This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier: r9TASQ7i/ec3VeY16/qXCU+M2Av3ryfJ7d1yX8lYXZs=
Subject key identifier: 91:29:B5:C3:37:A2:5C:20:FB:12:3A:EA:25:72:5E:4D:CA:59:C6:EA
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial: 105B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number: 103C
Signing time: Thu 04 Dec 2025 17:00:18 +0000
Manifest this update: Thu 04 Dec 2025 17:00:18 +0000
Manifest next update: Thu 11 Dec 2025 17:00:18 +0000
Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: FfizyyCoJt8IcE2dO6oViOKDC7/ygkwN3ziWkDW5ZE0=)
2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=)
3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=)
4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4187 (0x105b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Validity
Not Before: Dec 4 17:00:18 2025 GMT
Not After : Dec 11 17:00:18 2025 GMT
Subject: CN=6931be22-1a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:b0:00:d6:4d:5d:22:02:62:fc:55:8b:88:
15:f5:fb:bd:a9:07:f2:10:a0:62:40:13:ee:9a:ab:
f3:6d:2e:29:65:e2:08:bc:5d:f6:6c:a6:39:75:32:
ef:9a:50:e5:c4:e8:8d:c3:b0:61:e5:dd:1c:30:cd:
ce:e1:1e:d0:33:bb:11:9b:03:c6:95:21:c4:0a:35:
e7:ae:91:40:05:e0:dd:e8:e4:e7:26:22:da:c9:09:
7b:86:07:f4:98:11:11:6c:77:a0:94:fa:ec:48:b8:
9f:74:1f:e0:a3:2a:f6:43:87:e1:c6:a0:46:32:8b:
5c:4c:53:d8:2a:55:77:ee:fb:9b:88:79:6f:9f:6b:
2d:e1:86:60:5e:8f:af:91:73:89:2c:96:95:23:c2:
d0:70:76:40:5e:df:1d:ef:a2:29:80:72:39:09:08:
90:e4:a2:8d:c3:4c:a7:75:fb:d6:95:b3:6f:3f:b1:
da:18:63:ad:b3:1f:20:2f:9a:da:4a:69:93:7d:e3:
34:41:dc:20:fc:36:50:a9:1b:2e:6c:f5:33:f5:03:
b0:e2:c4:27:81:23:0c:3d:9e:00:4a:86:89:96:79:
62:46:fe:60:08:55:bb:fb:77:29:36:46:08:24:a9:
7f:7c:96:5c:c1:71:df:f0:e2:36:fe:ff:8c:7e:03:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:B5:C3:37:A2:5C:20:FB:12:3A:EA:25:72:5E:4D:CA:59:C6:EA
X509v3 Authority Key Identifier:
keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:5b:c7:60:3f:7b:e3:f0:ed:f8:42:a0:1d:27:49:43:5b:8b:
8b:dd:1a:20:aa:58:f8:ea:75:19:60:33:66:a2:b1:7e:d9:3c:
f3:d3:61:9a:38:3e:51:50:ea:38:82:79:49:bd:66:0e:47:7c:
80:94:ee:57:91:7b:74:03:d3:05:aa:1e:8a:4a:c6:99:e2:68:
3c:77:3e:1e:3e:8f:ca:53:26:1f:65:c2:55:6d:20:3c:02:45:
a9:a6:03:63:97:ea:72:7d:73:84:27:f7:79:e2:2f:f5:8f:bf:
e8:aa:33:8b:4a:a5:e5:eb:7c:72:93:f5:7a:19:6e:a1:6a:95:
33:89:c1:81:89:64:ab:16:d8:d3:3a:92:ea:85:c3:70:f1:db:
5e:a8:ce:c8:b5:b3:e0:1c:db:b7:c7:08:3b:94:b2:0b:6f:59:
06:d9:f9:7e:78:e0:f4:24:d0:67:ad:c8:43:e7:a5:87:fa:1a:
ca:78:19:9e:20:28:93:19:e0:ea:a1:c5:48:a8:50:70:a9:fa:
24:0e:61:d5:f2:a8:cb:b4:b3:cc:84:9b:93:9a:2e:b3:74:4d:
a6:80:26:02:60:2f:1f:46:07:98:8a:0a:24:a2:71:4e:77:ab:
df:e3:68:82:82:b8:42:b7:46:77:31:09:02:8a:b5:fe:c8:88:
f2:ec:97:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz
RTdGQUVCOUUwHhcNMjUxMjA0MTcwMDE4WhcNMjUxMjExMTcwMDE4WjAYMRYwFAYD
VQQDEw02OTMxYmUyMi0xYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4JqwANZNXSICYvxVi4gV9fu9qQfyEKBiQBPumqvzbS4pZeIIvF32bKY5dTLv
mlDlxOiNw7Bh5d0cMM3O4R7QM7sRmwPGlSHECjXnrpFABeDd6OTnJiLayQl7hgf0
mBERbHeglPrsSLifdB/goyr2Q4fhxqBGMotcTFPYKlV37vubiHlvn2st4YZgXo+v
kXOJLJaVI8LQcHZAXt8d76IpgHI5CQiQ5KKNw0yndfvWlbNvP7HaGGOtsx8gL5ra
SmmTfeM0Qdwg/DZQqRsubPUz9QOw4sQngSMMPZ4ASoaJlnliRv5gCFW7+3cpNkYI
JKl/fJZcwXHf8OI2/v+MfgOAFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEptcM3
olwg+xI66iVyXk3KWcbqMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx
RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx
Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABW8dgP3vj8O34QqAdJ0lDW4uL3Rogqlj46nUZYDNmorF+2Tzz02Ga
OD5RUOo4gnlJvWYOR3yAlO5XkXt0A9MFqh6KSsaZ4mg8dz4ePo/KUyYfZcJVbSA8
AkWppgNjl+pyfXOEJ/d54i/1j7/oqjOLSqXl63xyk/V6GW6hapUzicGBiWSrFtjT
OpLqhcNw8dteqM7ItbPgHNu3xwg7lLILb1kG2fl+eOD0JNBnrchD56WH+hrKeBme
ICiTGeDqocVIqFBwqfokDmHV8qjLtLPMhJuTmi6zdE2mgCYCYC8fRgeYigokonFO
d6vf42iCgrhCt0Z3MQkCirX+yIjy7JfY
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:53 2025 by rpki-client