This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: 8qFhgkShrQfLsHHMY/FSeQcVYzwyKu9DndEkTg7q1Vk= Subject key identifier: AB:2B:D7:A9:13:78:BD:4F:79:64:C7:E1:2D:2D:33:8D:0E:00:32:80 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D23 Signing time: Thu 04 Dec 2025 17:32:49 +0000 Manifest this update: Thu 04 Dec 2025 17:32:48 +0000 Manifest next update: Thu 11 Dec 2025 17:32:48 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: 8KOc/QOk5arTDO2iw5f8XQxBuUpquOOpAy8QagaBOMI=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3380 (0xd34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Dec 4 17:32:48 2025 GMT Not After : Dec 11 17:32:48 2025 GMT Subject: CN=6931c5c0-2003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:12:af:c3:0b:67:db:a3:0a:ed:d5:49:5f: 00:b8:57:cc:2e:05:a4:f2:8f:6b:29:f1:33:bb:f4: 3f:3b:3f:5a:f0:fa:c4:81:47:25:b3:06:96:29:a9: 58:26:e1:d7:95:95:5d:13:72:f7:74:63:8b:46:52: 4e:18:95:c0:8d:b9:65:24:28:47:78:aa:e1:94:35: 00:3e:c6:76:28:65:87:98:56:1b:7f:e4:67:40:06: 18:d7:00:59:65:6a:f9:68:d7:90:14:c3:48:c3:65: 3b:3e:58:85:f2:5e:b8:50:1f:d6:e2:03:5a:fc:25: 56:77:3a:5b:80:68:2e:ad:f8:84:3e:31:c1:b1:da: 86:8b:2b:90:82:04:4d:50:59:03:df:be:2d:3a:54: 3e:72:04:4e:1a:49:8a:05:9f:e4:67:0e:9f:d5:a8: 7c:c9:64:7f:d4:c2:5a:d9:57:11:9f:02:d0:ce:43: b4:a5:95:8c:3c:10:d1:80:de:05:6b:e5:9e:d5:05: 12:5d:cf:2f:a2:ea:01:cb:8d:da:71:da:ac:5a:ef: ec:f4:94:ad:b2:34:6e:07:95:b0:89:45:fa:7d:db: 8c:36:e0:fb:65:7e:e0:4c:0e:fa:e5:32:bd:a6:61: 9a:d0:22:99:80:e7:56:fd:cd:78:94:eb:f7:bb:47: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2B:D7:A9:13:78:BD:4F:79:64:C7:E1:2D:2D:33:8D:0E:00:32:80 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c0:4a:0d:f9:f9:e0:96:9a:76:b9:23:e9:eb:c9:85:85:bd: db:a3:91:1e:6d:f5:7b:5c:de:1c:0a:78:45:04:2f:7e:f6:14: ae:b7:77:15:c2:d5:60:d0:d1:be:58:dd:ca:3d:f7:24:1b:c2: 9d:26:ac:d8:b7:58:e6:79:ec:73:c2:54:51:c2:ac:69:f8:5d: 10:0f:d4:b6:8b:83:50:80:7f:df:e4:59:3f:a9:ca:74:73:7e: 28:2b:16:f4:36:5e:83:bb:bd:c8:72:46:90:dd:f6:be:23:4f: 62:f5:86:35:5b:66:99:1c:aa:2f:0d:20:cc:9f:8a:ee:ee:f4: 60:7d:e1:95:ac:07:6b:e5:4d:c5:0a:54:dd:c5:c1:1b:2f:95: 17:30:18:0a:f2:11:27:f9:3b:18:1f:96:7a:cf:6c:7a:18:66: d9:07:2a:9a:38:c2:fe:5d:ff:8d:af:b8:77:89:98:52:68:1d: 0f:7a:3c:e3:3e:ff:4e:61:3c:cd:3d:1c:ca:66:69:83:53:96: 64:d3:a7:cb:ab:41:68:d7:c1:61:ea:c1:ed:09:53:80:0d:cd: 1f:91:39:c1:60:a2:c3:f5:2c:27:89:39:71:39:2e:d3:c6:8b: e7:ea:da:60:20:bd:fc:95:82:8f:68:1f:5f:99:80:92:8b:78: dd:d6:9d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUxMjA0MTczMjQ4WhcNMjUxMjExMTczMjQ4WjAYMRYwFAYD VQQDEw02OTMxYzVjMC0yMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytcSr8MLZ9ujCu3VSV8AuFfMLgWk8o9rKfEzu/Q/Oz9a8PrEgUclswaWKalY JuHXlZVdE3L3dGOLRlJOGJXAjbllJChHeKrhlDUAPsZ2KGWHmFYbf+RnQAYY1wBZ ZWr5aNeQFMNIw2U7PliF8l64UB/W4gNa/CVWdzpbgGgurfiEPjHBsdqGiyuQggRN UFkD374tOlQ+cgROGkmKBZ/kZw6f1ah8yWR/1MJa2VcRnwLQzkO0pZWMPBDRgN4F a+We1QUSXc8vouoBy43acdqsWu/s9JStsjRuB5WwiUX6fduMNuD7ZX7gTA765TK9 pmGa0CKZgOdW/c14lOv3u0fP8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsr16kT eL1PeWTH4S0tM40OADKAMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3wEoN+fnglpp2uSPp68mFhb3bo5EebfV7XN4cCnhFBC9+9hSut3cV wtVg0NG+WN3KPfckG8KdJqzYt1jmeexzwlRRwqxp+F0QD9S2i4NQgH/f5Fk/qcp0 c34oKxb0Nl6Du73IckaQ3fa+I09i9YY1W2aZHKovDSDMn4ru7vRgfeGVrAdr5U3F ClTdxcEbL5UXMBgK8hEn+TsYH5Z6z2x6GGbZByqaOML+Xf+Nr7h3iZhSaB0Pejzj Pv9OYTzNPRzKZmmDU5Zk06fLq0Fo18Fh6sHtCVOADc0fkTnBYKLD9SwniTlxOS7T xovn6tpgIL38lYKPaB9fmYCSi3jd1p0c -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:26 2025 by rpki-client