This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json) Hash identifier: 1CeFZOakXKruzyObuhUz8M7hjgdu6ZUT1JjKGCXML78= Subject key identifier: 49:89:8A:AA:B4:C8:7F:4F:2B:35:D2:3E:59:36:02:BB:71:9A:68:2C Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft Manifest number: 0233 Signing time: Sun 07 Dec 2025 00:29:35 +0000 Manifest this update: Sun 07 Dec 2025 00:29:34 +0000 Manifest next update: Sun 14 Dec 2025 00:29:34 +0000 Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: dlwHFJzBgIszxSzed2R9gmvMcFksHZihwgE2vbGX2O4=) 2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: YPKVhjI0QOxJDGKIkbhIcG0QRVYBhpe0iKALRG6i8e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Validity Not Before: Dec 7 00:29:34 2025 GMT Not After : Dec 14 00:29:34 2025 GMT Subject: CN=6934ca6e-597f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:1c:3f:4c:c6:ee:3c:e2:51:d3:59:d6:82: 69:6a:20:9d:2a:b9:58:1d:ba:b9:6b:ff:d8:4a:27: e3:6a:37:98:41:2d:9e:7c:1e:00:9a:37:41:af:e8: 5f:9b:6e:ad:e1:8f:b2:40:4d:a0:80:92:56:b1:21: 99:7a:17:c8:fe:58:9b:bd:6b:60:f1:2d:28:ad:a4: fd:2a:f9:5e:ff:91:62:96:e6:8e:c6:02:aa:54:35: ec:67:c0:ab:eb:ce:84:99:52:4c:ff:28:87:a1:c2: f9:41:ba:67:4c:53:0d:7a:d8:f0:d0:c0:c9:2a:76: d2:98:c2:fe:24:63:f7:6c:9d:8c:86:62:97:67:b5: b7:f9:ae:d5:57:6a:87:e0:9b:11:3e:77:59:f5:d0: fe:89:c0:04:a3:03:c3:a3:9f:67:b6:85:89:48:41: e2:d8:6a:99:20:f4:2b:89:2f:e0:b6:d9:bd:ec:fa: 54:e7:73:f9:a0:18:94:85:b6:aa:2d:f4:66:a4:48: 2b:32:a1:f4:b7:20:20:1c:e1:ca:d6:17:78:27:04: 12:3f:d8:6d:38:2d:73:aa:2c:11:48:60:03:bc:5f: 87:17:93:c1:b3:bf:ca:84:2a:54:be:ef:dc:9d:4e: 30:1c:83:e9:6b:43:53:4c:ef:52:be:de:50:d0:e7: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:89:8A:AA:B4:C8:7F:4F:2B:35:D2:3E:59:36:02:BB:71:9A:68:2C X509v3 Authority Key Identifier: keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:3b:c1:f1:79:62:fa:d2:80:0c:ba:2e:db:80:ab:d2:6b:e4: c5:25:3b:5c:d5:df:3c:c1:ff:6c:c3:e9:7c:46:d1:b8:79:42: 1a:04:07:01:c3:1a:85:11:78:c9:d0:4e:0d:76:6c:ec:4f:43: f2:19:ba:4f:2c:f1:66:6e:1d:47:41:66:54:69:68:bc:0e:70: 7e:65:3f:e0:cd:83:c1:9c:36:43:eb:f8:4d:9c:16:79:0e:5e: 4c:3b:37:25:59:07:c0:a4:8c:62:70:78:fd:eb:11:73:89:13: 42:5e:1b:21:8d:28:3f:21:19:5e:1f:fc:6d:4e:2c:6a:82:29: 99:5e:68:42:d1:e3:cd:26:ac:d8:63:2a:fd:f7:e2:c8:62:5e: 7a:38:a6:fe:9f:10:89:be:b4:3b:e5:33:29:cd:64:43:44:06: 86:8d:ef:b0:61:7f:0b:60:9f:b1:8a:c1:a6:1a:5e:8f:70:3f: 35:b6:f3:d6:39:97:48:b0:bb:97:61:c1:c1:98:95:9c:d6:32: 96:88:69:1f:e0:45:3f:c7:cc:4a:36:65:b9:1e:b6:5d:20:81: 8a:46:e7:6b:fc:ca:40:1c:db:f3:a4:14:b9:16:d8:79:bb:98: f8:10:f4:ba:6a:5d:28:c3:a8:f0:07:40:d2:b3:09:7a:63:aa: 6f:cc:cc:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY3QjQxMTAvBgNVBAUTKDE4N0VFRUVBMkFENjA3QkNBNTQyMkQwOTJEREFDQzE5 OTA4RjJGRDcwHhcNMjUxMjA3MDAyOTM0WhcNMjUxMjE0MDAyOTM0WjAYMRYwFAYD VQQDEw02OTM0Y2E2ZS01OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRccP0zG7jziUdNZ1oJpaiCdKrlYHbq5a//YSifjajeYQS2efB4AmjdBr+hf m26t4Y+yQE2ggJJWsSGZehfI/libvWtg8S0oraT9Kvle/5FiluaOxgKqVDXsZ8Cr 686EmVJM/yiHocL5QbpnTFMNetjw0MDJKnbSmML+JGP3bJ2MhmKXZ7W3+a7VV2qH 4JsRPndZ9dD+icAEowPDo59ntoWJSEHi2GqZIPQriS/gttm97PpU53P5oBiUhbaq LfRmpEgrMqH0tyAgHOHK1hd4JwQSP9htOC1zqiwRSGADvF+HF5PBs7/KhCpUvu/c nU4wHIPpa0NTTO9Svt5Q0OdbuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmJiqq0 yH9PKzXSPlk2ArtxmmgsMB8GA1UdIwQYMBaAFBh+7uoq1ge8pUItCS3azBmQjy/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCNC84MDI2RjM5NDcw ODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3eWxRaTBKTGRyTUdaQ1BM OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIN3U2aXJXQjd5bFFpMEpMZHJNR1pDUEw5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjdCNC84MDI2RjM5NDcwODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3 eWxRaTBKTGRyTUdaQ1BMOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0O8HxeWL60oAMui7bgKvSa+TFJTtc1d88wf9sw+l8RtG4eUIaBAcB wxqFEXjJ0E4NdmzsT0PyGbpPLPFmbh1HQWZUaWi8DnB+ZT/gzYPBnDZD6/hNnBZ5 Dl5MOzclWQfApIxicHj96xFziRNCXhshjSg/IRleH/xtTixqgimZXmhC0ePNJqzY Yyr99+LIYl56OKb+nxCJvrQ75TMpzWRDRAaGje+wYX8LYJ+xisGmGl6PcD81tvPW OZdIsLuXYcHBmJWc1jKWiGkf4EU/x8xKNmW5HrZdIIGKRudr/MpAHNvzpBS5Fth5 u5j4EPS6al0ow6jwB0DSswl6Y6pvzMy9 -----END CERTIFICATE-----Generated at Mon Dec 8 06:01:41 2025 by rpki-client