This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: vfQFA+76/Wh3WTVmFDQTco3JKTg9v2g/46cMCQoTvvI= Subject key identifier: 7F:CF:B1:A5:7C:7A:13:01:5F:F2:DE:AB:14:FF:70:F9:1D:DE:F0:0F Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 1063 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 1044 Signing time: Sat 20 Dec 2025 17:08:26 +0000 Manifest this update: Sat 20 Dec 2025 17:08:26 +0000 Manifest next update: Sat 27 Dec 2025 17:08:26 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: NtQi9mitFpEchKK/3/4fkm8nknuptoLWxPedYI7bjDU=) 2: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=) 3: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=) 4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4195 (0x1063) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Dec 20 17:08:26 2025 GMT Not After : Dec 27 17:08:26 2025 GMT Subject: CN=6946d80a-2d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:27:84:1e:3b:a6:81:58:4b:49:bc:5b:cb: 1e:b7:c5:36:d8:e8:0d:71:70:a5:da:02:5d:16:e2: a1:38:3f:bf:48:6f:24:f4:f0:4e:5c:91:15:ec:f2: a2:6a:52:42:a6:6b:eb:98:01:86:2b:12:62:c4:ed: 1c:7a:ee:e8:94:44:60:85:83:da:4a:64:c2:00:a7: d9:4b:1e:97:3b:b8:2b:74:65:f3:54:0d:ac:b4:e7: 36:b2:c5:02:0c:a1:de:ee:02:9b:b3:5a:36:c5:ad: 9c:9d:4e:0b:23:23:9a:4d:9c:dc:73:5a:f9:83:26: 79:4c:e9:b4:da:23:2f:64:52:3a:47:7f:66:d3:a9: 45:44:cb:1e:62:c4:ed:c6:53:9a:45:79:d0:39:7a: f5:40:1a:50:f6:19:3e:4b:c0:1c:10:c7:81:5d:62: 7b:b2:ab:5c:ff:2c:ba:db:93:a6:3c:8b:ab:74:a8: af:c2:26:1c:7e:70:71:59:aa:2e:b0:fd:b7:9e:77: 2f:5d:25:7f:44:6f:72:a6:f3:46:dc:39:e1:1a:1a: e5:01:81:c6:fe:3b:fd:9a:da:be:20:2f:2d:88:bd: ca:05:3d:42:2a:f2:69:89:80:54:33:c3:b1:ac:d7: 8e:e9:39:8c:a0:71:ff:00:ad:3f:63:ca:73:ae:8a: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CF:B1:A5:7C:7A:13:01:5F:F2:DE:AB:14:FF:70:F9:1D:DE:F0:0F X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0f:07:7e:91:cd:c2:fe:e0:eb:c5:15:20:8b:9f:50:31:1e: 37:0c:77:84:d9:64:08:db:ac:8c:dd:fa:8e:1b:ec:98:33:8d: d9:1e:4d:06:7e:68:e1:45:f4:52:6d:1b:b3:55:ae:c4:cb:2c: 5e:23:12:62:74:a4:6c:c7:09:fa:aa:0e:52:fb:8c:bc:9f:21: 9f:ce:ba:30:eb:44:3d:0a:e6:68:2e:35:8a:a0:b3:cf:dc:77: d7:26:10:a7:b0:d0:14:49:95:ad:ab:9d:5e:b6:8e:5a:2e:23: f0:e2:0f:78:e8:0f:7c:86:f2:ce:15:11:1d:b7:03:22:b8:40: 20:58:cb:20:c9:f8:a6:2b:ad:ee:37:ca:08:89:86:94:46:58: 3c:e7:b0:5b:b1:dd:79:04:5c:91:ab:aa:80:22:d3:d2:11:1e: 1a:83:a0:af:40:68:fb:65:e5:b2:cd:36:78:9d:b9:a1:d2:22: b9:8a:78:91:78:f9:7c:ca:d6:b7:ed:59:09:22:ea:88:0e:66: f3:5e:2d:c2:43:80:98:68:1a:ea:82:f8:10:fc:59:93:9b:a4: e0:88:6b:10:0b:d4:5e:25:b7:b6:b7:70:36:62:ed:06:de:d2: 68:3e:78:fe:cd:fe:6b:be:24:c8:fe:52:2b:94:4b:15:e3:7c: eb:be:3c:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjUxMjIwMTcwODI2WhcNMjUxMjI3MTcwODI2WjAYMRYwFAYD VQQDDA02OTQ2ZDgwYS0yZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGknhB47poFYS0m8W8set8U22OgNcXCl2gJdFuKhOD+/SG8k9PBOXJEV7PKi alJCpmvrmAGGKxJixO0ceu7olERghYPaSmTCAKfZSx6XO7grdGXzVA2stOc2ssUC DKHe7gKbs1o2xa2cnU4LIyOaTZzcc1r5gyZ5TOm02iMvZFI6R39m06lFRMseYsTt xlOaRXnQOXr1QBpQ9hk+S8AcEMeBXWJ7sqtc/yy625OmPIurdKivwiYcfnBxWaou sP23nncvXSV/RG9ypvNG3DnhGhrlAYHG/jv9mtq+IC8tiL3KBT1CKvJpiYBUM8Ox rNeO6TmMoHH/AK0/Y8pzroq6kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/PsaV8 ehMBX/LeqxT/cPkd3vAPMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdDwd+kc3C/uDrxRUgi59QMR43DHeE2WQI26yM3fqOG+yYM43ZHk0G fmjhRfRSbRuzVa7EyyxeIxJidKRsxwn6qg5S+4y8nyGfzrow60Q9CuZoLjWKoLPP 3HfXJhCnsNAUSZWtq51eto5aLiPw4g946A98hvLOFREdtwMiuEAgWMsgyfimK63u N8oIiYaURlg857Bbsd15BFyRq6qAItPSER4ag6CvQGj7ZeWyzTZ4nbmh0iK5iniR ePl8yta37VkJIuqIDmbzXi3CQ4CYaBrqgvgQ/FmTm6TgiGsQC9ReJbe2t3A2Yu0G 3tJoPnj+zf5rviTI/lIrlEsV43zrvjyi -----END CERTIFICATE-----Generated at Sun Dec 21 11:23:41 2025 by rpki-client