This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: 4K5KxPzDnxa1rOiH2o/HYoZxf6IrlswAc2fJm8L8RJY= Subject key identifier: 98:1F:EA:64:7E:93:A9:D5:D1:C2:FD:41:BF:8E:26:C7:63:10:90:FB Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: AC Signing time: Sun 21 Dec 2025 05:16:01 +0000 Manifest this update: Sun 21 Dec 2025 05:16:00 +0000 Manifest next update: Sun 28 Dec 2025 05:16:00 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: TKO38rIFFNRlR+WbAZ2vNi4JzFBcjepCxzf+zHszJxY=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: Dec 21 05:16:00 2025 GMT Not After : Dec 28 05:16:00 2025 GMT Subject: CN=69478291-0e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:1c:ba:00:0c:77:fd:58:67:82:76:69:12: 1b:dc:bd:c0:d4:4c:4c:ff:9e:8e:3e:3b:3a:7d:e5: 5c:bc:17:e5:d7:77:f3:d9:30:2c:93:8a:28:ca:f3: a5:d7:1f:fa:35:9d:70:5d:e6:50:0d:41:0f:6f:34: fd:84:bc:66:3b:84:88:fe:44:c1:0c:19:05:aa:44: f7:2f:96:b5:a8:d5:82:4c:95:9d:fd:2b:b5:f2:57: aa:de:4b:3c:8e:b1:33:67:53:2f:cf:49:55:86:65: 4c:bb:e2:54:a6:1a:d9:e2:9e:50:4d:90:8f:d5:54: f4:90:99:a2:5b:ee:c8:4e:e8:fd:84:0b:a0:25:25: 85:1b:00:b5:77:a0:cf:2e:b2:37:fd:9e:c2:e3:f6: fb:a2:d0:24:7e:2f:b9:6a:98:22:a3:f5:7e:43:6a: 93:79:57:1c:a2:54:c8:36:ed:41:f1:88:05:c5:b4: b8:41:ac:f0:15:76:c0:73:54:e2:2a:75:9e:b5:f7: c8:59:8d:b0:1f:e5:13:2e:d7:41:df:d0:ff:3f:54: 6f:33:c3:58:c9:e9:45:c9:66:a6:d6:b2:83:f8:c5: c4:49:95:ad:2f:fe:fd:a0:0d:fe:32:e6:02:67:85: 25:83:43:aa:e2:0e:c9:3a:11:6a:e0:7f:f1:98:bc: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1F:EA:64:7E:93:A9:D5:D1:C2:FD:41:BF:8E:26:C7:63:10:90:FB X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:30:cc:59:f0:63:56:ba:54:2d:7e:62:e5:63:b5:09:6a:14: db:ba:a5:65:8c:35:3e:39:bc:c1:a3:33:9b:d6:9e:f3:8d:26: 79:1e:02:5a:73:5f:15:cc:3c:88:d3:a9:c9:6d:96:2f:7a:59: cc:e4:0d:7d:3b:17:7a:f8:da:6a:10:52:99:22:c1:76:2f:5b: 70:f0:16:47:f5:33:c5:0a:7f:00:6a:cf:30:3e:8c:30:c4:15: b9:c4:87:65:15:0d:e6:a7:94:54:2b:a7:f1:d5:a6:6a:f8:15: 63:40:1c:ff:89:af:d3:03:b3:a3:98:42:20:d7:be:6c:5e:99: cc:57:89:e5:12:34:8e:f8:46:e3:09:d5:88:7f:86:c3:20:64: 61:7f:b3:b7:cf:92:4f:59:8f:e2:44:e8:cd:a3:34:87:93:c6: d3:97:97:6a:1c:29:6b:15:81:68:24:cf:95:fa:5e:de:64:44: ce:6b:47:15:72:d5:ef:e5:f3:50:43:ab:c7:8d:bb:9b:cd:98: f5:65:c8:c8:55:b9:86:0d:2c:9f:84:77:da:04:79:20:4b:e9: b5:b0:44:8b:11:47:60:77:cd:de:04:32:44:09:90:86:ff:bd: 13:75:df:72:2f:11:b6:1a:62:25:c6:1c:9f:d7:f4:46:c4:14: ae:46:2a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1 RjA3MDJBQzgwHhcNMjUxMjIxMDUxNjAwWhcNMjUxMjI4MDUxNjAwWjAYMRYwFAYD VQQDDA02OTQ3ODI5MS0wZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfMcugAMd/1YZ4J2aRIb3L3A1ExM/56OPjs6feVcvBfl13fz2TAsk4ooyvOl 1x/6NZ1wXeZQDUEPbzT9hLxmO4SI/kTBDBkFqkT3L5a1qNWCTJWd/Su18leq3ks8 jrEzZ1Mvz0lVhmVMu+JUphrZ4p5QTZCP1VT0kJmiW+7ITuj9hAugJSWFGwC1d6DP LrI3/Z7C4/b7otAkfi+5apgio/V+Q2qTeVccolTINu1B8YgFxbS4QazwFXbAc1Ti KnWetffIWY2wH+UTLtdB39D/P1RvM8NYyelFyWam1rKD+MXESZWtL/79oA3+MuYC Z4Ulg0Oq4g7JOhFq4H/xmLyA3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgf6mR+ k6nV0cL9Qb+OJsdjEJD7MB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0 OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzNS85OTI3Nzg0NkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JD MXBieVIzQVZSMXhmQndLc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIMMxZ8GNWulQtfmLlY7UJahTbuqVljDU+ObzBozOb1p7zjSZ5HgJa c18VzDyI06nJbZYvelnM5A19Oxd6+NpqEFKZIsF2L1tw8BZH9TPFCn8Aas8wPoww xBW5xIdlFQ3mp5RUK6fx1aZq+BVjQBz/ia/TA7OjmEIg175sXpnMV4nlEjSO+Ebj CdWIf4bDIGRhf7O3z5JPWY/iROjNozSHk8bTl5dqHClrFYFoJM+V+l7eZETOa0cV ctXv5fNQQ6vHjbubzZj1ZcjIVbmGDSyfhHfaBHkgS+m1sESLEUdgd83eBDJECZCG /70Tdd9yLxG2GmIlxhyf1/RGxBSuRioe -----END CERTIFICATE-----Generated at Sun Dec 21 19:22:23 2025 by rpki-client