This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft File: gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json) Hash identifier: 4RnRwqdMD7Qj40ywWQiLFlsoJhqyca7eDlskAm19xaM= Subject key identifier: 1F:DA:93:A2:5A:B8:55:DC:27:C2:AE:43:91:EE:08:4E:24:E2:88:C2 Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 Certificate issuer: /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft Manifest number: 011A Signing time: Tue 23 Dec 2025 03:48:16 +0000 Manifest this update: Tue 23 Dec 2025 03:48:16 +0000 Manifest next update: Tue 30 Dec 2025 03:48:16 +0000 Files and hashes: 1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: KqeSzcgPItMViYHqPgp5NwwZpgbgM7GgTT9AW6IWsvY=) 2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: KhqMoTs+Qi/II5aRP9wPpcsu1xRmCyMAj25hDB2Fy0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Validity Not Before: Dec 23 03:48:16 2025 GMT Not After : Dec 30 03:48:16 2025 GMT Subject: CN=694a1100-067d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:ca:9d:6f:d5:a7:a0:4e:eb:1b:4a:ed:41: 1c:4e:cb:54:c7:7a:82:f5:6b:1b:e2:71:9a:98:10: 8c:f5:76:00:2a:27:26:65:74:22:65:b8:dc:df:12: ed:7c:0d:ff:1d:62:97:9a:0e:0e:70:9a:e0:02:8a: f3:35:2b:f0:40:2a:b4:76:21:4a:46:8d:e2:df:8a: 12:22:2a:82:a8:c3:99:a4:e3:1d:f6:7f:b5:16:fe: c5:4a:63:9b:9f:a3:ff:e8:3d:77:44:57:c0:9d:a0: b7:3c:2d:5f:f3:43:e3:a6:81:87:ae:7e:6b:c8:71: 2c:df:66:0f:04:6e:d7:e4:57:68:7b:9a:a3:a0:2f: dc:12:1d:29:ea:b1:c7:e5:be:5c:d2:17:f2:5b:b9: f3:62:1b:38:6f:19:6e:de:4f:b1:8a:e6:b9:47:a2: ab:cf:87:98:4c:43:ff:d4:1a:17:28:98:7e:89:2b: cc:ee:44:2c:a4:64:53:65:b8:2c:d5:6e:68:76:77: 2f:93:91:3e:3c:1a:b1:c1:4d:ed:3e:2e:d7:6c:ed: b4:57:e8:bd:64:95:9b:34:47:d2:97:f2:f1:4b:44: cb:bd:b5:ed:29:e7:6b:1e:0e:84:17:90:e6:f3:a6: 68:ae:fd:0d:b9:3e:dd:43:13:db:20:ef:26:39:53: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DA:93:A2:5A:B8:55:DC:27:C2:AE:43:91:EE:08:4E:24:E2:88:C2 X509v3 Authority Key Identifier: keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:99:4a:88:e4:36:0c:14:f8:1a:e2:70:e7:c7:08:39:44:89: c0:4d:b9:7d:d2:6b:73:28:1f:d9:c8:6a:44:29:ef:5b:ff:e2: bd:98:9a:0c:a3:92:c2:a0:4c:9b:98:c7:75:2c:d5:e9:a0:9f: 3b:6f:f7:8d:d6:8b:12:a3:5c:71:56:31:d1:b4:1b:86:eb:5b: 81:71:da:32:85:a6:fe:b9:ea:e2:8d:30:92:a0:67:32:64:22: bd:65:fb:d8:5a:b8:b3:36:6e:8f:fb:d3:6b:4e:9a:f6:1b:54: 81:67:3f:63:c9:7b:21:00:54:30:81:da:b7:78:ca:3d:c1:22: 1d:e1:05:14:6f:cb:23:3c:f5:d4:46:da:0e:0c:69:d5:d9:50: 1a:87:44:f6:7d:23:43:d7:81:cc:53:1b:cd:c3:0d:b1:ac:05: bb:18:0d:09:88:35:fa:fc:34:36:fe:bc:c9:2d:4b:0d:ff:39: 08:1e:87:74:16:37:46:f0:db:f2:f8:fd:a0:ee:db:22:89:3f: 9a:ee:43:13:fb:a4:18:ac:76:48:64:59:bf:2f:71:fc:4b:8d: b6:7e:99:ec:af:ca:ff:ce:9b:b6:5e:05:46:1b:34:97:3e:1f: c1:b3:0d:87:bb:b8:61:a6:c9:26:3d:62:11:c2:69:87:6c:df: c3:b0:f5:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJFNkExMTAvBgNVBAUTKDgyMzEwMEI3NUU1REQ0MUExRTdDMzI4MUMzNTcxM0Y0 NEJFODZDOTgwHhcNMjUxMjIzMDM0ODE2WhcNMjUxMjMwMDM0ODE2WjAYMRYwFAYD VQQDDA02OTRhMTEwMC0wNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqrKnW/Vp6BO6xtK7UEcTstUx3qC9Wsb4nGamBCM9XYAKicmZXQiZbjc3xLt fA3/HWKXmg4OcJrgAorzNSvwQCq0diFKRo3i34oSIiqCqMOZpOMd9n+1Fv7FSmOb n6P/6D13RFfAnaC3PC1f80PjpoGHrn5ryHEs32YPBG7X5Fdoe5qjoC/cEh0p6rHH 5b5c0hfyW7nzYhs4bxlu3k+xiua5R6Krz4eYTEP/1BoXKJh+iSvM7kQspGRTZbgs 1W5odncvk5E+PBqxwU3tPi7XbO20V+i9ZJWbNEfSl/LxS0TLvbXtKedrHg6EF5Dm 86Zorv0NuT7dQxPbIO8mOVMYhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/ak6Ja uFXcJ8KuQ5HuCE4k4ojCMB8GA1UdIwQYMBaAFIIxALdeXdQaHnwygcNXE/RL6GyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkU2QS9BRTM3M0Q4NDMy MzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFCb2VmREtCdzFjVDlFdm9i SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqRUF0MTVkMUJvZWZES0J3MWNUOUV2b2JKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkU2QS9BRTM3M0Q4NDMyMzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFC b2VmREtCdzFjVDlFdm9iSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLmUqI5DYMFPga4nDnxwg5RInATbl90mtzKB/ZyGpEKe9b/+K9mJoM o5LCoEybmMd1LNXpoJ87b/eN1osSo1xxVjHRtBuG61uBcdoyhab+uerijTCSoGcy ZCK9ZfvYWrizNm6P+9NrTpr2G1SBZz9jyXshAFQwgdq3eMo9wSId4QUUb8sjPPXU RtoODGnV2VAah0T2fSND14HMUxvNww2xrAW7GA0JiDX6/DQ2/rzJLUsN/zkIHod0 FjdG8Nvy+P2g7tsiiT+a7kMT+6QYrHZIZFm/L3H8S422fpnsr8r/zpu2XgVGGzSX Ph/Bsw2Hu7hhpskmPWIRwmmHbN/DsPUK -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:12 2025 by rpki-client