74: 4d:38:c6:99:8c:b7:23:8c:f6:45:2c:9a:68:76:5a:eb:38:e5: 32:9f:d7:43:d6:3c:9a:05:3f:7d:5e:d8:ba:53:01:86:e0:9e: 48:5f:c8:c3:98:e1:0a:9a:36:57:07:ca:79:4d:fa:ec:b5:13: c0:2a:83:71:b3:13:72:81:2d:b6:6b:54:c6:a5:ed:46:ec:eb: ad:e4:2f:50:15:e1:4c:77:9b:0e:17:a8:c8:e1:35:99:9a:17: ec:ed:53:40:d8:02:5f:0b:4d:bf:e5:e6:d2:5f:df:c7:9f:bb: a8:72:64:14:e3:03:61:5b:74:65:fb:98:d8:4b:90:3d:0f:3d: 9d:22:f6:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUxMjA0MjM0MzM4WhcNMjUxMjExMjM0MzM4WjAYMRYwFAYD VQQDEw02OTMyMWNhYS02OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYsd0ZvHK9Cife4BDHi61ekTr6ZoWDzF5rTauT0hSaS8ZubMC+ygX6A2n79a yA65+YWq5JP3nxOLK3jiCoTXXgKIAwtslQXAnc2MX7zdxuFaw32Lmi9arnml5+tA P2D6x4Khoktv7nL0pHhBQkJRLNDDo6p4sygmMhVDJufbPUivZrFzVj+ByIANrK0M Voe+Niwg9yKjhZ0+RP7CUYFUs/Mqir8xnTTmX2pdlE2NiCp3Qh+ROAR+M6VB6ZTC sxNCGkWsvW+5nc7IUfmbjTNF1daRGJCtqH90yuYPwjJqDdD34nTF7IsDdMpKoVQU qDpWPXF4FItCUhBSOYKR9ACHbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsUZb1q FprX9BnNTzb+X7toiHg5MB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC59STn0yLGsSQpOp1Khtmga5ZH1H49fAj4R34odvmE+elFOCZjR17W mfZxl/8kCWOzB1tu8vVDNz+Q3rEnOt/RMHoGd2ovJkdtIX6MDB0qtzt+sgIhDApO y4nC3N80p8qq+HWd7qNi+2VFmnLX+xmP1b47v05R5sbJtW6fOnRNOMaZjLcjjPZF LJpodlrrOOUyn9dD1jyaBT99Xti6UwGG4J5IX8jDmOEKmjZXB8p5TfrstRPAKoNx sxNygS22a1TGpe1G7Out5C9QFeFMd5sOF6jI4TWZmhfs7VNA2AJfC02/5ebSX9/H n7uocmQU4wNhW3Rl+5jYS5A9Dz2dIvYr -----END CERTIFICATE-----Generated at Sat Dec 6 20:09:21 2025 by rpki-client