This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: Gj0Gzw2epHrk+lMqGXt5UFEQpscAUa0UF+ta3CZjCpQ= Subject key identifier: 13:61:94:2E:57:82:40:85:01:40:A4:B2:D0:A2:BB:15:87:3C:05:56 Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 0257 Signing time: Tue 23 Dec 2025 00:41:41 +0000 Manifest this update: Tue 23 Dec 2025 00:41:41 +0000 Manifest next update: Tue 30 Dec 2025 00:41:41 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: 85opavGAgLJ2TPSEzFKrM5q2OnE7QF8dmd7qCeeIfj4=) 2: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: +F3Yx2THIPF6j23PtMP7M18kfvkZfsgfMjQvz9d74hQ=) 3: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: xUB5DKXsTfrAbKycpb1RdFbgULYORlNEi/ZjsO+ThHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Dec 23 00:41:41 2025 GMT Not After : Dec 30 00:41:41 2025 GMT Subject: CN=6949e545-903f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:db:ab:e8:ae:65:41:2c:23:e6:9f:7c:0b:1f: a2:a6:da:ee:5b:46:6e:50:75:83:b9:c8:82:ea:cd: e2:6e:50:85:f1:eb:66:28:d1:69:85:c8:ce:ca:15: be:d2:42:12:67:4b:b9:e4:16:a6:68:22:b4:6e:f2: 50:da:cd:51:27:24:68:50:ee:8b:22:18:69:9f:1f: 2e:dd:22:6b:68:ea:f6:cd:a6:e6:68:6d:ce:2d:de: 5b:42:0d:bd:eb:f0:cf:46:15:e0:aa:b0:1e:06:04: 30:ff:77:15:6a:42:fd:1b:a7:bc:8b:5f:13:24:60: aa:65:dc:bc:b4:c2:7a:d7:0a:4e:66:47:ef:33:ce: f9:6a:d8:a9:b5:d5:32:57:cd:34:2c:c5:46:69:5d: eb:f1:9c:74:64:c2:4b:8e:8a:62:b9:f0:6a:28:5a: 04:d8:f5:d8:be:b4:fc:54:f4:d3:16:24:d0:11:4f: 2a:56:aa:43:b5:b9:cb:ef:cc:bb:1b:e1:51:49:61: 01:e8:86:d0:54:d2:97:e0:f8:6a:d3:11:ed:86:c3: 02:d8:01:89:8c:8e:aa:a0:ea:81:97:1d:a0:ea:f8: 43:4f:00:e5:11:05:75:d9:f7:20:ae:c5:90:8a:bf: 9e:ac:f6:3f:75:d9:28:73:bb:bb:6c:8a:b5:78:21: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:61:94:2E:57:82:40:85:01:40:A4:B2:D0:A2:BB:15:87:3C:05:56 X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e5:ac:d3:83:ad:1a:31:14:9c:82:f6:8c:42:cc:3a:a6:c9: f8:01:7b:29:50:40:6c:f5:86:16:4d:e2:94:8e:47:81:6e:d3: 51:21:e8:bb:af:e0:0a:2e:43:a4:fd:b5:c4:51:5e:14:12:bd: de:9f:4b:3a:6a:cb:15:83:60:be:be:fe:ef:2c:a7:d1:88:c7: 1b:0a:e5:81:2e:ce:5b:a2:02:0e:20:53:68:d2:bb:03:d5:60: 4f:d1:92:9a:4b:6e:81:ae:05:fb:3b:d0:84:25:6b:0a:49:2d: 9a:66:6a:77:d3:1a:3c:8d:a9:42:91:94:2f:d8:e8:47:2c:4e: ea:eb:a2:7c:e9:43:b9:44:8d:9f:9d:5d:85:ce:62:55:5f:c6: 67:f1:63:e0:8a:8c:bd:27:c9:89:0e:a8:89:8a:30:4a:a8:7f: e2:0c:87:6a:c0:7e:d6:56:7d:f0:45:ac:5d:7b:7e:61:e4:6d: cd:bb:67:9a:3b:31:21:d2:16:a5:0b:0f:dd:a2:3a:61:c0:74: 4b:c6:33:ee:0d:ce:50:31:c1:a5:73:f2:f4:2f:5f:cc:3d:eb: 8f:1a:c0:8d:f3:de:98:0d:fc:ad:c8:76:34:62:70:28:a4:af: e8:4f:a2:7f:54:09:e2:ff:f1:33:32:64:41:a2:16:35:b3:c3: 78:5b:66:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUxMjIzMDA0MTQxWhcNMjUxMjMwMDA0MTQxWjAYMRYwFAYD VQQDDA02OTQ5ZTU0NS05MDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dur6K5lQSwj5p98Cx+iptruW0ZuUHWDuciC6s3iblCF8etmKNFphcjOyhW+ 0kISZ0u55BamaCK0bvJQ2s1RJyRoUO6LIhhpnx8u3SJraOr2zabmaG3OLd5bQg29 6/DPRhXgqrAeBgQw/3cVakL9G6e8i18TJGCqZdy8tMJ61wpOZkfvM875atiptdUy V800LMVGaV3r8Zx0ZMJLjopiufBqKFoE2PXYvrT8VPTTFiTQEU8qVqpDtbnL78y7 G+FRSWEB6IbQVNKX4Phq0xHthsMC2AGJjI6qoOqBlx2g6vhDTwDlEQV12fcgrsWQ ir+erPY/ddkoc7u7bIq1eCE1AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNhlC5X gkCFAUCkstCiuxWHPAVWMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi5azTg60aMRScgvaMQsw6psn4AXspUEBs9YYWTeKUjkeBbtNRIei7 r+AKLkOk/bXEUV4UEr3en0s6assVg2C+vv7vLKfRiMcbCuWBLs5bogIOIFNo0rsD 1WBP0ZKaS26BrgX7O9CEJWsKSS2aZmp30xo8jalCkZQv2OhHLE7q66J86UO5RI2f nV2FzmJVX8Zn8WPgioy9J8mJDqiJijBKqH/iDIdqwH7WVn3wRaxde35h5G3Nu2ea OzEh0halCw/dojphwHRLxjPuDc5QMcGlc/L0L1/MPeuPGsCN896YDfytyHY0YnAo pK/oT6J/VAni//EzMmRBohY1s8N4W2ap -----END CERTIFICATE-----Generated at Tue Dec 23 20:35:10 2025 by rpki-client