This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier: 0X/KWRsnacYGbBlbyRkpjJKTaaMsjAHS44tz18AakUs=
Subject key identifier: 9C:16:A4:91:86:73:54:B9:49:F7:E7:FA:C7:A5:2D:4E:92:3F:71:12
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial: 0644
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number: 063C
Signing time: Thu 04 Dec 2025 21:27:34 +0000
Manifest this update: Thu 04 Dec 2025 21:27:34 +0000
Manifest next update: Thu 11 Dec 2025 21:27:34 +0000
Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: lnCFVZ5i3XgcoF4AJhL68iHg1WTxMp9OpCplxjhvOa8=)
2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: vz/od99V/qh8nLdVrGtgO/ikEdfCO+I8D/5B73OuzVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Validity
Not Before: Dec 4 21:27:34 2025 GMT
Not After : Dec 11 21:27:34 2025 GMT
Subject: CN=6931fcc6-d7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:17:cd:24:91:15:97:79:44:6e:01:16:4b:
55:7b:15:ea:cf:a5:8a:25:8c:32:eb:69:b3:fb:28:
42:6a:40:0b:5e:1c:27:50:db:51:f7:cc:7e:d9:cf:
40:99:a0:70:62:28:32:1e:f8:0a:ca:14:da:00:99:
44:45:50:70:34:ff:93:08:7c:e2:cd:c9:fd:c1:8d:
6b:b0:68:09:e9:c1:b6:07:63:c7:33:ff:01:4f:52:
b1:8f:3c:70:2a:1b:35:9e:9b:31:22:f6:ab:ca:d1:
b4:e9:79:71:da:06:75:ca:c0:0a:c1:f2:c3:d8:5d:
b5:30:b3:cb:8b:1a:52:cb:ef:16:67:8c:0b:59:c2:
9f:65:f3:80:85:88:2a:bd:a4:dd:86:d1:d2:e8:0a:
dd:a1:60:dc:37:0b:25:46:50:13:62:b9:d9:fb:38:
f8:cd:06:e4:b1:fd:69:1d:1f:e0:98:9c:69:07:d6:
54:d7:06:5d:9d:80:38:f5:f1:c5:6d:4a:42:cb:d5:
a2:04:ea:d4:3d:a1:34:97:05:d3:bf:6e:8a:e5:c7:
77:cf:b0:2a:39:54:5a:3d:4c:45:6d:d1:ba:a6:09:
66:a7:18:25:6f:95:da:d4:6c:24:69:72:12:f7:f8:
49:89:c9:bf:b2:63:ad:0c:3b:64:96:63:b9:75:ff:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:16:A4:91:86:73:54:B9:49:F7:E7:FA:C7:A5:2D:4E:92:3F:71:12
X509v3 Authority Key Identifier:
keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:4e:38:75:75:31:f6:2a:5d:88:a2:a4:a4:2e:42:ab:e2:
16:8f:90:39:ad:73:10:fd:fe:75:d2:37:bc:e5:af:a9:a4:f8:
17:1f:c1:b8:c5:ec:ac:72:d5:97:94:16:4f:0e:5c:6a:5f:b2:
dd:21:11:33:cd:af:6b:b4:d2:d7:68:e6:b4:c2:6d:cd:04:52:
07:13:4b:a5:49:fb:ba:26:f1:40:48:05:86:e3:20:f8:b0:0b:
2b:17:d4:67:ef:4a:f3:b3:4b:0c:38:34:18:ae:e6:66:e4:b2:
05:1c:ab:23:ef:51:85:45:6c:a2:44:69:93:b4:b7:c5:20:04:
aa:32:3a:b3:36:91:71:25:e7:9e:32:5a:1b:87:88:eb:3a:ce:
e4:1e:05:47:a9:48:f0:07:35:fe:55:5f:94:bb:e7:6b:48:e1:
a3:67:64:df:f0:8b:5c:47:6f:8d:9e:31:a5:da:68:b2:fa:21:
1e:b5:48:1f:c4:7d:1b:40:ab:e6:98:7b:07:92:55:1d:b9:40:
9d:3a:84:52:40:da:b8:d3:22:6a:16:7f:18:db:18:47:db:ca:
b8:36:07:8d:8c:98:db:6c:5c:43:29:5e:eb:8c:a1:47:88:45:
83:e6:e7:48:d0:24:f6:b7:53:6d:dd:12:31:38:79:3b:dd:94:
fa:6c:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:49 2025 by rpki-client