This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: 9+VYOi7YFmT4W/JC10pUpM4HidjV4Km8cDzbzJ0Da/k= Subject key identifier: C2:C0:C5:8B:28:1E:D1:A0:40:69:C6:8B:1F:7F:59:85:B1:0C:72:D9 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0495 Signing time: Sat 06 Dec 2025 22:45:07 +0000 Manifest this update: Sat 06 Dec 2025 22:45:06 +0000 Manifest next update: Sat 13 Dec 2025 22:45:06 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: RJI9Hotw01FLrmod6PDCevLRxAukIuVktsKGsXOy8xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Dec 6 22:45:06 2025 GMT Not After : Dec 13 22:45:06 2025 GMT Subject: CN=6934b1f2-e804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:cf:81:cf:29:25:b3:fb:f9:4c:89:24:4f: 04:0f:48:35:e8:51:33:0d:d0:4a:1b:b0:cc:64:7b: 6a:69:6e:c6:0b:31:1a:9d:f2:f7:da:b0:13:84:6a: eb:2e:61:3e:7c:0a:10:bb:47:64:6f:76:a8:6b:f2: a4:4a:29:a4:9e:6d:07:03:01:08:f6:82:8a:77:b7: 77:ca:a0:cc:67:39:b1:38:f3:ca:79:f9:d0:9f:5c: 92:cd:f5:eb:54:a2:0c:e4:ab:b1:a9:dc:8d:45:a6: 7d:52:35:5f:e1:4d:61:6f:95:95:d3:90:7b:c0:d2: 60:2e:92:cc:46:8c:56:e0:dd:40:7d:8d:8b:7e:5f: ca:f3:5b:1e:b6:30:ba:49:b6:20:4d:80:35:03:86: 47:e4:08:e4:8b:48:30:a8:de:f2:96:d2:e7:5f:8c: 50:46:76:f3:02:14:d9:ba:d7:44:71:1b:3f:0a:30: f3:81:96:f4:ee:7d:7c:66:91:b7:bb:99:47:2c:a7: 63:6a:5e:19:78:06:af:63:8d:a9:cd:fb:9f:43:a9: 50:66:8b:ae:bf:a9:4c:b6:1d:1d:96:16:2d:87:25: 76:5d:62:ca:0b:f3:d0:c7:f8:13:57:38:5c:de:9a: 3f:f9:05:5f:0b:65:15:54:c9:b0:96:86:53:21:a7: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C0:C5:8B:28:1E:D1:A0:40:69:C6:8B:1F:7F:59:85:B1:0C:72:D9 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e5:e4:2e:72:03:7f:aa:16:22:51:7e:87:5d:49:4f:c2:35: 2e:8e:62:1f:d5:43:4b:d2:a7:3f:0c:8e:f6:10:87:9c:72:7e: 79:d3:f0:8b:b6:77:1e:04:1d:9b:a7:a6:68:46:6a:59:e4:ed: 8f:29:16:22:b5:c8:c4:3b:04:09:87:d4:41:47:7b:3a:74:44: 9c:ad:f6:b6:b3:df:ef:5e:72:af:8e:89:de:c6:8c:9a:7c:ff: 85:17:08:8c:fd:b6:88:9d:ce:01:1f:8f:43:57:ea:48:c6:56: f6:ca:85:d2:65:a4:7e:2f:44:f2:81:d8:13:54:81:d9:40:a3: e8:6e:89:59:3b:db:a9:fa:ab:cb:e3:92:f7:44:9d:1e:9d:50: 6a:66:17:3b:6c:d6:cf:6d:30:71:84:1d:f3:d9:26:59:5c:46: ea:6b:62:83:8f:c7:11:de:33:8a:9f:89:f4:e7:60:47:02:e4: c6:bf:02:5e:75:42:9b:04:0c:a1:47:80:c7:2d:f3:a1:9d:79: 5f:76:04:1c:59:f5:0f:21:f2:6f:4b:4f:57:73:65:27:c7:79: 7b:1a:76:ea:03:34:f3:84:9d:90:15:58:cf:62:fc:08:04:e0: 40:a0:6c:e6:38:dd:a8:3f:fb:be:83:35:51:ca:c8:ea:5a:7e: cb:26:32:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUxMjA2MjI0NTA2WhcNMjUxMjEzMjI0NTA2WjAYMRYwFAYD VQQDEw02OTM0YjFmMi1lODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkzPgc8pJbP7+UyJJE8ED0g16FEzDdBKG7DMZHtqaW7GCzEanfL32rAThGrr LmE+fAoQu0dkb3aoa/KkSimknm0HAwEI9oKKd7d3yqDMZzmxOPPKefnQn1ySzfXr VKIM5KuxqdyNRaZ9UjVf4U1hb5WV05B7wNJgLpLMRoxW4N1AfY2Lfl/K81setjC6 SbYgTYA1A4ZH5Ajki0gwqN7yltLnX4xQRnbzAhTZutdEcRs/CjDzgZb07n18ZpG3 u5lHLKdjal4ZeAavY42pzfufQ6lQZouuv6lMth0dlhYthyV2XWLKC/PQx/gTVzhc 3po/+QVfC2UVVMmwloZTIafPrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLAxYso HtGgQGnGix9/WYWxDHLZMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ5eQucgN/qhYiUX6HXUlPwjUujmIf1UNL0qc/DI72EIeccn550/CL tnceBB2bp6ZoRmpZ5O2PKRYitcjEOwQJh9RBR3s6dEScrfa2s9/vXnKvjonexoya fP+FFwiM/baInc4BH49DV+pIxlb2yoXSZaR+L0TygdgTVIHZQKPobolZO9up+qvL 45L3RJ0enVBqZhc7bNbPbTBxhB3z2SZZXEbqa2KDj8cR3jOKn4n052BHAuTGvwJe dUKbBAyhR4DHLfOhnXlfdgQcWfUPIfJvS09Xc2Unx3l7GnbqAzTzhJ2QFVjPYvwI BOBAoGzmON2oP/u+gzVRysjqWn7LJjJx -----END CERTIFICATE-----Generated at Sun Dec 7 02:56:49 2025 by rpki-client