This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft File: Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json) Hash identifier: Qou+yL5//jcElUZyAA0PWXavfeqLa3uLEuMTn61OG1c= Subject key identifier: 18:4D:63:22:A6:B4:A6:0F:56:83:DF:FE:53:DA:F2:C9:89:E1:72:0E Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft Manifest number: E0 Signing time: Sun 07 Dec 2025 03:48:13 +0000 Manifest this update: Sun 07 Dec 2025 03:48:12 +0000 Manifest next update: Sun 14 Dec 2025 03:48:12 +0000 Files and hashes: 1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: icmplGEmDDNWsJJzPvT3YXra0nOZWhdnq+APxdr3LIM=) 2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: VYuqdxkeY8VDCaP9z9fc7NoqICt3B9Gb1p23SFkZpM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Validity Not Before: Dec 7 03:48:12 2025 GMT Not After : Dec 14 03:48:12 2025 GMT Subject: CN=6934f8fd-c15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:7b:c7:8f:db:1b:9c:f8:eb:53:15:bc:a1: 18:f7:ca:2c:dd:0d:43:55:04:e5:b3:a7:51:cd:db: c8:d0:8e:2b:52:ad:2b:a5:57:ef:7a:5d:41:1d:71: a0:8d:6e:0c:5b:ab:99:a3:cd:95:d5:ee:0f:43:28: 41:72:78:ae:96:69:2d:be:5c:e3:3c:13:e3:f7:ac: bd:35:67:e1:fa:2e:64:41:a5:5e:bf:0c:c9:68:2b: 08:b2:7c:8e:a9:85:8d:27:41:bb:bb:a5:c2:43:06: 4a:0d:45:8c:5c:4c:da:17:b5:0e:05:37:d5:1b:71: d6:5f:ef:b0:2f:fc:63:e1:55:a9:63:6c:5b:75:21: 8e:33:af:bd:47:6a:27:62:76:38:85:a7:b6:a6:82: e4:00:77:47:ab:52:76:6b:9e:7d:44:c6:14:ce:e3: 55:f6:8d:43:e1:47:7e:77:41:77:99:01:c1:0a:97: 4a:08:2c:89:0f:66:0f:4a:54:8d:1d:ba:92:a2:9a: c3:3c:21:d3:ae:7e:f8:65:7a:12:99:19:0b:38:77: 02:f3:02:e7:8a:a1:7e:d6:d7:60:a6:72:72:98:a5: 72:be:e6:2f:0d:b8:a5:6b:ba:f8:53:53:0c:9e:74: 47:bc:8a:30:d8:1d:bf:70:9f:b7:b2:f7:e6:bd:f7: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4D:63:22:A6:B4:A6:0F:56:83:DF:FE:53:DA:F2:C9:89:E1:72:0E X509v3 Authority Key Identifier: keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:be:42:c8:80:ba:f8:1b:77:9e:d4:f1:31:4c:83:3b:ec:e3: 9c:ac:3e:c5:ef:37:0c:7d:5c:cf:3e:df:bf:3c:17:88:8f:ef: dc:8c:17:dd:f6:97:44:63:e6:be:e5:cd:bc:d0:77:ba:52:d3: 52:7e:b2:80:e1:59:93:64:2b:76:cb:57:e5:47:3a:9c:76:6f: 1d:19:0a:0c:1c:59:2b:d5:74:18:b4:6c:1d:bb:d4:30:6c:34: 58:80:e5:e7:c5:eb:4d:d9:8c:fa:ad:f6:0c:e7:1d:ea:8c:f0: df:60:c9:98:02:21:a8:5a:e5:c6:aa:77:0e:44:de:c9:14:41: 1c:b8:6a:d3:a3:d7:c5:95:54:0c:a4:83:f2:31:31:c0:cf:1a: 44:da:54:68:f4:dd:9f:aa:a5:dc:17:ff:56:1b:2c:e7:9d:70: 48:e6:98:f0:29:36:39:3a:52:18:3a:39:50:28:1f:42:1d:4b: e8:8a:54:d4:0c:8d:fd:ba:43:f4:e2:83:52:bc:82:28:29:e9: e3:3a:2a:d4:79:f4:71:9a:8a:b8:02:fe:11:83:8d:4a:07:d4: 65:12:e9:ee:77:27:6c:65:92:4e:f7:b7:e5:11:00:f7:6f:f1: 68:ba:af:6b:30:86:f2:44:da:b7:8c:31:26:fd:13:0b:38:1a: 41:b1:58:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKDJCM0RCODVFRjk1MjIzOEQxOTJEQ0YxNzBFRTZCRUIx QzhEQjAzQTkwHhcNMjUxMjA3MDM0ODEyWhcNMjUxMjE0MDM0ODEyWjAYMRYwFAYD VQQDEw02OTM0ZjhmZC1jMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmop7x4/bG5z461MVvKEY98os3Q1DVQTls6dRzdvI0I4rUq0rpVfvel1BHXGg jW4MW6uZo82V1e4PQyhBcniulmktvlzjPBPj96y9NWfh+i5kQaVevwzJaCsIsnyO qYWNJ0G7u6XCQwZKDUWMXEzaF7UOBTfVG3HWX++wL/xj4VWpY2xbdSGOM6+9R2on YnY4hae2poLkAHdHq1J2a559RMYUzuNV9o1D4Ud+d0F3mQHBCpdKCCyJD2YPSlSN HbqSoprDPCHTrn74ZXoSmRkLOHcC8wLniqF+1tdgpnJymKVyvuYvDbila7r4U1MM nnRHvIow2B2/cJ+3svfmvfeLFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhNYyKm tKYPVoPf/lPa8smJ4XIOMB8GA1UdIwQYMBaAFCs9uF75UiONGS3PFw7mvrHI2wOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FMTg3MTc3Njg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0MFpMYzhYRHVhLXNjamJB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t6MjRYdmxTSTQwWkxjOFhEdWEtc2NqYkE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FMTg3MTc3Njg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0 MFpMYzhYRHVhLXNjamJBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwvkLIgLr4G3ee1PExTIM77OOcrD7F7zcMfVzPPt+/PBeIj+/cjBfd 9pdEY+a+5c280He6UtNSfrKA4VmTZCt2y1flRzqcdm8dGQoMHFkr1XQYtGwdu9Qw bDRYgOXnxetN2Yz6rfYM5x3qjPDfYMmYAiGoWuXGqncORN7JFEEcuGrTo9fFlVQM pIPyMTHAzxpE2lRo9N2fqqXcF/9WGyznnXBI5pjwKTY5OlIYOjlQKB9CHUvoilTU DI39ukP04oNSvIIoKenjOirUefRxmoq4Av4Rg41KB9RlEunudydsZZJO97flEQD3 b/Fouq9rMIbyRNq3jDEm/RMLOBpBsVjc -----END CERTIFICATE-----Generated at Sun Dec 7 21:36:14 2025 by rpki-client