This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: NGXHGoIdD1JQLdjMPf34b3om+rlQ1/Ru0HqodClp/TU= Subject key identifier: F7:E6:48:E5:91:71:E5:CB:5B:EE:6F:7A:48:E0:A1:08:B3:AB:EE:D4 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: B4 Signing time: Tue 23 Dec 2025 04:59:20 +0000 Manifest this update: Tue 23 Dec 2025 04:59:19 +0000 Manifest next update: Tue 30 Dec 2025 04:59:19 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: IlcoXgvKECsIc/HiHO4kAHU8eAYDnMbFyPiPTVuellg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Dec 23 04:59:19 2025 GMT Not After : Dec 30 04:59:19 2025 GMT Subject: CN=694a21a8-001d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:8e:54:ed:74:07:76:0b:5f:53:33:7a:cf: 61:fe:37:84:a1:13:7c:5d:47:26:9e:a0:94:9b:a9: f9:42:8e:7d:5f:ba:56:3b:f7:9b:2d:46:01:4d:4a: 92:b1:3f:01:d7:92:b1:70:58:7b:e4:f6:4a:e3:c6: 72:8c:de:96:bc:6b:c5:fd:45:f7:9c:be:67:b4:b5: a8:f0:bd:a8:24:8c:49:f6:36:b4:e2:aa:38:54:9f: 78:66:b5:5b:fc:d8:b8:da:43:0f:ef:7d:c5:e0:6a: 17:01:74:ac:11:5e:64:c9:a0:3c:65:16:d6:60:ab: 55:3c:09:3a:7b:80:22:e8:61:41:38:68:a3:c5:7b: e7:30:88:9b:77:09:4e:3e:23:0a:12:9c:c5:b1:f8: b4:bc:06:d0:33:e0:8d:89:fe:d3:66:a4:7d:be:94: 70:92:f7:17:2b:29:85:6e:e8:10:7d:0f:0f:15:10: 03:03:c2:31:25:6b:67:e3:96:19:36:17:5f:f7:f2: f9:45:7d:f7:6e:a8:4a:32:1e:7e:f4:47:6a:67:f7: 1a:42:8d:01:9c:6f:a7:d4:4f:6e:ae:b9:97:20:af: 8b:29:39:87:a2:72:fe:91:05:e4:b2:2c:fc:c0:50: 7a:01:59:9a:92:51:61:b8:0d:df:e6:ea:cb:c4:14: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E6:48:E5:91:71:E5:CB:5B:EE:6F:7A:48:E0:A1:08:B3:AB:EE:D4 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ad:02:b3:9f:58:e3:da:77:e3:f0:33:0d:21:43:a8:e0:e5: e8:e1:da:c1:d9:7c:b8:1b:c6:56:89:b5:03:78:6f:86:6b:cd: eb:3d:af:9d:23:87:ff:6d:9e:5f:0e:c4:31:0f:c3:6f:61:c8: 2d:b6:f1:6d:b6:e3:29:11:6a:63:02:0b:d3:6a:ac:a7:95:54: ea:9c:e4:23:f7:d8:92:4f:a5:da:bd:18:be:2a:16:7b:65:c8: d3:e0:39:17:17:cd:33:07:67:25:f5:0a:3e:c4:0a:44:e8:1c: fd:e7:3d:7f:3d:7f:ce:a4:b2:ac:2f:90:5c:14:9b:b1:c3:d1: 46:26:c7:43:aa:f3:1d:90:ae:15:de:04:11:e5:22:01:23:e5: 57:8b:8f:96:e4:6a:ac:36:97:4e:4d:61:69:2c:ba:a2:f9:bc: e8:33:ed:70:6c:2a:e9:3d:27:9e:94:df:99:54:d7:f7:e2:20: c7:b6:45:db:be:df:1b:89:5c:5c:31:7c:43:77:44:f0:a5:5e: df:47:73:03:63:21:a8:e8:62:d8:2f:ca:87:d1:fb:f8:3f:e6: 3a:4c:9b:a2:96:40:c6:3e:77:64:04:67:6f:9f:25:8d:34:12: 01:91:b0:ec:a2:d9:81:89:9f:de:23:1e:12:4c:a6:72:e1:21: 57:66:80:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjUxMjIzMDQ1OTE5WhcNMjUxMjMwMDQ1OTE5WjAYMRYwFAYD VQQDDA02OTRhMjFhOC0wMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDWOVO10B3YLX1Mzes9h/jeEoRN8XUcmnqCUm6n5Qo59X7pWO/ebLUYBTUqS sT8B15KxcFh75PZK48ZyjN6WvGvF/UX3nL5ntLWo8L2oJIxJ9ja04qo4VJ94ZrVb /Ni42kMP733F4GoXAXSsEV5kyaA8ZRbWYKtVPAk6e4Ai6GFBOGijxXvnMIibdwlO PiMKEpzFsfi0vAbQM+CNif7TZqR9vpRwkvcXKymFbugQfQ8PFRADA8IxJWtn45YZ Nhdf9/L5RX33bqhKMh5+9EdqZ/caQo0BnG+n1E9urrmXIK+LKTmHonL+kQXksiz8 wFB6AVmaklFhuA3f5urLxBTQLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfmSOWR ceXLW+5vekjgoQizq+7UMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBrQKzn1jj2nfj8DMNIUOo4OXo4drB2Xy4G8ZWibUDeG+Ga83rPa+d I4f/bZ5fDsQxD8NvYcgttvFttuMpEWpjAgvTaqynlVTqnOQj99iST6XavRi+KhZ7 ZcjT4DkXF80zB2cl9Qo+xApE6Bz95z1/PX/OpLKsL5BcFJuxw9FGJsdDqvMdkK4V 3gQR5SIBI+VXi4+W5GqsNpdOTWFpLLqi+bzoM+1wbCrpPSeelN+ZVNf34iDHtkXb vt8biVxcMXxDd0TwpV7fR3MDYyGo6GLYL8qH0fv4P+Y6TJuilkDGPndkBGdvnyWN NBIBkbDsotmBiZ/eIx4STKZy4SFXZoCd -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:33 2025 by rpki-client