This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json) Hash identifier: R1oxuaKNoIOmN/4qj1DqhNywxItuaNluSEA6G6Ca8AU= Subject key identifier: E4:C3:03:A1:78:F1:D7:C9:52:CB:F7:C2:EF:F5:19:31:81:D3:79:FD Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A Certificate issuer: /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft Manifest number: 04 Signing time: Wed 24 Dec 2025 07:29:00 +0000 Manifest this update: Wed 24 Dec 2025 07:29:00 +0000 Manifest next update: Wed 31 Dec 2025 07:29:00 +0000 Files and hashes: 1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: TT6vZTtEwb4Ya/fr0swBk6Zn3GXD20iM8pu9/EjLfak=) 2: 34885E7CE09A11F0A3604C36446F56BC.roa (hash: Eenbg/d8N6GXpoDZ+ERX3cJqhC8+/ZQTonCpInxR83A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 07:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A Validity Not Before: Dec 24 07:29:00 2025 GMT Not After : Dec 31 07:29:00 2025 GMT Subject: CN=694b963c-b999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:eb:f3:dc:a1:c6:fb:3a:77:56:b6:e0:dc: 4c:23:1b:02:61:65:2a:f2:aa:85:fe:be:e9:ff:59: 50:22:6b:8f:fd:c6:78:56:1a:2e:fe:e5:76:cb:5e: ec:5a:14:58:38:5f:90:5c:77:ad:58:51:9b:f1:d6: 51:d2:13:7a:90:8c:42:0a:b1:79:12:08:d7:6f:d6: 8f:bd:88:94:cb:6f:8c:99:e8:cd:95:8c:db:34:4e: 67:20:d2:82:bb:6a:c1:12:f4:7e:06:86:a4:55:a1: 35:7a:95:ee:f7:7f:a5:9c:a9:8d:d6:dc:66:68:85: f2:49:c6:31:d6:0d:04:93:53:0d:59:6f:5e:cc:0a: 9e:4c:dd:cc:d2:ae:82:0e:95:6b:92:84:2c:14:68: 38:9e:b2:c8:68:3c:90:fa:9f:1f:e5:ef:ab:86:99: 73:ca:90:6f:62:16:7e:f0:4e:59:48:c5:1b:e4:bc: 41:fa:e2:20:1c:98:82:af:3a:1d:f2:ea:5b:d9:71: ed:db:66:b9:1a:1b:09:15:f4:a6:2e:90:8f:d5:1b: 51:97:d6:2e:61:2d:f2:85:68:bb:ba:96:4f:f6:1c: c0:4a:54:da:b6:8c:28:46:55:65:9d:ae:ea:52:af: ae:18:f9:5a:65:cf:bd:fd:df:53:b4:30:be:48:c7: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C3:03:A1:78:F1:D7:C9:52:CB:F7:C2:EF:F5:19:31:81:D3:79:FD X509v3 Authority Key Identifier: keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f4:0c:3d:c9:33:62:e2:e6:e0:8c:38:5d:72:5b:0c:1b:1d: 14:90:02:19:cb:af:b4:7b:82:6b:c1:2c:44:20:82:52:c8:84: 89:c3:62:21:5d:ce:88:98:7e:8a:ce:5d:65:35:c7:0d:3e:bf: ea:4e:73:9a:86:e5:d4:88:37:6f:16:9d:c5:50:5a:19:86:50: 79:0e:c8:76:b3:50:98:a2:54:f1:d4:aa:43:3e:01:0a:e9:e1: 22:32:f7:80:80:5d:35:e3:17:a5:21:f7:a1:89:de:6f:bf:ca: 3f:49:21:74:2c:c1:d8:c0:17:36:6f:3f:29:4a:8b:32:c8:77: f7:25:31:86:15:7b:46:1b:6a:a2:1d:a3:53:6d:51:e3:32:b8: df:ab:22:a4:f8:04:fe:72:46:be:0a:5c:46:40:e7:67:3f:0a: 7d:78:9a:04:05:16:5c:54:34:3f:9c:17:3d:d6:4c:6c:f3:f8: 03:ca:d4:42:5c:f2:0d:69:62:ab:79:fb:eb:bb:d3:01:be:04: aa:e6:c3:2e:63:2a:d4:0c:1d:72:6a:7c:05:3e:38:09:0f:c1: 01:11:68:7f:94:04:b3:7a:b3:8d:10:19:25:eb:40:ee:f7:ae: 01:b5:1d:43:4b:5c:99:da:d1:49:36:44:2d:a5:93:18:56:22: d8:8c:d6:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE QjUzQjExMC8GA1UEBRMoNDRBNkE1RTREMUMyQjhFRkUzOUU5RDAzQUEzQjM3OTBC QzBCODMyQTAeFw0yNTEyMjQwNzI5MDBaFw0yNTEyMzEwNzI5MDBaMBgxFjAUBgNV BAMMDTY5NGI5NjNjLWI5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK9evz3KHG+zp3Vrbg3EwjGwJhZSryqoX+vun/WVAia4/9xnhWGi7+5XbLXuxa FFg4X5Bcd61YUZvx1lHSE3qQjEIKsXkSCNdv1o+9iJTLb4yZ6M2VjNs0Tmcg0oK7 asES9H4GhqRVoTV6le73f6WcqY3W3GZohfJJxjHWDQSTUw1Zb17MCp5M3czSroIO lWuShCwUaDiesshoPJD6nx/l76uGmXPKkG9iFn7wTllIxRvkvEH64iAcmIKvOh3y 6lvZce3bZrkaGwkV9KYukI/VG1GX1i5hLfKFaLu6lk/2HMBKVNq2jChGVWWdrupS r64Y+Vplz73931O0ML5Ix8rPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5MMDoXjx 18lSy/fC7/UZMYHTef0wHwYDVR0jBBgwFoAURKal5NHCuO/jnp0Dqjs3kLwLgyow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNTNCL0Y3RUQ1QkEwRTAx OTExRjA4QUQzRUI4RDYyNkY1NkJDL1JLYWw1TkhDdU9fam5wMERxanMza0x3TGd5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkthbDVOSEN1T19qbnAwRHFqczNrTHdMZ3lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NTNCL0Y3RUQ1QkEwRTAxOTExRjA4QUQzRUI4RDYyNkY1NkJDL1JLYWw1TkhDdU9f am5wMERxanMza0x3TGd5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACb0DD3JM2Li5uCMOF1yWwwbHRSQAhnLr7R7gmvBLEQgglLIhInDYiFd zoiYforOXWU1xw0+v+pOc5qG5dSIN28WncVQWhmGUHkOyHazUJiiVPHUqkM+AQrp 4SIy94CAXTXjF6Uh96GJ3m+/yj9JIXQswdjAFzZvPylKizLId/clMYYVe0YbaqId o1NtUeMyuN+rIqT4BP5yRr4KXEZA52c/Cn14mgQFFlxUND+cFz3WTGzz+APK1EJc 8g1pYqt5++u70wG+BKrmwy5jKtQMHXJqfAU+OAkPwQERaH+UBLN6s40QGSXrQO73 rgG1HUNLXJna0Uk2RC2lkxhWItiM1mA= -----END CERTIFICATE-----Generated at Wed Dec 24 21:01:29 2025 by rpki-client