This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: R5g8zEc/XRCJ3hqLNO7BQBBxYbSPYNwsRybX/kT/icQ= Subject key identifier: 7B:42:E9:6A:D1:F3:75:3D:46:42:57:F2:BB:5C:20:00:74:45:BB:26 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: 60 Signing time: Fri 19 Dec 2025 06:03:58 +0000 Manifest this update: Fri 19 Dec 2025 06:03:57 +0000 Manifest next update: Fri 26 Dec 2025 06:03:57 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: 0T/pc4BYWgQZEJjgLwwTM4CwlFrbVstgEcZrobuVr44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Dec 19 06:03:57 2025 GMT Not After : Dec 26 06:03:57 2025 GMT Subject: CN=6944eace-8000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:80:8d:70:21:82:be:0d:89:38:d1:f2:10: 78:cb:a7:ea:80:51:9b:fb:0f:78:94:cc:0e:93:9c: cb:6f:dd:80:fe:79:54:e1:55:f8:f8:a9:d0:bc:ed: 2e:2c:3a:db:18:5d:35:d4:ff:6b:f1:9f:e5:4c:4d: 9a:b5:bc:91:d5:c7:5c:9e:87:41:f0:f7:1a:05:88: 1b:8b:12:d0:f6:de:8d:31:a1:6d:ba:f7:6e:01:8b: 63:f1:3b:07:60:b5:ca:27:02:30:95:09:d5:96:50: 32:b8:ec:48:47:b4:fa:fb:16:27:f7:94:41:08:4a: 00:3e:60:e5:73:f7:87:05:bd:e0:90:02:7b:43:46: 57:03:a9:74:d5:5a:b3:e2:f6:f7:24:ef:8d:db:39: 4c:ac:aa:00:ea:ec:e7:14:08:ba:7a:1e:f1:72:fb: 39:9c:ce:10:84:9e:fd:b6:95:99:50:6f:9b:bc:d7: 3c:7c:7b:ff:73:fd:4c:ea:1c:42:e4:c2:4c:74:e2: ea:59:8e:1c:f2:e2:c8:9c:5e:26:24:6d:55:14:d4: bb:00:5f:96:6b:24:78:b3:cc:86:ce:59:36:2d:9e: 7c:8b:b0:df:b1:b5:fe:e3:79:42:3d:9a:79:15:69: b5:60:1a:f2:e2:81:ec:cb:ad:3e:a1:e5:72:d6:10: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:42:E9:6A:D1:F3:75:3D:46:42:57:F2:BB:5C:20:00:74:45:BB:26 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:13:d1:78:97:9f:d3:03:a7:cf:c2:d9:ac:42:b1:79:a7:3e: f7:dc:f7:a8:13:f6:df:4f:57:0b:5b:80:3f:d5:ae:79:3f:f7: 44:2e:c8:fa:e8:1b:09:c7:30:13:7b:17:84:58:4b:e1:af:9c: bb:57:11:a3:82:00:c5:d1:e4:5b:27:12:a1:7b:c0:77:02:5b: 8b:0f:e2:82:c7:32:24:9a:96:28:9d:5d:83:04:a8:d3:07:2e: 53:22:57:d0:e7:31:18:c2:68:df:66:d7:04:c7:74:4c:0e:9b: 1a:ed:76:70:b3:5f:40:a2:35:c4:07:c3:26:f1:fe:da:5e:db: 86:04:54:22:69:c9:89:8e:54:ab:e6:fe:19:52:e6:33:08:5d: e9:c8:9a:e1:ff:29:8c:7d:34:52:04:16:ef:ba:99:ba:93:e3: 3e:d9:12:bf:28:aa:56:22:69:7b:92:57:80:66:e8:b5:fa:fa: 3d:2f:bf:97:2e:fe:1b:9a:d3:56:24:51:80:2f:ef:b6:bb:6c: 7d:a6:18:8b:7b:c5:fe:e6:0a:42:52:71:68:69:7d:1d:52:5c: 58:19:99:c8:59:20:0d:ad:c0:ab:52:5b:5c:3a:06:a6:18:20: 46:ed:5b:f2:8d:72:fe:92:11:59:d0:83:7d:ae:a9:16:65:a5: 54:1d:4b:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTNBNTExMC8GA1UEBRMoOTAyMUJFRkYzQjYzRUU3MjQ4QjkwRERBQTVEREJGQTdF MzEyMUNEOTAeFw0yNTEyMTkwNjAzNTdaFw0yNTEyMjYwNjAzNTdaMBgxFjAUBgNV BAMMDTY5NDRlYWNlLTgwMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQoYCNcCGCvg2JONHyEHjLp+qAUZv7D3iUzA6TnMtv3YD+eVThVfj4qdC87S4s OtsYXTXU/2vxn+VMTZq1vJHVx1yeh0Hw9xoFiBuLEtD23o0xoW26924Bi2PxOwdg tconAjCVCdWWUDK47EhHtPr7Fif3lEEISgA+YOVz94cFveCQAntDRlcDqXTVWrPi 9vck743bOUysqgDq7OcUCLp6HvFy+zmczhCEnv22lZlQb5u81zx8e/9z/UzqHELk wkx04upZjhzy4sicXiYkbVUU1LsAX5ZrJHizzIbOWTYtnnyLsN+xtf7jeUI9mnkV abVgGvLigezLrT6h5XLWEEVJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe0LpatHz dT1GQlfyu1wgAHRFuyYwHwYDVR0jBBgwFoAUkCG+/ztj7nJIuQ3apd2/p+MSHNkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExM0E1L0U1N0YzNTkyNEI3 NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hO ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0NHLV96dGo3bkpJdVEzYXBkMl9wLU1TSE5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx M0E1L0U1N0YzNTkyNEI3NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25K SXVRM2FwZDJfcC1NU0hOay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwT0XiXn9MDp8/C2axCsXmnPvfc96gT9t9PVwtbgD/Vrnk/90QuyPro GwnHMBN7F4RYS+GvnLtXEaOCAMXR5FsnEqF7wHcCW4sP4oLHMiSaliidXYMEqNMH LlMiV9DnMRjCaN9m1wTHdEwOmxrtdnCzX0CiNcQHwybx/tpe24YEVCJpyYmOVKvm /hlS5jMIXenImuH/KYx9NFIEFu+6mbqT4z7ZEr8oqlYiaXuSV4Bm6LX6+j0vv5cu /hua01YkUYAv77a7bH2mGIt7xf7mCkJScWhpfR1SXFgZmchZIA2twKtSW1w6BqYY IEbtW/KNcv6SEVnQg32uqRZlpVQdS70= -----END CERTIFICATE-----Generated at Fri Dec 19 23:59:22 2025 by rpki-client