This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: KOphk5gMxobEqQa+tvpW8OzusetrZQT7x6JcLy9PYuY= Subject key identifier: 5F:D9:A4:63:EC:57:D1:41:41:8B:9F:90:EF:15:2A:B0:18:28:84:B2 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 029F Signing time: Tue 23 Dec 2025 00:30:54 +0000 Manifest this update: Tue 23 Dec 2025 00:30:54 +0000 Manifest next update: Tue 30 Dec 2025 00:30:54 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: UumdKL7/zJSxskdW2veYcWd/ZxYhzjDGD4vSArXN7xc=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: exVLBxR9pxtqc5cvsQFpU7WzBwIbqGPyCKYDoLeIqwE=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: qN+LRpSVnBxJ+EVMhollH7lNOxo/HzDT+qSzlpuJsAY=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: Uy1qQgtN2hy74kMiTUs5n5WOsga0Z6eI2tl5HqgZZRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Dec 23 00:30:54 2025 GMT Not After : Dec 30 00:30:54 2025 GMT Subject: CN=6949e2be-f2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:4d:aa:cb:bb:75:84:d5:bc:f1:7a:1a:3f: 61:cb:73:95:50:3a:fb:c2:5d:e0:fc:ad:7e:29:85: 13:05:24:c8:8d:01:45:9c:0d:96:e4:7d:8f:57:60: 44:60:1d:b7:13:45:23:41:28:d3:1f:64:49:8c:e4: 57:74:4f:74:34:e7:0a:04:aa:d0:9f:10:2e:11:57: da:df:48:73:b6:1e:84:dc:b1:8b:cd:e5:8b:d4:47: 66:48:cc:27:69:6a:39:e9:81:18:bb:4e:50:82:97: 97:35:c1:19:22:89:37:84:3e:93:fb:a3:21:f1:7b: d4:83:55:cf:bf:25:ab:9a:10:c1:7b:5f:cd:d3:05: 59:c4:d9:f4:f9:eb:0a:23:37:28:76:f0:bc:cd:36: 62:7b:17:54:84:18:97:e8:92:4f:b6:e3:a1:90:a3: 9c:43:02:50:6a:d8:62:ac:cb:e4:1e:43:50:93:ca: 75:aa:7d:30:d6:7b:26:8e:b8:ff:be:56:33:ae:42: a9:11:6e:13:c1:25:15:ab:d7:66:24:c9:cb:bc:4f: e9:7b:c2:45:fb:b3:d3:f9:c4:98:e6:7d:98:a0:9a: 33:f1:7d:51:43:20:81:85:8a:3c:52:b0:a3:46:99: d9:77:58:df:59:7a:f3:ac:2a:dd:44:54:a9:3f:b1: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:A4:63:EC:57:D1:41:41:8B:9F:90:EF:15:2A:B0:18:28:84:B2 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:14:4b:2b:d1:e9:a7:dd:90:8e:23:f7:27:23:8f:10:6f:02: 45:c3:ee:24:af:52:e9:da:9b:a9:53:90:1e:93:e4:a6:46:12: 32:c2:34:de:06:2c:30:8a:da:65:96:ef:9c:a7:94:86:52:92: ca:c7:83:cc:46:28:3e:70:b4:8b:9b:10:53:2a:ef:f9:f9:2e: e8:c0:d3:5f:64:8a:08:ea:77:9f:b4:e9:df:a4:d3:0e:a5:49: 1d:3c:54:c6:a2:90:93:3a:99:31:62:e9:83:ad:36:6f:f0:48: fb:ed:79:31:31:0b:61:fd:cf:ef:df:fd:38:4e:56:1a:ab:de: a8:95:62:50:b7:95:6f:30:c9:65:9b:ae:7e:76:d6:2d:4e:88: 02:6d:06:19:59:60:f8:ed:86:ab:c3:76:d6:4b:ac:f3:b6:15: 17:91:12:e6:eb:51:81:5b:75:7c:ba:d4:d4:99:4c:ad:47:df: 0a:32:38:4e:8b:c7:b9:7b:0b:db:a9:11:43:fd:5a:71:0e:2d: c1:0d:53:d2:4a:06:a9:b0:08:4e:d2:4f:2f:0f:16:8a:02:95: 92:75:ae:76:a4:d6:fc:64:8f:1e:b8:95:b7:94:4f:09:71:5c: d2:e8:0e:49:a2:ff:06:24:45:26:81:65:3c:a6:53:11:8d:6e: d5:dc:14:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUxMjIzMDAzMDU0WhcNMjUxMjMwMDAzMDU0WjAYMRYwFAYD VQQDDA02OTQ5ZTJiZS1mMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2RNqsu7dYTVvPF6Gj9hy3OVUDr7wl3g/K1+KYUTBSTIjQFFnA2W5H2PV2BE YB23E0UjQSjTH2RJjORXdE90NOcKBKrQnxAuEVfa30hzth6E3LGLzeWL1EdmSMwn aWo56YEYu05QgpeXNcEZIok3hD6T+6Mh8XvUg1XPvyWrmhDBe1/N0wVZxNn0+esK IzcodvC8zTZiexdUhBiX6JJPtuOhkKOcQwJQathirMvkHkNQk8p1qn0w1nsmjrj/ vlYzrkKpEW4TwSUVq9dmJMnLvE/pe8JF+7PT+cSY5n2YoJoz8X1RQyCBhYo8UrCj RpnZd1jfWXrzrCrdRFSpP7ES3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/ZpGPs V9FBQYufkO8VKrAYKISyMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgFEsr0emn3ZCOI/cnI48QbwJFw+4kr1Lp2pupU5Aek+SmRhIywjTe Biwwitpllu+cp5SGUpLKx4PMRig+cLSLmxBTKu/5+S7owNNfZIoI6neftOnfpNMO pUkdPFTGopCTOpkxYumDrTZv8Ej77XkxMQth/c/v3/04TlYaq96olWJQt5VvMMll m65+dtYtTogCbQYZWWD47Yarw3bWS6zzthUXkRLm61GBW3V8utTUmUytR98KMjhO i8e5ewvbqRFD/VpxDi3BDVPSSgapsAhO0k8vDxaKApWSda52pNb8ZI8euJW3lE8J cVzS6A5Jov8GJEUmgWU8plMRjW7V3BTH -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:35 2025 by rpki-client