This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: xfnH6vKbbe62sRopg8E618NG9wehUT3nFAyMX6E8+nw= Subject key identifier: 56:9B:6E:2F:C6:6D:A7:D2:F4:E8:CC:CF:22:7F:C8:80:4A:6B:4A:1F Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 065F Signing time: Sat 20 Dec 2025 15:51:10 +0000 Manifest this update: Sat 20 Dec 2025 15:51:09 +0000 Manifest next update: Sat 27 Dec 2025 15:51:09 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: iCjUNJg+BTSnJzGDQtRPk5miWK5MBKBjYKll5a1MAOg=) 2: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: eSlTAoQ5k0fFKiHMdeu9X90T/rFtlTnA6Fx/5ofc1sU=) 3: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: JYcdT8gc4SSOPp9mZ4cChcf87lzFLOtfwrJ4fYMBet4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Dec 20 15:51:09 2025 GMT Not After : Dec 27 15:51:09 2025 GMT Subject: CN=6946c5ee-4c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:22:2a:24:1a:6a:c5:d7:0d:02:6a:23:b1: 88:5a:59:82:28:bf:aa:3f:5f:60:f5:b6:2b:fe:00: cd:8a:fc:17:b3:9e:5d:bf:c6:cf:f5:76:0d:c0:14: 9c:27:88:e7:95:62:78:3b:0d:9d:7a:22:59:0c:e2: 42:43:76:ec:cf:42:55:38:8f:61:b7:86:36:9b:87: d8:87:00:27:00:ef:47:f7:81:94:9d:77:4b:6e:b8: 83:61:fc:a2:e5:9d:a2:d8:1b:ce:7c:2d:68:1b:35: 1b:7a:a8:d6:40:6a:ca:c6:61:ff:26:b0:7e:1c:94: dd:a0:24:95:19:b3:ba:9a:00:e0:96:eb:8d:ac:ea: 74:5f:98:09:ae:01:27:70:38:1e:05:5a:12:a5:99: 78:28:74:d6:93:e1:fb:7b:09:8c:66:c8:cf:b1:88: c4:a6:a1:3a:a4:a6:e4:c6:92:93:7f:b5:24:78:d9: d8:06:37:ae:eb:63:67:ad:40:71:7e:22:1e:d9:34: d2:4f:a1:6b:61:ef:9e:7b:b7:36:cb:5a:9b:1b:22: 02:19:f0:a5:31:82:a9:3f:0c:17:57:0b:ce:97:6d: 69:5a:c5:88:d1:68:96:fa:38:59:b1:5c:f5:3c:ca: 85:0b:02:85:46:20:8f:98:c5:cb:af:e1:02:c3:60: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:6E:2F:C6:6D:A7:D2:F4:E8:CC:CF:22:7F:C8:80:4A:6B:4A:1F X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f2:e7:97:89:9a:a9:35:5d:8c:49:57:bf:37:19:00:e1:32: db:cb:e3:0e:66:0a:9e:d5:5e:1b:aa:02:b4:c5:d6:51:37:43: 88:49:5e:f4:69:2f:87:4d:74:9b:4f:41:09:f4:f1:e7:73:f3: 9a:90:5c:3b:1a:94:d9:9f:90:35:55:6a:41:9e:13:26:19:d1: cb:5e:1d:60:0f:fe:d3:57:7c:71:b5:95:35:41:2e:33:30:ab: 44:03:01:48:a1:5f:81:e1:d4:59:6c:55:bd:b9:b9:59:09:c8: 80:4b:af:15:8c:2f:49:48:cd:8c:b6:e2:69:60:e2:08:56:36: 03:da:ab:1c:46:f8:c0:d5:59:cc:60:21:80:c2:01:54:ad:62: c5:f1:ff:6b:f5:c5:d6:5f:d1:c1:24:c6:2e:e9:f4:9e:e6:f9: ff:28:f9:1d:a8:74:82:98:a2:87:5a:e3:4a:88:a7:62:62:31: fa:ca:43:b9:e6:57:94:d2:8f:ee:71:b8:a8:76:74:4e:fd:47: cc:da:2d:7c:cb:3c:c5:01:b6:90:a9:49:e3:42:73:4b:e0:b1: 91:38:69:3d:0d:f9:88:19:7b:af:80:c6:19:7d:e3:a1:f8:71: 87:7e:f7:5e:b5:7b:3a:52:40:a4:a2:a6:84:8b:3d:50:34:71: f3:2e:4c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjUxMjIwMTU1MTA5WhcNMjUxMjI3MTU1MTA5WjAYMRYwFAYD VQQDDA02OTQ2YzVlZS00Yzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfsiKiQaasXXDQJqI7GIWlmCKL+qP19g9bYr/gDNivwXs55dv8bP9XYNwBSc J4jnlWJ4Ow2deiJZDOJCQ3bsz0JVOI9ht4Y2m4fYhwAnAO9H94GUnXdLbriDYfyi 5Z2i2BvOfC1oGzUbeqjWQGrKxmH/JrB+HJTdoCSVGbO6mgDgluuNrOp0X5gJrgEn cDgeBVoSpZl4KHTWk+H7ewmMZsjPsYjEpqE6pKbkxpKTf7UkeNnYBjeu62NnrUBx fiIe2TTST6FrYe+ee7c2y1qbGyICGfClMYKpPwwXVwvOl21pWsWI0WiW+jhZsVz1 PMqFCwKFRiCPmMXLr+ECw2BsvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFabbi/G bafS9OjMzyJ/yIBKa0ofMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB8ueXiZqpNV2MSVe/NxkA4TLby+MOZgqe1V4bqgK0xdZRN0OISV70 aS+HTXSbT0EJ9PHnc/OakFw7GpTZn5A1VWpBnhMmGdHLXh1gD/7TV3xxtZU1QS4z MKtEAwFIoV+B4dRZbFW9ublZCciAS68VjC9JSM2MtuJpYOIIVjYD2qscRvjA1VnM YCGAwgFUrWLF8f9r9cXWX9HBJMYu6fSe5vn/KPkdqHSCmKKHWuNKiKdiYjH6ykO5 5leU0o/ucbiodnRO/UfM2i18yzzFAbaQqUnjQnNL4LGROGk9DfmIGXuvgMYZfeOh +HGHfvdetXs6UkCkoqaEiz1QNHHzLkxV -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:42 2025 by rpki-client