This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: Zi7L4qPEJDFA28cOPmIIlivGxb6CLE7paFyQTkbhlBg= Subject key identifier: 86:3D:FC:10:9D:89:85:86:1E:73:74:14:25:8B:C1:CC:FD:5D:07:61 Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 6C Signing time: Fri 05 Dec 2025 04:50:43 +0000 Manifest this update: Fri 05 Dec 2025 04:50:43 +0000 Manifest next update: Fri 12 Dec 2025 04:50:43 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: P+ihqm/ie0b5Jb9FkpAAa7V40+UGpD+giglxe/XGyD0=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: Dec 5 04:50:43 2025 GMT Not After : Dec 12 04:50:43 2025 GMT Subject: CN=693264a3-4e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:c3:a7:a1:47:53:7d:59:fb:71:fb:e1:fb: d9:e2:3c:43:05:dd:31:ef:62:55:a8:dd:cf:72:e2: c2:cb:a1:22:0c:c5:06:fc:94:27:43:dd:86:ce:5a: 8c:d9:78:c7:a5:97:a3:84:87:0b:40:20:11:eb:30: ec:4a:05:2b:d2:bb:bb:56:20:cf:ca:ae:8f:12:f9: 0a:5e:09:83:bb:8f:c4:aa:71:e9:68:f2:0d:e3:d1: 9b:10:ce:33:0f:ac:4e:c1:02:71:b1:d2:b8:fb:8e: e7:6d:f1:3f:3e:d1:83:04:56:30:cb:bc:8f:3f:15: 0e:11:f5:7a:54:c0:c4:b9:4e:21:ba:ab:7e:f7:67: ad:48:b9:54:f5:01:f8:6b:79:a0:19:32:bf:c0:0b: de:36:02:84:60:a5:59:ad:14:c7:31:d6:8f:3a:a8: 53:0b:85:e5:87:35:b2:85:a1:f3:1a:14:b5:c5:21: 55:60:6b:d3:c7:0c:23:73:87:e4:6a:8f:53:0b:47: 70:41:f2:cc:07:dc:7d:9a:be:70:8a:6c:86:5e:5c: 05:c9:84:bf:3e:f2:5c:bd:78:15:21:64:36:46:07: 0e:14:54:b0:30:87:41:2e:c2:e1:d2:b0:16:cf:eb: de:66:68:73:b7:ac:18:ba:32:32:e5:f3:54:27:c4: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3D:FC:10:9D:89:85:86:1E:73:74:14:25:8B:C1:CC:FD:5D:07:61 X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:48:c5:a7:28:2c:bd:5c:13:37:8e:6e:21:e3:27:80:7d:4d: dc:67:26:0e:c7:24:b7:44:5e:43:bf:e8:e9:5d:73:22:73:e5: 79:05:1e:45:81:8a:9a:4f:41:a7:f0:2a:4f:0a:f0:34:60:99: 8d:94:47:d6:05:1a:c9:45:2f:2f:ed:63:63:4c:4d:dd:15:34: 0a:7b:e9:97:bb:79:61:99:de:ff:e3:c6:6d:3d:a5:cd:6f:52: a8:30:8b:6f:fa:f5:95:2b:8f:23:4c:b5:98:f0:56:20:6f:3c: c6:cd:23:4c:7c:66:49:0c:38:99:06:b9:de:67:2b:e2:61:c6: 18:fd:71:ab:65:23:df:3e:42:74:e1:8b:fc:61:89:62:1a:ee: 80:e2:8e:fd:ed:d4:49:1f:cf:1e:91:ec:f1:7a:98:28:22:22: 40:8a:cb:a0:d1:74:8e:54:a0:58:96:78:cb:e3:55:48:87:21: 03:22:a9:05:2c:22:ac:13:73:52:57:85:76:97:64:1a:34:e2: 04:2f:47:f7:4b:01:c2:65:4c:43:c0:0a:29:03:9d:7e:e6:e1: ae:83:4e:5a:66:f1:6c:45:e9:e3:ce:67:0f:20:dc:c6:2b:4d: 47:b0:77:cb:b6:6c:08:a3:e0:99:22:c6:f4:6c:b0:d8:bb:68: ff:bf:0b:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTEyMDUwNDUwNDNaFw0yNTEyMTIwNDUwNDNaMBgxFjAUBgNV BAMTDTY5MzI2NGEzLTRlMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwG8OnoUdTfVn7cfvh+9niPEMF3THvYlWo3c9y4sLLoSIMxQb8lCdD3YbOWozZ eMell6OEhwtAIBHrMOxKBSvSu7tWIM/Kro8S+QpeCYO7j8Sqcelo8g3j0ZsQzjMP rE7BAnGx0rj7judt8T8+0YMEVjDLvI8/FQ4R9XpUwMS5TiG6q373Z61IuVT1Afhr eaAZMr/AC942AoRgpVmtFMcx1o86qFMLheWHNbKFofMaFLXFIVVga9PHDCNzh+Rq j1MLR3BB8swH3H2avnCKbIZeXAXJhL8+8ly9eBUhZDZGBw4UVLAwh0EuwuHSsBbP 695maHO3rBi6MjLl81QnxN8NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhj38EJ2J hYYec3QUJYvBzP1dB2EwHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKNIxacoLL1cEzeObiHjJ4B9TdxnJg7HJLdEXkO/6OldcyJz5XkFHkWB ippPQafwKk8K8DRgmY2UR9YFGslFLy/tY2NMTd0VNAp76Ze7eWGZ3v/jxm09pc1v Uqgwi2/69ZUrjyNMtZjwViBvPMbNI0x8ZkkMOJkGud5nK+Jhxhj9catlI98+QnTh i/xhiWIa7oDijv3t1Ekfzx6R7PF6mCgiIkCKy6DRdI5UoFiWeMvjVUiHIQMiqQUs IqwTc1JXhXaXZBo04gQvR/dLAcJlTEPACikDnX7m4a6DTlpm8WxF6ePOZw8g3MYr TUewd8u2bAij4JkixvRssNi7aP+/C2A= -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:15 2025 by rpki-client