This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json) Hash identifier: eHEyQt+B/ndWpvmhNWMYdPoIxBvHr/0bWAGdEz1qbeY= Subject key identifier: 7D:B4:46:60:49:91:9D:62:2C:37:56:39:58:EB:6A:9D:E4:64:0A:80 Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft Manifest number: 0AC8 Signing time: Thu 04 Dec 2025 18:47:45 +0000 Manifest this update: Thu 04 Dec 2025 18:47:44 +0000 Manifest next update: Thu 11 Dec 2025 18:47:44 +0000 Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: EN2A6gF2QpJc77pxXu/VUxqGvFzdwcKt3xfWFWWTpOc=) 2: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: vbzoDXxoxDAXMA+SBS3V9UK64+8j7fYiBs+VYN+R5aY=) 3: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: 0+FYOd7cEHhPhl5/EXB24cdR/+U1VPktvi4vWKzamkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: Dec 4 18:47:44 2025 GMT Not After : Dec 11 18:47:44 2025 GMT Subject: CN=6931d750-83a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:bb:a1:cf:71:c2:2d:52:30:ff:86:69:ee: aa:47:7a:a3:2c:79:cd:22:14:6d:c0:6f:3e:05:38: f2:3f:ab:d9:25:f6:c4:57:f3:74:d2:8c:0d:52:70: 80:9b:2e:55:d6:00:a2:95:3f:2c:57:b8:a5:b0:62: 79:e7:d1:a1:2d:bf:0a:79:ea:40:66:1d:cd:f2:4d: ab:bf:50:e9:3b:84:c8:23:d1:9b:c3:13:78:a1:2b: 11:42:42:53:e4:a4:65:33:2a:5b:87:2a:9b:82:4c: f9:e1:23:93:84:bf:8a:61:2e:ac:3a:1a:36:5b:b3: 23:e5:7b:03:ce:e1:51:8d:13:53:6a:bc:c7:0a:59: 0a:e4:c1:d4:94:56:70:3e:9b:2c:d2:b0:56:d9:0f: 6a:68:66:0a:71:f0:7c:db:70:28:e5:e4:5b:d9:c9: f2:10:89:24:05:66:d9:09:ae:a2:17:fe:79:b5:7b: 05:8e:a9:b4:d6:b0:22:48:66:df:e8:27:a8:32:95: 5a:53:d0:45:a3:5f:08:62:c1:df:d0:c2:90:e3:96: ac:1f:cf:06:b3:dc:0f:12:61:65:1f:b9:21:93:81: 3d:b6:23:bc:b9:c7:d8:1a:68:92:63:89:f4:9f:10: 89:a9:b1:97:f0:4f:a8:db:aa:02:44:f4:a5:fa:5a: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B4:46:60:49:91:9D:62:2C:37:56:39:58:EB:6A:9D:E4:64:0A:80 X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5e:9b:79:f0:2d:e8:a3:8f:24:7f:75:61:fc:01:60:88:96: 63:0f:6b:fb:19:11:1d:0a:0e:45:eb:63:5e:6d:d4:6e:64:1b: ef:9e:bf:0c:bf:8f:e8:73:eb:9a:f0:cb:99:66:74:c7:ed:4f: 46:3e:f7:0a:68:aa:4a:f5:d5:3c:7d:47:07:43:54:22:9e:56: f9:1a:b7:f9:e7:b0:e2:11:ef:f5:46:9e:e8:1d:d8:2b:a3:1b: 52:5f:a7:30:ed:8e:b2:94:01:90:ed:89:66:b8:c8:13:a5:3a: 58:04:a5:4f:19:22:62:30:53:16:67:66:1b:87:52:8a:33:17: b3:3d:ee:f7:30:b0:0f:45:da:59:18:3b:c8:ff:03:87:4c:8b: 91:48:7e:bb:32:39:fd:f9:2d:b3:8a:f9:c0:57:f5:6f:55:3f: 80:a5:8d:c7:4a:f3:4c:dd:3f:15:b6:e8:60:ec:36:de:80:85: 58:18:70:64:56:41:8f:25:09:60:a5:da:ec:1e:37:fb:a1:ca: 10:98:dd:39:72:c4:e9:90:be:68:b5:e6:4e:29:41:82:b8:60: c0:7e:a8:48:e9:06:d5:cf:e5:8f:01:80:f3:d1:51:80:ec:e3: aa:d7:3c:dd:5c:cb:22:93:d9:58:bc:02:df:5c:b6:23:ca:7e: 11:46:db:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjUxMjA0MTg0NzQ0WhcNMjUxMjExMTg0NzQ0WjAYMRYwFAYD VQQDEw02OTMxZDc1MC04M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQG7oc9xwi1SMP+Gae6qR3qjLHnNIhRtwG8+BTjyP6vZJfbEV/N00owNUnCA my5V1gCilT8sV7ilsGJ559GhLb8KeepAZh3N8k2rv1DpO4TII9GbwxN4oSsRQkJT 5KRlMypbhyqbgkz54SOThL+KYS6sOho2W7Mj5XsDzuFRjRNTarzHClkK5MHUlFZw Ppss0rBW2Q9qaGYKcfB823Ao5eRb2cnyEIkkBWbZCa6iF/55tXsFjqm01rAiSGbf 6CeoMpVaU9BFo18IYsHf0MKQ45asH88Gs9wPEmFlH7khk4E9tiO8ucfYGmiSY4n0 nxCJqbGX8E+o26oCRPSl+lpXqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH20RmBJ kZ1iLDdWOVjrap3kZAqAMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ4Qy9BNzREQTc3MjY0QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQw MDlPUTlhQ3RFTFc4TmZWdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Xpt58C3oo48kf3Vh/AFgiJZjD2v7GREdCg5F62NebdRuZBvvnr8M v4/oc+ua8MuZZnTH7U9GPvcKaKpK9dU8fUcHQ1Qinlb5Grf557DiEe/1Rp7oHdgr oxtSX6cw7Y6ylAGQ7YlmuMgTpTpYBKVPGSJiMFMWZ2Ybh1KKMxezPe73MLAPRdpZ GDvI/wOHTIuRSH67Mjn9+S2zivnAV/VvVT+ApY3HSvNM3T8Vtuhg7DbegIVYGHBk VkGPJQlgpdrsHjf7ocoQmN05csTpkL5oteZOKUGCuGDAfqhI6QbVz+WPAYDz0VGA 7OOq1zzdXMsik9lYvALfXLYjyn4RRtvU -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:10 2025 by rpki-client