This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier: AVh06/9i0p01uOSfe74fuw0KUZjklcHNXSrZOg4dW2k=
Subject key identifier: 28:36:40:DD:D8:D4:B0:3C:7F:AE:ED:64:3E:B7:58:87:A1:9D:5E:DB
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial: 0645
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number: 063D
Signing time: Sat 06 Dec 2025 21:34:41 +0000
Manifest this update: Sat 06 Dec 2025 21:34:40 +0000
Manifest next update: Sat 13 Dec 2025 21:34:40 +0000
Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: Q+R+TY0/4VQ1jTavTzK6Q6tOkGXwD+0a9+0M8lpkF2E=)
2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: vz/od99V/qh8nLdVrGtgO/ikEdfCO+I8D/5B73OuzVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1605 (0x645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Validity
Not Before: Dec 6 21:34:40 2025 GMT
Not After : Dec 13 21:34:40 2025 GMT
Subject: CN=6934a171-66c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:39:6b:36:cc:34:4e:5a:9b:4d:cf:37:58:
9b:ff:86:30:5d:c5:57:bd:eb:2a:84:e0:28:ba:56:
10:b7:64:bd:61:59:be:8d:bf:8d:6d:52:da:f2:79:
d6:66:66:31:25:97:44:b9:4a:2e:e2:01:9c:d0:92:
7a:13:50:c9:34:78:fd:90:e4:c8:87:9e:2f:f5:a6:
b3:68:a3:7b:df:94:94:7f:25:76:ca:c5:20:82:60:
2f:fe:57:85:86:7e:11:4d:98:6b:0a:8b:81:21:a7:
e7:c2:b0:53:39:5c:62:da:d7:5b:3d:a3:5f:48:ac:
15:57:fa:2d:70:a8:1e:4f:56:99:38:20:36:4d:6c:
5c:e9:30:3f:08:49:99:b8:02:61:ce:92:10:94:7e:
bc:4d:90:fe:a7:c3:28:fe:e6:e9:97:27:73:50:fe:
f4:e7:27:b1:de:3e:52:b5:a8:0d:40:7a:d0:7c:e5:
c2:68:40:02:c3:6f:7d:f7:73:43:e9:b8:69:86:0b:
2b:18:40:fa:95:3d:5a:17:f5:b2:fe:35:4a:59:93:
ff:f9:82:b1:75:75:ff:5b:82:86:a9:6a:5a:c7:84:
07:39:34:71:b0:12:21:6f:11:2b:5c:47:4d:1c:db:
a7:63:49:8c:b0:75:64:83:91:14:9a:4d:3c:d2:51:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:40:DD:D8:D4:B0:3C:7F:AE:ED:64:3E:B7:58:87:A1:9D:5E:DB
X509v3 Authority Key Identifier:
keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:51:c1:a0:c5:2c:37:e0:a4:ce:54:a7:77:0b:d5:93:57:82:
67:5b:ee:62:61:fd:45:c0:61:89:25:61:7e:da:40:1a:11:f4:
96:05:ee:23:d3:3c:0c:3d:d8:cc:74:09:14:cc:75:49:05:31:
4d:06:c4:c3:53:5c:6c:49:b9:27:1e:c3:4e:77:19:01:f7:df:
4d:fd:b6:1e:0a:d0:b2:83:16:12:7d:85:21:1a:99:58:9b:3d:
a0:b3:ed:e2:ce:00:9c:2d:c7:79:e5:44:d6:f5:e6:07:b5:96:
8b:41:ff:b7:79:3e:9d:e6:95:23:e3:d4:b4:64:d0:43:c2:1d:
ce:e4:93:16:9d:a2:db:d5:81:84:39:88:f2:9a:ea:92:3a:77:
62:4b:61:62:49:83:b1:6a:22:ba:b2:e3:24:e5:a0:3b:7a:dc:
02:e0:20:ed:3f:25:61:ac:cb:08:ae:7a:9d:f5:e5:a4:e3:72:
03:0f:0d:be:d0:ba:d2:e8:37:64:4c:8b:b0:a2:99:f6:25:b6:
3f:35:6c:46:52:b6:c1:de:c5:4e:3d:ef:70:74:32:34:d1:c7:
b1:fc:4a:ee:da:ed:95:b2:0d:8f:4c:86:29:ed:7d:d5:ab:38:
4e:3e:25:e1:16:99:1e:13:a0:54:11:24:62:5e:de:8a:93:76:
9c:4d:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:39:06 2025 by rpki-client