This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: E37VGlOTuj1dHp6r7Ew3LNA7DQ+LLErzufgw3smd7kU= Subject key identifier: 39:53:8C:98:31:DC:D7:89:A0:74:A1:69:52:84:AF:40:AD:9E:CD:88 Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 023F Signing time: Tue 23 Dec 2025 00:54:21 +0000 Manifest this update: Tue 23 Dec 2025 00:54:21 +0000 Manifest next update: Tue 30 Dec 2025 00:54:21 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: qGsrxWhomxRkTvbWA59/ZFYMTNsEnvQKafAa/Wpiujg=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: xVQRlc0PkJ4VXTg8SHxKZBLplXrS1P4Dp3rhgyw72w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Dec 23 00:54:21 2025 GMT Not After : Dec 30 00:54:21 2025 GMT Subject: CN=6949e83d-5fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:d6:8c:fd:1a:50:aa:27:70:a5:50:49:9f: ca:95:ad:c0:cd:07:69:98:e4:4e:41:07:d4:ac:e0: c8:c7:6c:1f:91:f4:60:aa:bf:45:e7:ce:9d:38:47: f6:a1:34:03:50:d6:07:c6:d3:8e:02:96:c1:9c:6a: 95:6b:87:6e:3c:8b:99:a6:0d:97:53:7f:cd:da:39: 9c:da:a9:63:7b:56:da:77:6f:11:1d:d1:32:25:97: 58:93:94:7d:9b:3c:dc:6a:8e:de:d4:08:e8:46:ff: d7:1a:98:88:30:e2:7a:57:51:fa:b0:4d:fa:44:9b: bb:06:92:b3:1a:99:fb:4d:2f:cf:04:ae:b5:3b:c7: 60:65:b6:9e:0d:5f:c5:19:d5:74:5c:3d:fa:cd:a8: 37:55:53:0f:f5:49:d3:0f:c2:98:20:79:42:e5:a3: 18:24:c4:03:34:ed:5b:45:a5:39:94:7b:8a:82:a1: 96:50:95:6b:e3:ef:7f:c8:5b:87:39:4e:44:78:df: c5:e5:b5:d7:91:28:17:81:03:99:58:f9:c5:2e:4e: b1:cd:73:76:ec:38:75:69:d3:28:cf:c1:73:c6:3e: 60:bb:59:32:eb:4a:64:57:36:47:0f:01:0b:2c:93: c7:9a:a9:c4:6f:23:81:ae:16:38:ba:88:9f:85:11: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:53:8C:98:31:DC:D7:89:A0:74:A1:69:52:84:AF:40:AD:9E:CD:88 X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:51:6f:67:be:b9:e0:0a:1d:bc:ba:3a:71:76:b0:ce:c3:5d: 97:da:49:e0:18:3c:a4:3e:99:84:ff:5b:8e:90:21:c0:aa:bd: 9f:36:b6:35:0d:60:77:ab:5f:d2:08:24:1a:95:63:87:99:45: f3:ac:c5:cd:24:4a:16:11:9e:a2:70:fb:72:e1:67:2a:e2:cd: 6d:b6:65:51:92:9e:b4:d2:c1:2c:9d:f3:e3:5d:52:c9:36:94: b2:c2:28:f7:5d:b4:09:d9:07:b0:86:66:7e:b8:ce:e8:f9:8b: af:a0:a6:d8:63:38:9e:da:38:95:c6:e2:1f:ed:97:b1:64:25: 5d:0b:b3:31:11:f3:51:4b:0c:ce:d5:0c:c0:71:7e:d6:1a:17: 9e:a0:a1:78:f7:5d:99:e3:9c:0d:02:85:b9:0c:e5:25:78:24: 73:0e:ef:5d:dc:cd:7e:5f:a8:a5:e8:4a:9a:76:8c:fe:f5:29: 83:03:5e:ae:ca:7c:2e:16:4a:38:54:06:6e:6c:98:4a:20:00: f4:04:89:34:a6:99:c6:8a:07:c0:95:00:cb:17:db:b8:32:d4: f4:7a:11:bb:4e:80:e4:4d:95:17:ec:7b:d9:94:8f:5d:a6:5e: 31:14:4b:a5:da:41:55:98:91:07:47:0c:9d:b5:cb:0e:e8:9f: 02:36:a9:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUxMjIzMDA1NDIxWhcNMjUxMjMwMDA1NDIxWjAYMRYwFAYD VQQDDA02OTQ5ZTgzZC01ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSjWjP0aUKoncKVQSZ/Kla3AzQdpmOROQQfUrODIx2wfkfRgqr9F586dOEf2 oTQDUNYHxtOOApbBnGqVa4duPIuZpg2XU3/N2jmc2qlje1bad28RHdEyJZdYk5R9 mzzcao7e1AjoRv/XGpiIMOJ6V1H6sE36RJu7BpKzGpn7TS/PBK61O8dgZbaeDV/F GdV0XD36zag3VVMP9UnTD8KYIHlC5aMYJMQDNO1bRaU5lHuKgqGWUJVr4+9/yFuH OU5EeN/F5bXXkSgXgQOZWPnFLk6xzXN27Dh1adMoz8Fzxj5gu1ky60pkVzZHDwEL LJPHmqnEbyOBrhY4uoifhRFiAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlTjJgx 3NeJoHShaVKEr0Ctns2IMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAUW9nvrngCh28ujpxdrDOw12X2kngGDykPpmE/1uOkCHAqr2fNrY1 DWB3q1/SCCQalWOHmUXzrMXNJEoWEZ6icPty4Wcq4s1ttmVRkp600sEsnfPjXVLJ NpSywij3XbQJ2QewhmZ+uM7o+YuvoKbYYzie2jiVxuIf7ZexZCVdC7MxEfNRSwzO 1QzAcX7WGheeoKF4912Z45wNAoW5DOUleCRzDu9d3M1+X6il6Eqadoz+9SmDA16u ynwuFko4VAZubJhKIAD0BIk0ppnGigfAlQDLF9u4MtT0ehG7ToDkTZUX7HvZlI9d pl4xFEul2kFVmJEHRwydtcsO6J8CNqnv -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:30 2025 by rpki-client