This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: et9y3sfOLniiMyNY/8qpM7DFW7p0WbPB8DvNz2IqFNg= Subject key identifier: 32:B5:D0:22:64:4B:3A:B5:22:1E:AA:65:D3:BE:D4:10:80:28:DD:C4 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 01D2 Signing time: Sun 07 Dec 2025 00:37:50 +0000 Manifest this update: Sun 07 Dec 2025 00:37:49 +0000 Manifest next update: Sun 14 Dec 2025 00:37:49 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: aVQ5Uqf076kDPyUc0LvtiWZOlrMPFu1h+GkH51Tr7XQ=) 2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: ksbPiEON/rfN+9KcAeESjlw0pDzn0uwDVByAkHoOZ5I=) 3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: +GOwmmv/WQvXmYUv3zJL7t+sIDyt7sOnzLXJtteAzBQ=) 4: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: HWgtJZZShVOjpJyOjZHOrob9TQCrmSDpAAlvfRMr4WY=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: WqNYMWqxYNONSyEjRytn5l7aZGIUzjwjymCk0WTuD8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Dec 7 00:37:49 2025 GMT Not After : Dec 14 00:37:49 2025 GMT Subject: CN=6934cc5e-0002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:a5:fe:de:b0:65:21:af:8e:3e:a8:93:b3: e2:56:9a:70:a3:e8:f1:70:26:20:a2:65:a9:4a:8a: 2b:c5:d6:99:4d:e6:0e:60:6c:a6:2b:59:36:ad:95: 81:c5:ac:7f:40:50:37:7b:16:a6:08:4b:5f:85:ab: 35:2d:69:16:ef:4f:2d:ec:e3:d7:63:46:7d:a0:eb: d1:68:38:a4:92:d2:5e:37:a3:45:88:df:b5:bb:67: 34:b0:6a:d0:86:6c:fa:aa:59:ef:cf:91:7e:29:e3: a0:41:b8:d7:a9:54:54:4b:5c:63:20:12:08:89:d0: 25:09:bb:6c:87:1a:11:47:f0:b1:95:06:ca:a6:30: 8c:e7:7c:c6:77:17:64:f0:dc:2d:3c:86:5f:7f:a4: fb:ca:dd:06:77:df:df:03:f3:a2:89:80:68:ad:cb: 25:c2:b8:88:92:f5:c2:d7:c3:43:86:69:48:e4:0e: 1c:59:f2:10:7d:8c:18:a1:04:10:da:1c:d8:46:77: 5f:8a:27:f8:e5:97:ac:f9:09:6f:86:22:e4:4c:f0: 74:c0:9c:b8:d0:fd:4d:53:fd:a9:30:20:91:e5:f3: 53:2f:34:6a:ca:3a:e6:2b:c6:99:99:4b:24:ba:49: 66:3d:9d:e9:f4:1f:b3:38:38:0a:ef:9c:fe:21:d3: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B5:D0:22:64:4B:3A:B5:22:1E:AA:65:D3:BE:D4:10:80:28:DD:C4 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:53:50:ba:82:fc:22:76:81:d5:04:22:e4:b7:68:28:f2:7c: bc:4a:98:2a:f5:97:e5:9a:31:e9:82:48:c2:2e:16:2a:f9:5c: 64:17:73:b1:8c:7c:16:5c:88:33:bb:df:8a:12:b9:a4:ef:11: 3e:18:e4:b8:06:e4:7b:9f:c6:af:90:89:4a:50:54:99:11:bd: 42:7a:81:c9:1c:fa:50:29:b8:4a:26:09:08:4e:8a:95:17:12: 53:8f:8b:7d:19:9e:f1:e3:f8:74:e1:53:6f:8f:63:8e:a9:3d: 4d:1d:0d:26:6c:3d:7b:00:a9:17:b3:34:07:e3:0e:03:2f:d5: c3:85:59:7c:e7:eb:0f:31:0f:83:71:ed:0d:a9:a1:97:4b:30: 2b:4d:ba:0c:3b:c2:5a:1b:6d:a0:5b:2c:9d:cd:ea:af:04:61: fd:91:b7:cb:45:69:81:6c:de:0d:7a:28:00:9d:4d:c1:82:6a: ef:38:a4:bc:5e:dc:2f:72:aa:9c:39:18:29:17:d9:54:87:78: 40:e6:cd:2e:fa:4f:c4:a8:36:71:fa:14:43:87:22:df:df:da: 5b:43:fb:3e:03:aa:bf:8f:b5:54:ae:ca:ec:a2:05:b7:af:f1: b9:82:b7:b3:f5:75:17:18:c8:33:41:e5:00:cb:9f:7c:13:71: f3:da:41:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUxMjA3MDAzNzQ5WhcNMjUxMjE0MDAzNzQ5WjAYMRYwFAYD VQQDEw02OTM0Y2M1ZS0wMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmiOl/t6wZSGvjj6ok7PiVppwo+jxcCYgomWpSoorxdaZTeYOYGymK1k2rZWB xax/QFA3examCEtfhas1LWkW708t7OPXY0Z9oOvRaDikktJeN6NFiN+1u2c0sGrQ hmz6qlnvz5F+KeOgQbjXqVRUS1xjIBIIidAlCbtshxoRR/CxlQbKpjCM53zGdxdk 8NwtPIZff6T7yt0Gd9/fA/OiiYBorcslwriIkvXC18NDhmlI5A4cWfIQfYwYoQQQ 2hzYRndfiif45Zes+QlvhiLkTPB0wJy40P1NU/2pMCCR5fNTLzRqyjrmK8aZmUsk uklmPZ3p9B+zODgK75z+IdNa8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK10CJk Szq1Ih6qZdO+1BCAKN3EMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHU1C6gvwidoHVBCLkt2go8ny8Spgq9ZflmjHpgkjCLhYq+VxkF3Ox jHwWXIgzu9+KErmk7xE+GOS4BuR7n8avkIlKUFSZEb1CeoHJHPpQKbhKJgkIToqV FxJTj4t9GZ7x4/h04VNvj2OOqT1NHQ0mbD17AKkXszQH4w4DL9XDhVl85+sPMQ+D ce0NqaGXSzArTboMO8JaG22gWyydzeqvBGH9kbfLRWmBbN4NeigAnU3BgmrvOKS8 XtwvcqqcORgpF9lUh3hA5s0u+k/EqDZx+hRDhyLf39pbQ/s+A6q/j7VUrsrsogW3 r/G5grez9XUXGMgzQeUAy598E3Hz2kEy -----END CERTIFICATE-----Generated at Mon Dec 8 07:12:38 2025 by rpki-client