This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: Kfr9FmS0t+F2eEiQaX+34P/nVZKJFD25RSVvg++i6xM= Subject key identifier: 45:1C:BD:22:30:09:E5:AC:9C:85:14:E4:6A:67:5A:6D:3C:00:AC:0B Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 0260 Signing time: Tue 23 Dec 2025 00:38:20 +0000 Manifest this update: Tue 23 Dec 2025 00:38:20 +0000 Manifest next update: Tue 30 Dec 2025 00:38:20 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: fkVNlrjUTKPc09ewk+KoEyoxFQ9sgZDTnElcjnnZCYc=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: tO/Vg+1jM6TnaROUPSYxvRElxqw/2z5ZN8ZDcSK7tnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: Dec 23 00:38:20 2025 GMT Not After : Dec 30 00:38:20 2025 GMT Subject: CN=6949e47c-cfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:de:df:ee:56:35:79:2e:6f:c4:f3:92:5f:9d: 30:9d:eb:1e:20:9b:a2:18:e9:18:bc:38:82:52:72: af:0d:1c:ce:13:13:0e:ca:2c:96:e8:93:59:13:bd: 6c:39:94:d8:fc:da:7d:86:79:84:4f:83:91:4e:7c: 3f:12:35:c7:5b:06:4a:ec:f6:69:c6:69:62:c1:33: 59:7f:09:7d:43:9c:08:62:77:53:44:73:5f:c6:49: 11:bf:7e:70:ed:8c:13:ba:4d:0a:7a:dc:10:7f:c5: fa:a1:88:ed:16:de:e8:f8:47:86:f2:f2:e4:3c:9e: e6:19:30:3c:12:7d:cb:1a:10:45:41:34:9d:fe:37: 8a:3f:a1:d4:52:ac:00:a5:54:86:33:4f:00:4c:06: 50:ce:ca:b5:86:54:05:0c:de:1f:f0:f2:a8:9e:21: 25:7e:9f:bc:6d:18:67:b1:4c:8a:ef:ea:8f:35:80: 1e:42:29:34:f9:3d:32:a2:d6:1e:cb:ea:62:1d:76: df:af:7e:68:25:ac:4a:3d:2b:42:c1:b2:d8:c4:9b: 26:6b:72:22:d1:bc:b5:66:22:ea:4b:19:54:b5:5f: ec:da:30:75:33:d8:3a:6d:86:a5:26:83:f6:de:e6: af:80:e6:a4:f5:cc:e0:6d:ee:d7:d5:0d:37:4f:67: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1C:BD:22:30:09:E5:AC:9C:85:14:E4:6A:67:5A:6D:3C:00:AC:0B X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f7:7b:64:92:55:85:a5:ef:34:5d:e4:d2:fe:9a:ed:2e:6a: d0:5a:9b:67:8e:be:68:ce:cb:96:62:29:9d:95:26:e4:3f:2d: 5f:fd:d8:56:0c:a8:b0:5b:f5:8e:d0:ca:3c:53:d5:2c:27:36: f5:5d:dd:c1:47:60:5d:d2:fa:c7:1a:e4:e4:b6:db:12:c9:04: ad:0c:6e:fd:84:30:41:15:1f:28:b6:e0:5f:76:cc:02:5d:c0: da:44:76:f6:5c:f3:b0:10:e8:94:67:51:98:ef:dc:67:fa:37: ba:33:3f:64:7c:5b:90:ec:0b:5e:ea:a9:ef:2a:67:e5:d0:8a: 32:4d:31:9f:ea:35:bc:5d:7d:fc:a5:b4:b8:50:a3:df:f5:27: a1:7d:6a:2a:99:58:07:c7:49:87:88:54:40:af:8d:e7:51:51: c5:11:25:ff:78:f2:1e:75:41:95:fd:6d:d1:d1:fb:ec:dd:a2: e7:44:24:d7:26:88:37:3e:0d:35:01:c0:e1:09:e3:e2:dd:ac: 7e:eb:32:c0:56:77:c4:3c:4f:c7:59:68:90:06:25:ee:d1:85: c6:e8:66:94:58:2e:b1:49:70:61:10:ff:b7:1a:ce:b8:ae:78: 1d:4d:4f:e7:8f:57:2f:12:2c:c7:3b:a7:33:c6:8d:d2:e6:b4: 41:a3:77:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjUxMjIzMDAzODIwWhcNMjUxMjMwMDAzODIwWjAYMRYwFAYD VQQDDA02OTQ5ZTQ3Yy1jZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t7f7lY1eS5vxPOSX50wneseIJuiGOkYvDiCUnKvDRzOExMOyiyW6JNZE71s OZTY/Np9hnmET4ORTnw/EjXHWwZK7PZpxmliwTNZfwl9Q5wIYndTRHNfxkkRv35w 7YwTuk0KetwQf8X6oYjtFt7o+EeG8vLkPJ7mGTA8En3LGhBFQTSd/jeKP6HUUqwA pVSGM08ATAZQzsq1hlQFDN4f8PKoniElfp+8bRhnsUyK7+qPNYAeQik0+T0yotYe y+piHXbfr35oJaxKPStCwbLYxJsma3Ii0by1ZiLqSxlUtV/s2jB1M9g6bYalJoP2 3uavgOak9czgbe7X1Q03T2d/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUcvSIw CeWsnIUU5GpnWm08AKwLMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ93tkklWFpe80XeTS/prtLmrQWptnjr5ozsuWYimdlSbkPy1f/dhW DKiwW/WO0Mo8U9UsJzb1Xd3BR2Bd0vrHGuTkttsSyQStDG79hDBBFR8otuBfdswC XcDaRHb2XPOwEOiUZ1GY79xn+je6Mz9kfFuQ7Ate6qnvKmfl0IoyTTGf6jW8XX38 pbS4UKPf9SehfWoqmVgHx0mHiFRAr43nUVHFESX/ePIedUGV/W3R0fvs3aLnRCTX Jog3Pg01AcDhCePi3ax+6zLAVnfEPE/HWWiQBiXu0YXG6GaUWC6xSXBhEP+3Gs64 rngdTU/nj1cvEizHO6czxo3S5rRBo3co -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:25 2025 by rpki-client