This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: 59dt8FeTp0GusdzoKx8k2TzVuOJaTtcDtQst0ExNg34= Subject key identifier: 67:6F:29:7E:DF:EB:26:44:DB:01:2B:7C:41:67:89:51:87:87:D0:02 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: 0134 Signing time: Fri 05 Dec 2025 02:37:31 +0000 Manifest this update: Fri 05 Dec 2025 02:37:31 +0000 Manifest next update: Fri 12 Dec 2025 02:37:31 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: /U/H+WXYtPCaNHLiEeMcv4fiulzjNAJ9kdUDjd79Dvk=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: hnnfq71rK1ZIuAmUqIiiCmmEhX9P+SlsIzqCbG4sw9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Dec 5 02:37:31 2025 GMT Not After : Dec 12 02:37:31 2025 GMT Subject: CN=6932456b-b039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:41:02:3f:66:ca:92:ce:e7:4f:ce:9e:5b: 4f:42:70:f4:e8:8e:6d:b2:e4:85:ee:4e:e4:1c:00: 68:cd:0b:db:64:f0:d8:ce:c7:86:ab:32:bb:26:37: 60:ad:6b:a0:10:48:3b:ce:a9:62:00:3d:66:b4:b0: 31:34:bb:30:5a:ba:94:1d:98:06:2c:0a:1b:40:fd: af:3d:4d:fe:17:81:41:4f:6d:17:d1:08:27:da:33: 92:fa:3b:36:a8:47:02:b0:b8:cf:47:ad:9e:c8:a8: ca:6f:1f:02:93:5b:ec:46:58:02:55:ae:7e:c7:15: d0:82:1c:6b:98:9e:76:5e:03:75:48:2b:68:44:70: e5:f6:d0:eb:b1:fe:fd:db:5f:dc:9f:1a:b5:85:80: 8e:5b:1d:9e:0b:51:8f:84:c9:a7:ba:5f:e1:27:eb: c7:8b:04:0b:3a:66:b1:8a:83:95:6c:6b:0d:cb:c6: 0f:7c:c7:ae:62:ee:8c:d4:29:01:54:20:43:48:cc: 90:73:e6:d6:9b:7d:85:52:a0:bd:8b:13:78:a2:02: 61:a8:ce:cd:02:3d:92:96:7f:86:09:42:de:ba:cb: 56:0b:7f:4c:78:a2:52:71:d9:05:b6:e1:30:a0:29: fb:34:69:62:09:ea:c2:c6:d6:91:48:46:d7:40:62: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:29:7E:DF:EB:26:44:DB:01:2B:7C:41:67:89:51:87:87:D0:02 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:25:37:75:94:e1:4b:82:4b:52:e2:6f:01:79:5f:eb:91:33: 84:6e:96:9c:2c:5b:2f:93:4e:6c:04:97:d8:a4:d6:23:b2:06: 9b:c3:6a:cb:e1:27:55:bc:5f:8f:6a:92:29:09:29:82:bb:0e: 1d:e6:ad:df:23:5f:e3:48:94:db:07:17:7d:56:18:8b:e9:7b: 3f:8e:f7:97:dc:f2:02:94:b2:df:9f:a4:3f:f7:0d:2e:62:5e: 60:a2:3b:c5:d9:4c:4d:0b:95:29:82:39:03:ca:fe:89:c4:8a: d8:68:4d:f9:ca:bd:aa:35:c4:d2:ec:fc:c4:e4:d5:c1:29:8d: a6:09:24:4f:a9:6c:53:06:c6:9e:0f:52:d7:66:60:57:12:0c: 80:0f:cb:ed:0d:b5:b5:e4:0b:1f:41:d2:e8:df:1b:73:70:10: 0c:a5:bf:3d:f5:33:dc:1f:e3:23:65:0d:80:e5:c7:ed:9c:2b: 17:27:f0:cf:56:63:84:14:02:5f:03:16:09:e4:b0:22:82:a9: 76:8b:1a:43:f2:70:f2:bd:5b:c0:49:e9:73:ac:1c:a1:e6:8f: d3:66:2a:54:cf:bc:89:dc:6e:92:c4:10:e3:25:60:98:c1:0c: 15:c0:3d:10:f9:87:33:9c:be:48:8e:39:1c:c4:7f:51:b4:a8: a0:72:13:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjUxMjA1MDIzNzMxWhcNMjUxMjEyMDIzNzMxWjAYMRYwFAYD VQQDEw02OTMyNDU2Yi1iMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHdBAj9mypLO50/OnltPQnD06I5tsuSF7k7kHABozQvbZPDYzseGqzK7Jjdg rWugEEg7zqliAD1mtLAxNLswWrqUHZgGLAobQP2vPU3+F4FBT20X0Qgn2jOS+js2 qEcCsLjPR62eyKjKbx8Ck1vsRlgCVa5+xxXQghxrmJ52XgN1SCtoRHDl9tDrsf79 21/cnxq1hYCOWx2eC1GPhMmnul/hJ+vHiwQLOmaxioOVbGsNy8YPfMeuYu6M1CkB VCBDSMyQc+bWm32FUqC9ixN4ogJhqM7NAj2Sln+GCULeustWC39MeKJScdkFtuEw oCn7NGliCerCxtaRSEbXQGJcgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdvKX7f 6yZE2wErfEFniVGHh9ACMB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbJTd1lOFLgktS4m8BeV/rkTOEbpacLFsvk05sBJfYpNYjsgabw2rL 4SdVvF+PapIpCSmCuw4d5q3fI1/jSJTbBxd9VhiL6Xs/jveX3PIClLLfn6Q/9w0u Yl5gojvF2UxNC5UpgjkDyv6JxIrYaE35yr2qNcTS7PzE5NXBKY2mCSRPqWxTBsae D1LXZmBXEgyAD8vtDbW15AsfQdLo3xtzcBAMpb899TPcH+MjZQ2A5cftnCsXJ/DP VmOEFAJfAxYJ5LAigql2ixpD8nDyvVvASelzrByh5o/TZipUz7yJ3G6SxBDjJWCY wQwVwD0Q+YcznL5IjjkcxH9RtKigchNL -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:38 2025 by rpki-client