This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: zYVWHHxJgubb/HTrMRrLn7HnPrSSjuNUKRZwuI+N0BA= Subject key identifier: 44:FF:1F:25:89:CB:72:DF:2D:DB:35:6B:7C:8B:E8:E1:E9:92:35:E0 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 067F Signing time: Sat 06 Dec 2025 21:25:24 +0000 Manifest this update: Sat 06 Dec 2025 21:25:23 +0000 Manifest next update: Sat 13 Dec 2025 21:25:23 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: Vo6M9beZCNMP4cxKiY0aa0d01oNUvbvlUmgxNX8iv+o=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Dec 6 21:25:23 2025 GMT Not After : Dec 13 21:25:23 2025 GMT Subject: CN=69349f44-1cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:65:03:cb:a9:74:af:52:20:6a:a4:ec:f6: fb:25:2c:90:1b:31:ff:27:d9:b3:6d:d5:f8:ca:31: 89:8d:3b:20:ab:b6:aa:2a:1f:2b:6c:68:85:3c:ab: da:b1:2b:ff:8c:2c:53:1a:f7:60:96:89:4a:44:00: 5d:ed:2e:8e:d4:66:81:3b:02:35:3b:5a:3b:e1:72: c4:bf:df:5d:ca:7c:13:19:8f:09:c1:65:5d:f6:77: 02:9b:24:df:db:3c:d0:20:b5:8e:a5:56:4f:f8:3c: d3:ce:43:b1:f6:e2:39:d7:95:c2:0f:a3:3c:09:62: c3:98:c0:3b:2e:45:5a:2f:44:1d:70:d9:fa:20:48: 6b:22:a7:7f:0e:5e:12:88:4e:7d:32:b6:c2:ee:02: e7:0d:de:45:71:f8:ba:50:7b:9a:6b:8d:0e:5f:d8: bb:d6:15:65:56:2f:c8:c8:07:d8:5b:29:fb:ba:59: 30:ec:56:da:1a:e9:42:8e:e2:d7:27:55:fb:11:c6: 9f:c9:bf:dc:a3:89:4e:0f:bb:57:44:2e:ba:b6:2f: 0e:f2:b2:c9:f1:2d:23:1d:3e:ad:b8:eb:7e:9b:21: 3d:50:e4:9c:bd:6a:4e:00:4c:c5:4a:1a:6d:f3:f2: 16:cb:75:bb:02:44:6f:f2:9e:ef:5b:1e:6a:11:86: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FF:1F:25:89:CB:72:DF:2D:DB:35:6B:7C:8B:E8:E1:E9:92:35:E0 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:73:99:ef:18:6a:c4:9a:4e:5f:dc:0d:2b:a0:29:c9:f5:e0: 90:4a:ee:90:0c:24:35:d4:d2:9b:5d:03:bd:54:60:1f:bd:41: f5:e1:d6:19:a4:4e:d2:61:bf:7d:e4:7a:f9:16:55:da:df:e9: 12:21:c3:dc:0c:b1:f2:4e:7c:3a:4a:b5:ab:cc:d8:28:8d:e0: 9f:48:26:2e:6e:97:74:cb:39:2a:a3:f6:7b:be:07:69:12:d8: e2:a0:5d:62:e4:aa:bb:4a:f7:ff:15:6b:30:90:19:f5:41:8f: 54:95:81:6e:76:98:9c:74:4e:5c:39:e4:c2:37:98:56:d8:71: 21:be:60:d8:9c:16:dc:5f:34:38:95:97:2e:3d:d8:1d:37:60: 39:9e:d8:5c:71:d9:13:c2:e7:de:3c:e2:fe:02:59:84:fa:f6: 45:f1:7a:6b:bf:0c:f9:3b:db:74:4e:51:47:a6:e6:1b:86:56: ab:5f:37:0d:f4:66:42:a9:ef:4a:e1:13:89:59:0a:2f:6a:d1: f2:cd:1c:ab:2a:e3:ea:21:16:84:26:04:7b:2b:e9:eb:a6:08: 94:db:66:ec:98:fa:e6:70:63:24:b1:f3:5b:85:f6:28:9d:3b: 5a:2c:a9:61:bf:df:a9:a3:81:a8:1a:28:97:ba:fc:88:b4:c5: 5c:80:af:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUxMjA2MjEyNTIzWhcNMjUxMjEzMjEyNTIzWjAYMRYwFAYD VQQDEw02OTM0OWY0NC0xY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ahlA8updK9SIGqk7Pb7JSyQGzH/J9mzbdX4yjGJjTsgq7aqKh8rbGiFPKva sSv/jCxTGvdglolKRABd7S6O1GaBOwI1O1o74XLEv99dynwTGY8JwWVd9ncCmyTf 2zzQILWOpVZP+DzTzkOx9uI515XCD6M8CWLDmMA7LkVaL0QdcNn6IEhrIqd/Dl4S iE59MrbC7gLnDd5Fcfi6UHuaa40OX9i71hVlVi/IyAfYWyn7ulkw7FbaGulCjuLX J1X7Ecafyb/co4lOD7tXRC66ti8O8rLJ8S0jHT6tuOt+myE9UOScvWpOAEzFShpt 8/IWy3W7AkRv8p7vWx5qEYaUsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET/HyWJ y3LfLds1a3yL6OHpkjXgMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8c5nvGGrEmk5f3A0roCnJ9eCQSu6QDCQ11NKbXQO9VGAfvUH14dYZ pE7SYb995Hr5FlXa3+kSIcPcDLHyTnw6SrWrzNgojeCfSCYubpd0yzkqo/Z7vgdp EtjioF1i5Kq7Svf/FWswkBn1QY9UlYFudpicdE5cOeTCN5hW2HEhvmDYnBbcXzQ4 lZcuPdgdN2A5nthccdkTwufePOL+AlmE+vZF8Xprvwz5O9t0TlFHpuYbhlarXzcN 9GZCqe9K4ROJWQovatHyzRyrKuPqIRaEJgR7K+nrpgiU22bsmPrmcGMksfNbhfYo nTtaLKlhv9+po4GoGiiXuvyItMVcgK8q -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:26 2025 by rpki-client