This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json) Hash identifier: gOcvSNHgsR94xBYU5tZAaQk2+lqHRt+lBAt+xOzN+rQ= Subject key identifier: E4:CC:BD:83:9F:A4:71:60:DC:0B:5C:FE:2A:0B:77:F3:14:AE:01:8A Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft Manifest number: 07C8 Signing time: Mon 22 Dec 2025 22:16:22 +0000 Manifest this update: Mon 22 Dec 2025 22:16:21 +0000 Manifest next update: Mon 29 Dec 2025 22:16:21 +0000 Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: 6WVULWZluRmKvqeA+HGmF5f2oZtd9BTRH8eX+LcRG5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172 Validity Not Before: Dec 22 22:16:21 2025 GMT Not After : Dec 29 22:16:21 2025 GMT Subject: CN=6949c336-ba72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:d4:76:55:64:5b:53:58:f8:bc:45:41:8b: 7b:5a:22:29:25:18:93:8c:5f:ff:7c:82:c8:0b:4b: 7b:28:7c:56:5d:90:db:92:94:c8:2e:20:fd:6e:fe: 3c:ff:07:ba:f4:ac:5d:d3:4e:e2:5d:fb:7c:04:2e: 4e:f8:e6:dd:ed:d2:0b:f9:14:2e:ff:52:e8:4a:73: da:49:6d:21:88:1b:d2:37:53:93:a9:be:89:77:9f: c2:17:21:a6:d3:73:d2:f5:5f:a0:d4:c7:0c:a0:16: 0c:fa:f7:28:c3:d8:dc:b9:05:08:ad:9e:4d:52:dd: 88:c2:5b:1a:e1:0a:9f:a0:b0:a0:bd:9c:cd:f4:3a: c6:4f:6d:83:4e:95:7b:e7:6b:8c:6f:c2:16:52:4b: b8:3c:57:84:27:9a:12:1f:bd:23:b3:fa:e1:07:23: 15:98:55:ac:39:99:18:e4:2e:ee:cf:4b:21:8f:44: 97:53:a6:24:bf:80:dd:77:6e:78:b5:64:c6:88:d6: 24:0f:b4:4e:d5:52:09:e7:46:66:da:e2:99:e5:5b: 89:40:51:2e:e2:af:ae:a3:b6:b0:83:c9:24:90:34: 42:62:e8:b4:a0:33:2a:52:9c:c5:51:a5:2a:b5:c8: f6:15:4b:31:ec:37:0e:c2:93:4a:96:49:9a:c2:05: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CC:BD:83:9F:A4:71:60:DC:0B:5C:FE:2A:0B:77:F3:14:AE:01:8A X509v3 Authority Key Identifier: keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e8:97:bb:48:ae:15:75:70:9e:e6:8c:d7:24:40:46:11:9f: 35:20:bd:a6:79:88:4c:8a:49:5d:8a:cf:34:44:d7:06:41:07: 30:42:a3:26:ef:4e:50:e6:cf:f8:36:e3:48:ee:4d:b9:84:61: 99:b3:f1:0b:ba:2d:78:58:67:49:b6:72:6f:75:37:70:e1:e5: 6d:c6:09:f4:45:c3:be:0d:f9:a0:02:1f:0c:f0:1a:49:9d:3c: db:0e:57:86:49:56:28:01:a8:65:69:e1:d9:33:b5:e4:ed:1d: 99:e3:a4:f4:94:2e:7a:f7:b9:92:e6:1d:39:24:c6:56:ab:55: 0a:3c:7f:22:b5:89:b8:c3:f7:80:5a:ef:94:d9:e6:02:80:22: 14:d9:11:44:fe:e6:ec:70:2a:53:cf:08:16:73:cf:1a:de:1b: 2c:13:c3:7b:5c:9c:6c:60:84:57:e3:f7:01:7b:cf:84:a2:bd: 7c:e3:a4:4d:46:36:52:16:08:b1:47:2b:0b:ee:7a:87:92:8a: cd:7f:d6:9f:83:4c:8d:fb:28:c9:e0:58:8f:1f:ab:2b:90:48: cb:bd:8a:ff:3a:18:60:60:49:06:04:27:fc:70:29:cf:20:9e: e2:97:b7:29:c9:d8:30:8d:a4:0b:f4:9d:99:9e:7c:8e:a2:f1: c5:24:44:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDA5RUIyNDg5M0ZGODM4QUFEQzg3MkZGQzM3NTg0MjdG NkFFQzIxNzIwHhcNMjUxMjIyMjIxNjIxWhcNMjUxMjI5MjIxNjIxWjAYMRYwFAYD VQQDDA02OTQ5YzMzNi1iYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPDUdlVkW1NY+LxFQYt7WiIpJRiTjF//fILIC0t7KHxWXZDbkpTILiD9bv48 /we69Kxd007iXft8BC5O+Obd7dIL+RQu/1LoSnPaSW0hiBvSN1OTqb6Jd5/CFyGm 03PS9V+g1McMoBYM+vcow9jcuQUIrZ5NUt2Iwlsa4QqfoLCgvZzN9DrGT22DTpV7 52uMb8IWUku4PFeEJ5oSH70js/rhByMVmFWsOZkY5C7uz0shj0SXU6Ykv4Ddd254 tWTGiNYkD7RO1VIJ50Zm2uKZ5VuJQFEu4q+uo7awg8kkkDRCYui0oDMqUpzFUaUq tcj2FUsx7DcOwpNKlkmawgU5dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTMvYOf pHFg3Atc/ioLd/MUrgGKMB8GA1UdIwQYMBaAFAnrJIk/+Diq3Icv/DdYQn9q7CFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9LcmNoeV84TjFoQ2YycnNJ WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nlc2tpVF80T0tyY2h5XzhOMWhDZjJyc0lYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9DZXNraVRfNE9L cmNoeV84TjFoQ2YycnNJWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA6Je7SK4VdXCe5ozXJEBGEZ81IL2meYhMikldis80RNcGQQcwQqMm 705Q5s/4NuNI7k25hGGZs/ELui14WGdJtnJvdTdw4eVtxgn0RcO+DfmgAh8M8BpJ nTzbDleGSVYoAahlaeHZM7Xk7R2Z46T0lC5697mS5h05JMZWq1UKPH8itYm4w/eA Wu+U2eYCgCIU2RFE/ubscCpTzwgWc88a3hssE8N7XJxsYIRX4/cBe8+Eor1846RN RjZSFgixRysL7nqHkorNf9afg0yN+yjJ4FiPH6srkEjLvYr/OhhgYEkGBCf8cCnP IJ7il7cpydgwjaQL9J2ZnnyOovHFJER6 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:43 2025 by rpki-client