This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json) Hash identifier: meZlX3qCGwaDga1Y7YjbyKdRkfG7vxemcjs5aULVzDQ= Subject key identifier: 69:DC:C7:A5:0E:8C:01:AF:9D:FB:B2:9E:D8:1A:57:98:28:AB:01:73 Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft Manifest number: 0163 Signing time: Sun 07 Dec 2025 02:25:36 +0000 Manifest this update: Sun 07 Dec 2025 02:25:36 +0000 Manifest next update: Sun 14 Dec 2025 02:25:36 +0000 Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: UNw8NfqmxcZdBbdUHPdve1sE9bUr5wB6Bd6Xq4SmVYs=) 2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: qIW59Vu75lotEAXz2XFEI0+6mfrqPvKAPSHChiVChpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Validity Not Before: Dec 7 02:25:36 2025 GMT Not After : Dec 14 02:25:36 2025 GMT Subject: CN=6934e5a0-d70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:de:e2:b3:22:53:b3:4e:42:de:3f:87:69:fc: 06:e5:b0:05:0a:e6:11:37:dd:9e:7e:48:4f:e7:09: 45:fc:bb:ec:7d:9e:85:a5:95:e6:af:ba:91:dc:3b: 53:da:79:fd:84:15:f9:8a:0a:8f:d4:00:bf:9d:3e: fb:37:1d:e4:91:da:be:74:52:a0:8b:52:0e:1c:c5: 84:88:ad:e0:55:0c:c8:dd:50:cd:8e:a5:33:07:ff: 4c:56:22:47:b0:96:99:51:6d:87:80:fe:b6:c5:d2: d3:be:ba:49:f9:c5:17:88:aa:4b:81:04:3f:a1:4a: 50:35:69:ab:ad:27:36:a7:96:b3:40:08:b4:ba:f7: c9:cd:09:64:72:5c:12:7e:c5:8e:93:6a:62:ed:51: 3d:33:88:3e:a6:2a:2d:33:f3:3a:98:3a:53:ec:c5: e0:8f:e7:f0:d6:21:fb:74:5c:b2:88:5b:0e:88:00: 25:19:a6:e9:89:b4:bd:de:27:8e:27:d2:57:f1:08: 6a:f2:24:c2:c1:ac:b6:94:8d:c0:7d:eb:bc:7f:d1: a3:10:a7:30:fc:57:c1:b3:dd:7a:d4:4a:d7:54:35: 4d:ae:04:f9:fa:65:a0:75:3f:40:f3:82:3b:0b:a9: b8:8d:b7:24:a8:ca:4e:8d:39:c7:9f:0c:49:2f:4d: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DC:C7:A5:0E:8C:01:AF:9D:FB:B2:9E:D8:1A:57:98:28:AB:01:73 X509v3 Authority Key Identifier: keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c0:70:6c:2b:61:3e:9f:32:6e:f1:2c:ee:c8:cc:d3:d4:8f: 20:16:4a:bd:7e:73:25:18:18:a8:d5:1e:da:67:59:fb:58:70: 85:0c:48:97:74:39:35:8a:f1:37:f0:50:f9:ab:d1:fd:36:a9: 1b:cb:8c:2d:2c:35:e8:94:da:91:8c:80:8f:46:c0:f3:c7:c5: 56:33:f5:db:70:eb:a3:5e:89:04:72:d8:9e:83:c6:c9:a6:d9: a5:97:d2:52:f1:24:2e:36:bb:5f:bc:34:51:c9:31:df:81:4f: e3:b5:34:eb:38:77:20:ad:83:b6:ac:03:b9:e1:25:36:de:44: 49:ae:d3:66:01:ba:07:1d:4a:24:c4:cb:44:5e:5e:ca:80:5b: 5b:39:23:ce:86:02:ed:f7:b2:20:17:9e:0d:5b:17:27:32:10: eb:62:29:e8:67:f9:f7:d0:70:90:e2:16:38:80:1e:1e:04:02: 22:ce:68:f3:6d:39:71:f6:44:dd:27:65:6b:42:cc:ae:42:10: 8e:33:83:0f:c1:c2:f3:dc:ea:66:7d:2e:c9:df:0a:19:9d:5a: f1:92:cb:c4:24:00:75:81:3b:f3:69:28:b6:a4:66:4c:e1:2d: c7:7b:c8:69:bb:7c:2e:97:07:a6:0f:f0:b1:42:90:bb:0a:c6: ff:a4:36:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG MjdDRDIyOTgwHhcNMjUxMjA3MDIyNTM2WhcNMjUxMjE0MDIyNTM2WjAYMRYwFAYD VQQDEw02OTM0ZTVhMC1kNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA997isyJTs05C3j+HafwG5bAFCuYRN92efkhP5wlF/LvsfZ6FpZXmr7qR3DtT 2nn9hBX5igqP1AC/nT77Nx3kkdq+dFKgi1IOHMWEiK3gVQzI3VDNjqUzB/9MViJH sJaZUW2HgP62xdLTvrpJ+cUXiKpLgQQ/oUpQNWmrrSc2p5azQAi0uvfJzQlkclwS fsWOk2pi7VE9M4g+piotM/M6mDpT7MXgj+fw1iH7dFyyiFsOiAAlGabpibS93ieO J9JX8Qhq8iTCway2lI3Afeu8f9GjEKcw/FfBs9161ErXVDVNrgT5+mWgdT9A84I7 C6m4jbckqMpOjTnHnwxJL03x/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGncx6UO jAGvnfuyntgaV5goqwFzMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3 M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2wHBsK2E+nzJu8SzuyMzT1I8gFkq9fnMlGBio1R7aZ1n7WHCFDEiX dDk1ivE38FD5q9H9Nqkby4wtLDXolNqRjICPRsDzx8VWM/XbcOujXokEctieg8bJ ptmll9JS8SQuNrtfvDRRyTHfgU/jtTTrOHcgrYO2rAO54SU23kRJrtNmAboHHUok xMtEXl7KgFtbOSPOhgLt97IgF54NWxcnMhDrYinoZ/n30HCQ4hY4gB4eBAIizmjz bTlx9kTdJ2VrQsyuQhCOM4MPwcLz3OpmfS7J3woZnVrxksvEJAB1gTvzaSi2pGZM 4S3He8hpu3wulwemD/CxQpC7Csb/pDaT -----END CERTIFICATE-----Generated at Sun Dec 7 15:00:08 2025 by rpki-client