This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: XDgPrlwOEfk5ZnbzH3dAyjjIplh52Ar3Np6Wik7U0uw= Subject key identifier: D9:AE:60:A0:7B:25:4C:77:88:E0:85:EA:5F:86:60:20:45:40:6C:C1 Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 7C Signing time: Sun 21 Dec 2025 05:49:35 +0000 Manifest this update: Sun 21 Dec 2025 05:49:35 +0000 Manifest next update: Sun 28 Dec 2025 05:49:35 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: 1EOgnnvG6xOjnikp6juG9DEJx3GS/rOR/saDs+TerAQ=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Dec 21 05:49:35 2025 GMT Not After : Dec 28 05:49:35 2025 GMT Subject: CN=69478a6f-fa85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:6f:d0:7d:eb:e2:3f:76:4d:bd:0d:02:a3: 6c:81:4b:bf:99:4e:c9:f4:81:32:7f:b4:e5:7c:20: 71:87:49:09:0a:7f:d2:f9:ce:7f:7d:09:31:06:f3: 8e:93:76:11:1e:63:82:1d:d2:f4:73:73:78:5a:8e: 9b:07:2e:19:ff:2b:ea:21:5c:8f:ba:a0:a8:ba:92: 51:7a:06:a1:6b:d9:16:14:3c:42:3c:75:f8:c9:d3: 9e:58:42:21:d7:6d:d6:f8:9c:11:46:ef:e7:1c:a2: 38:ab:08:5c:df:9f:cd:ae:a6:b7:1b:ad:46:e1:a2: 5d:e1:91:0d:43:ac:52:fe:d8:8c:1f:ce:97:3e:a2: 31:e7:52:3b:8a:64:76:1b:15:41:eb:d5:17:05:ab: 60:5a:77:84:db:5b:3e:1b:08:49:f9:d3:5b:36:e2: 47:66:da:bc:16:87:d9:ff:11:38:cd:e4:98:01:3b: 74:b8:c5:07:59:5c:2b:40:cf:c5:ef:8c:44:83:d5: de:42:7d:2e:f2:d9:6e:9e:23:35:95:ff:e2:cd:34: 12:4f:b6:d3:d5:57:e6:94:32:40:b0:72:5a:fe:c7: 24:fa:a6:23:98:e1:6d:d6:fd:84:3d:2e:68:a6:c2: f6:fb:2b:be:19:12:d7:74:b8:30:16:a8:c1:64:a6: dd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AE:60:A0:7B:25:4C:77:88:E0:85:EA:5F:86:60:20:45:40:6C:C1 X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bc:ae:ed:d4:99:b7:a4:f7:ef:09:9e:8f:8a:65:5e:86:59: 6f:7f:55:de:90:59:34:bf:a9:8b:cb:00:25:d4:15:38:37:b0: 20:88:e9:d9:d4:8b:a0:8e:dd:7a:d5:b0:47:c9:ca:d2:15:3c: ec:9a:99:ca:af:fc:cf:f2:16:c4:72:34:f7:63:2a:9d:43:6a: cf:f3:ae:34:58:b9:cc:c5:00:eb:33:6b:09:ad:6d:8e:07:c3: 4b:e9:31:56:e9:a7:22:1e:77:c5:73:9f:c2:c7:c6:14:74:86: 2f:95:e3:e6:aa:89:b8:70:61:2c:8a:61:2c:c7:6b:0b:31:3e: 83:b0:da:1a:74:f6:14:55:99:65:d4:db:08:47:59:24:5e:2f: db:6c:91:74:09:fb:e3:7e:65:3d:db:19:37:86:d6:4c:f3:59: e7:02:1d:a4:14:d5:73:c4:ae:2e:99:e6:a9:01:3b:cb:7e:6b: cd:06:6d:76:0a:66:38:f4:3f:37:aa:45:db:6f:52:ac:7a:07: 38:7d:68:d5:62:33:0e:d7:c3:f0:04:2f:9f:34:75:d2:3d:df: 88:f5:50:bf:e3:37:d7:21:ad:33:66:9f:aa:7f:b1:bb:1e:de: 04:5d:ff:b9:2b:79:6f:39:4e:e7:19:43:93:79:9e:b3:53:0b: 80:b2:fa:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTEyMjEwNTQ5MzVaFw0yNTEyMjgwNTQ5MzVaMBgxFjAUBgNV BAMMDTY5NDc4YTZmLWZhODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1rm/QfeviP3ZNvQ0Co2yBS7+ZTsn0gTJ/tOV8IHGHSQkKf9L5zn99CTEG846T dhEeY4Id0vRzc3hajpsHLhn/K+ohXI+6oKi6klF6BqFr2RYUPEI8dfjJ055YQiHX bdb4nBFG7+ccojirCFzfn82uprcbrUbhol3hkQ1DrFL+2Iwfzpc+ojHnUjuKZHYb FUHr1RcFq2Bad4TbWz4bCEn501s24kdm2rwWh9n/ETjN5JgBO3S4xQdZXCtAz8Xv jESD1d5CfS7y2W6eIzWV/+LNNBJPttPVV+aUMkCwclr+xyT6piOY4W3W/YQ9Lmim wvb7K74ZEtd0uDAWqMFkpt2bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2a5goHsl THeI4IXqX4ZgIEVAbMEwHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFW8ru3Umbek9+8Jno+KZV6GWW9/Vd6QWTS/qYvLACXUFTg3sCCI6dnU i6CO3XrVsEfJytIVPOyamcqv/M/yFsRyNPdjKp1Das/zrjRYuczFAOszawmtbY4H w0vpMVbppyIed8Vzn8LHxhR0hi+V4+aqibhwYSyKYSzHawsxPoOw2hp09hRVmWXU 2whHWSReL9tskXQJ++N+ZT3bGTeG1kzzWecCHaQU1XPEri6Z5qkBO8t+a80GbXYK Zjj0PzeqRdtvUqx6Bzh9aNViMw7Xw/AEL580ddI934j1UL/jN9chrTNmn6p/sbse 3gRd/7kreW85TucZQ5N5nrNTC4Cy+sI= -----END CERTIFICATE-----Generated at Sun Dec 21 13:10:39 2025 by rpki-client