This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: 4x9cDY1zZ5cnaNefzJ6ylv4TNLkBR18iLzGxoH0YC6Q= Subject key identifier: 65:55:C6:FB:85:9E:AC:5B:10:66:80:A9:4D:2B:4B:99:9A:D3:3C:B3 Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 0863 Signing time: Mon 22 Dec 2025 20:00:05 +0000 Manifest this update: Mon 22 Dec 2025 20:00:04 +0000 Manifest next update: Mon 29 Dec 2025 20:00:04 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: D+Qbg4mkTPyFlADgIwNjnkjXFNR4JA6r9+qJ20t2Tq4=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: Dec 22 20:00:04 2025 GMT Not After : Dec 29 20:00:04 2025 GMT Subject: CN=6949a345-5e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:9b:6a:42:12:ab:df:24:9b:92:a0:e0:9c: cc:71:1c:e5:d0:0b:33:46:6b:1a:53:da:69:b2:13: 38:1b:e2:db:88:e6:fc:c3:df:dd:ec:17:fd:5c:73: 1e:f9:98:63:0a:00:2e:33:3d:3b:7c:72:97:5a:01: 94:05:2b:f3:a6:db:f4:5a:b3:ea:c4:4c:45:9e:70: 1e:a6:13:22:b4:9a:26:f8:4b:f8:f8:c1:01:3d:b1: b6:44:18:11:5b:73:ed:7f:fe:11:1c:7f:06:c3:d3: 1f:6b:2e:34:75:3d:e2:89:f1:43:66:34:ab:3d:8f: 6f:86:5b:a9:e0:0f:35:9e:fd:4d:78:aa:79:7e:45: 17:67:d9:e8:5a:be:2f:28:25:a3:77:96:cf:6b:22: bc:dd:33:86:b5:79:a0:50:1e:21:7d:c5:0a:f3:cf: fe:bf:c1:39:1e:41:69:80:4e:14:ec:aa:24:07:74: b3:bd:8f:45:57:25:3f:c9:15:cd:3a:ce:2c:42:82: 67:0f:6f:77:c5:a8:46:dc:6d:a4:79:29:71:7b:2c: cc:78:d6:fd:3b:1d:13:16:d4:c1:dd:63:1a:c3:0d: 15:80:e3:4e:60:1c:8c:8d:98:9c:a8:56:75:ce:b6: e3:4c:8a:53:be:37:5b:14:13:43:f2:88:68:9f:05: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:C6:FB:85:9E:AC:5B:10:66:80:A9:4D:2B:4B:99:9A:D3:3C:B3 X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:2c:c8:7a:e7:96:49:c4:8c:ff:45:ea:60:96:f1:c8:f4:4e: f8:a6:11:bf:66:14:59:dd:e3:fc:26:29:72:ed:ca:e6:31:98: 18:83:56:9e:53:1c:85:65:d1:3f:5a:d9:55:a7:77:44:f5:3c: 2c:78:4b:d6:99:1d:46:3c:81:69:f0:cc:06:9d:bf:28:89:b3: 1f:bf:ae:45:64:b5:af:0f:5b:0a:2d:85:05:ee:49:de:b4:c6: 77:e9:73:42:61:dd:56:f3:2c:54:e3:08:bf:03:e0:4c:ff:11: 5e:fe:54:78:9c:06:bf:d6:bc:61:0a:77:be:8b:69:f4:47:eb: 99:ef:1c:3d:b3:7b:3d:2a:04:6d:b9:ed:6f:65:00:5a:ac:c7: de:8a:71:82:a9:a9:cb:2a:93:d0:58:d8:e0:11:41:bc:40:a5: 4b:c4:84:0e:e2:39:b9:12:51:45:11:39:44:2e:b4:03:73:08: ff:79:c8:eb:0a:c0:11:fa:43:df:db:84:7b:6f:19:13:fc:a0: 6f:66:33:ca:33:16:a0:7d:20:d7:4d:89:0d:61:04:ef:81:f5: 91:ec:4b:49:ec:0a:b5:8b:94:21:c7:0e:83:4c:26:2f:de:4c: 9d:47:c4:34:24:a6:ba:fa:6b:43:6d:9e:df:6c:cd:84:3e:88: 3a:50:03:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUxMjIyMjAwMDA0WhcNMjUxMjI5MjAwMDA0WjAYMRYwFAYD VQQDDA02OTQ5YTM0NS01ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrSbakISq98km5Kg4JzMcRzl0AszRmsaU9ppshM4G+LbiOb8w9/d7Bf9XHMe +ZhjCgAuMz07fHKXWgGUBSvzptv0WrPqxExFnnAephMitJom+Ev4+MEBPbG2RBgR W3Ptf/4RHH8Gw9Mfay40dT3iifFDZjSrPY9vhlup4A81nv1NeKp5fkUXZ9noWr4v KCWjd5bPayK83TOGtXmgUB4hfcUK88/+v8E5HkFpgE4U7KokB3SzvY9FVyU/yRXN Os4sQoJnD293xahG3G2keSlxeyzMeNb9Ox0TFtTB3WMaww0VgONOYByMjZicqFZ1 zrbjTIpTvjdbFBND8ohonwVszQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVVxvuF nqxbEGaAqU0rS5ma0zyzMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCLMh655ZJxIz/RepglvHI9E74phG/ZhRZ3eP8Jily7crmMZgYg1ae UxyFZdE/WtlVp3dE9TwseEvWmR1GPIFp8MwGnb8oibMfv65FZLWvD1sKLYUF7kne tMZ36XNCYd1W8yxU4wi/A+BM/xFe/lR4nAa/1rxhCne+i2n0R+uZ7xw9s3s9KgRt ue1vZQBarMfeinGCqanLKpPQWNjgEUG8QKVLxIQO4jm5ElFFETlELrQDcwj/ecjr CsAR+kPf24R7bxkT/KBvZjPKMxagfSDXTYkNYQTvgfWR7EtJ7Aq1i5Qhxw6DTCYv 3kydR8Q0JKa6+mtDbZ7fbM2EPog6UAOH -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:49 2025 by rpki-client