This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: Txh9hM/GQ43iFQC/84IGEfbeudv4BFvez8R1Kd4eVlE= Subject key identifier: 2C:2E:63:DB:D1:26:05:70:2B:1C:40:93:11:92:94:AD:7C:CE:05:72 Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 397F Signing time: Sat 06 Dec 2025 14:33:16 +0000 Manifest this update: Sat 06 Dec 2025 14:33:16 +0000 Manifest next update: Sat 13 Dec 2025 14:33:16 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: PXgaLDtB/lAz/KhJP4um8UakrMeqW6j2MI1sE1JwD5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Dec 6 14:33:16 2025 GMT Not After : Dec 13 14:33:16 2025 GMT Subject: CN=69343eac-74e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:ec:fd:05:e8:8e:8c:51:11:91:50:14:99: 91:d2:b4:00:91:fa:53:68:b3:9a:f9:c5:ee:94:8a: 26:bc:4a:e8:15:dc:9f:be:b5:4d:7c:69:01:2e:a0: 77:19:38:fc:7d:c3:52:c4:a3:60:e8:fe:ae:00:84: 68:b6:cd:18:a0:85:a9:bd:87:ec:7f:77:35:b8:59: e6:cb:a8:b6:a4:6d:10:b8:b7:2a:77:52:bb:e7:b3: dc:7a:94:ff:80:52:ef:d5:50:5b:e5:ab:c3:9a:62: cf:c9:3a:65:40:58:c1:7e:6e:6a:df:e2:df:29:00: 4d:b5:28:e8:cc:30:6d:06:70:03:e2:14:90:f2:ba: e2:c8:42:79:6c:3f:79:d2:cc:ba:b7:9e:7e:a7:a4: 95:9c:02:d0:6a:62:38:9e:37:29:37:5c:fd:a0:aa: d7:e4:4e:f2:19:60:56:19:0b:09:c0:8f:d3:ee:78: 0a:3d:ce:e7:31:34:54:46:3c:b7:3e:14:c4:8a:d6: d8:de:f3:92:da:9d:a7:6b:fe:54:60:c1:d5:f2:1e: b4:2f:9b:f1:d5:3a:1f:67:9d:7a:45:89:09:7f:d3: 8c:8f:1b:75:c5:ff:3c:bd:9f:09:0f:17:c5:3a:d0: 63:51:4e:59:60:fc:68:bd:69:4a:5f:a7:1d:22:68: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:63:DB:D1:26:05:70:2B:1C:40:93:11:92:94:AD:7C:CE:05:72 X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cb:eb:ab:84:a5:e3:10:ba:7d:e8:71:ab:02:48:51:ed:0c: d2:e2:ed:f3:08:40:4c:f9:d3:1b:07:1a:3d:52:40:69:1e:b2: e4:e7:5a:73:15:7f:16:df:23:cf:b0:b7:65:13:d6:fc:1e:93: 12:39:77:7d:eb:11:61:02:c6:2c:a3:27:3a:bb:da:a8:ce:46: 11:b3:75:da:7b:af:48:d2:2b:d1:63:70:06:db:23:ef:b8:4b: e4:70:c5:a2:28:4f:cf:a0:3a:fd:cd:66:e6:d6:29:b9:9a:a0: 2d:a5:f2:56:42:c1:1a:2e:e6:74:4a:0a:0e:ee:f1:a1:cb:be: 56:41:22:cf:9d:c9:9c:64:20:87:13:4d:5c:30:b8:7b:30:72: ae:84:c3:8a:85:5a:d7:d1:9b:3a:95:79:9f:59:bd:4b:e2:78: c2:cb:46:9f:f7:e4:62:f6:87:34:03:b7:ec:ab:d5:19:ef:5f: 2a:b2:77:09:e6:6a:dd:c8:1f:72:52:7d:82:71:6d:55:59:1b: 5f:9d:73:e1:cf:09:23:d6:2d:12:c5:82:43:1c:e9:b4:fa:a7: 79:b4:e8:3c:87:ce:6b:a5:04:d5:7f:bb:b2:5e:41:ce:62:76: 8b:da:45:6a:33:43:60:b2:65:5c:06:af:bc:84:b8:20:88:e7: eb:de:78:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUxMjA2MTQzMzE2WhcNMjUxMjEzMTQzMzE2WjAYMRYwFAYD VQQDEw02OTM0M2VhYy03NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zrs/QXojoxREZFQFJmR0rQAkfpTaLOa+cXulIomvEroFdyfvrVNfGkBLqB3 GTj8fcNSxKNg6P6uAIRots0YoIWpvYfsf3c1uFnmy6i2pG0QuLcqd1K757PcepT/ gFLv1VBb5avDmmLPyTplQFjBfm5q3+LfKQBNtSjozDBtBnAD4hSQ8rriyEJ5bD95 0sy6t55+p6SVnALQamI4njcpN1z9oKrX5E7yGWBWGQsJwI/T7ngKPc7nMTRURjy3 PhTEitbY3vOS2p2na/5UYMHV8h60L5vx1TofZ516RYkJf9OMjxt1xf88vZ8JDxfF OtBjUU5ZYPxovWlKX6cdImj8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwuY9vR JgVwKxxAkxGSlK18zgVyMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4y+urhKXjELp96HGrAkhR7QzS4u3zCEBM+dMbBxo9UkBpHrLk51pz FX8W3yPPsLdlE9b8HpMSOXd96xFhAsYsoyc6u9qozkYRs3Xae69I0ivRY3AG2yPv uEvkcMWiKE/PoDr9zWbm1im5mqAtpfJWQsEaLuZ0SgoO7vGhy75WQSLPncmcZCCH E01cMLh7MHKuhMOKhVrX0Zs6lXmfWb1L4njCy0af9+Ri9oc0A7fsq9UZ718qsncJ 5mrdyB9yUn2CcW1VWRtfnXPhzwkj1i0SxYJDHOm0+qd5tOg8h85rpQTVf7uyXkHO YnaL2kVqM0NgsmVcBq+8hLggiOfr3nj9 -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:42 2025 by rpki-client