This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: jD9d12ogf1oi+3Dn9Oeb/9hYxhuE28lrV0dVPLea2Os= Subject key identifier: E2:57:46:24:57:15:A6:95:81:7A:56:89:4E:7B:EA:12:C7:B5:CF:66 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: CE Signing time: Tue 25 Nov 2025 03:51:39 +0000 Manifest this update: Tue 25 Nov 2025 03:51:38 +0000 Manifest next update: Tue 02 Dec 2025 03:51:38 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: vV+sZa9HXryP+qFbAvo3Y/qoOqIDgQNlGdYlpYugbQs=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: fbK2ihQUPhJ5r2ba5rzkEzE0phvIKmf+DwHm9D+Afg4=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: NNRqGSmWdoe7pDPxn2mpdNUa0PJKi1Ydbw5oFhxloG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Dec 2025 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Nov 25 03:51:38 2025 GMT Not After : Dec 2 03:51:38 2025 GMT Subject: CN=692527ca-40f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:3e:6d:d7:07:7d:e0:1b:e8:93:bc:34:1a: f8:90:c3:90:a2:08:12:bf:68:37:a3:50:c3:3d:e6: 2f:5d:d4:89:42:3c:c7:d3:58:b4:ee:20:82:2d:c8: 16:2f:5f:05:f4:3a:77:cd:c7:ef:53:52:a3:28:0f: 00:1e:fe:f8:02:1a:7e:96:03:20:00:46:a0:2b:f0: 74:15:64:15:93:ff:66:64:0d:14:4c:df:a6:c8:68: ec:e7:61:dc:d1:20:94:79:71:a9:2c:33:9f:d0:3d: 1d:da:ac:69:95:69:7a:61:72:02:5e:ae:b9:6f:7c: 6e:98:a1:39:85:21:58:a6:44:12:3f:20:37:ab:93: 79:86:eb:80:bc:e2:d9:80:6a:39:30:b0:7c:13:36: 43:94:ba:84:75:e4:e1:03:3f:57:7d:dd:4f:d5:4b: 59:1c:7a:72:6e:67:1f:f3:e7:0c:e2:80:53:04:f7: 7c:47:58:1d:b3:d1:42:dd:a7:25:72:bf:cb:01:53: e9:07:50:f9:21:ab:ab:51:0c:0e:f5:7f:9e:b2:d9: f1:3c:3a:f2:c0:be:ab:b7:18:56:4c:3a:74:74:6b: b0:17:c6:72:6c:f1:96:24:cd:b4:8f:55:44:82:1a: 0f:68:77:e9:64:98:de:28:9c:d4:73:e6:08:97:8d: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:57:46:24:57:15:A6:95:81:7A:56:89:4E:7B:EA:12:C7:B5:CF:66 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b1:5d:67:cd:d4:40:46:5d:bc:43:7e:ff:ef:fc:f4:1d:26: 60:cc:32:73:db:2b:b6:2c:59:f6:e7:d5:a1:59:a8:6a:46:29: 52:64:5e:dc:19:b6:d5:e0:2b:67:03:bc:5f:90:c0:20:d9:81: 1a:30:ba:df:9e:15:0d:77:51:e9:96:8a:64:dc:a2:fa:48:1e: 67:09:12:c9:03:b5:9a:4a:ec:9c:c9:aa:b0:97:54:33:88:77: dc:7b:ad:ca:37:70:10:ee:1e:18:ed:0f:06:10:a0:c7:94:25: b5:72:f2:b1:bc:5e:0f:7a:92:8f:b0:6f:ac:94:80:78:18:03: da:28:30:e2:90:92:83:6a:c9:dd:3f:4e:8a:f9:e3:a5:07:69: 0a:b2:c8:0a:0c:b6:19:e0:72:b9:7f:33:95:31:7c:69:2e:37: 19:cb:fc:8c:81:7d:32:c0:f4:e0:9c:7d:e1:c5:a2:31:23:57: d5:81:d8:6b:15:77:06:64:d6:13:88:ec:69:c7:e6:06:f5:3f: c5:61:43:bf:52:83:0e:74:6d:9a:77:5e:05:8e:3f:2d:b6:29: 7c:27:89:9d:89:b1:2c:ad:89:21:04:b1:2a:7a:53:68:70:91: 42:b2:78:41:69:3d:79:2a:fa:47:1f:2f:aa:5f:0b:d3:94:b8: f3:b9:4f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx MTZEQTVERjIwHhcNMjUxMTI1MDM1MTM4WhcNMjUxMjAyMDM1MTM4WjAYMRYwFAYD VQQDEw02OTI1MjdjYS00MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tQ+bdcHfeAb6JO8NBr4kMOQoggSv2g3o1DDPeYvXdSJQjzH01i07iCCLcgW L18F9Dp3zcfvU1KjKA8AHv74Ahp+lgMgAEagK/B0FWQVk/9mZA0UTN+myGjs52Hc 0SCUeXGpLDOf0D0d2qxplWl6YXICXq65b3xumKE5hSFYpkQSPyA3q5N5huuAvOLZ gGo5MLB8EzZDlLqEdeThAz9Xfd1P1UtZHHpybmcf8+cM4oBTBPd8R1gds9FC3acl cr/LAVPpB1D5IaurUQwO9X+estnxPDrywL6rtxhWTDp0dGuwF8ZybPGWJM20j1VE ghoPaHfpZJjeKJzUc+YIl43ZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJXRiRX FaaVgXpWiU576hLHtc9mMB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzhGMC8wQTc3MUEzNjkzQUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9Ldzdv WlNEZkdQX1ZjcFVSYmFYZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3sV1nzdRARl28Q37/7/z0HSZgzDJz2yu2LFn259WhWahqRilSZF7c GbbV4CtnA7xfkMAg2YEaMLrfnhUNd1Hplopk3KL6SB5nCRLJA7WaSuycyaqwl1Qz iHfce63KN3AQ7h4Y7Q8GEKDHlCW1cvKxvF4PepKPsG+slIB4GAPaKDDikJKDasnd P06K+eOlB2kKssgKDLYZ4HK5fzOVMXxpLjcZy/yMgX0ywPTgnH3hxaIxI1fVgdhr FXcGZNYTiOxpx+YG9T/FYUO/UoMOdG2ad14Fjj8ttil8J4mdibEsrYkhBLEqelNo cJFCsnhBaT15KvpHHy+qXwvTlLjzuU8U -----END CERTIFICATE-----Generated at Tue Nov 25 13:20:37 2025 by rpki-client