This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: BXAC1JhYkvmGhybDvi434Z1d0PRnr0zi1U22nWtf97Q= Subject key identifier: 5A:53:9C:C6:3C:8F:B5:17:36:54:62:65:5F:76:66:BD:4E:55:E8:86 Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0E93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0E88 Signing time: Tue 02 Dec 2025 17:22:05 +0000 Manifest this update: Tue 02 Dec 2025 17:22:04 +0000 Manifest next update: Tue 09 Dec 2025 17:22:04 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: EgJ8U3S1+7zSaAihtxIGbTBmVLoV/4pcCgpgLDuiwQE=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: KLPJPe472S0O1L4BKJwaeNcAQbh5Hn42irMA5av03NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 17:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3731 (0xe93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Dec 2 17:22:04 2025 GMT Not After : Dec 9 17:22:04 2025 GMT Subject: CN=692f203d-1c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:58:e1:fb:b6:87:d8:42:01:37:91:c7:3e: ba:3e:e5:c7:49:ce:0b:53:1c:85:19:8e:27:37:f0: 91:7c:1e:b7:83:70:11:3e:09:77:b3:be:2d:60:92: 33:b9:a2:be:e3:5d:c8:23:bd:2a:af:9b:44:ac:4a: a8:4c:ff:9e:ac:33:b2:f8:dd:22:cb:59:bd:ad:ff: 22:5a:e0:0d:cc:68:4d:88:c7:2c:b1:ec:9e:2d:2a: ee:3c:3f:c0:4e:2c:1f:4b:f0:45:6f:2a:57:91:d1: a4:4a:8c:44:be:28:ae:ed:9a:41:84:09:4f:5c:4b: 89:5f:60:ac:99:82:5a:c8:b1:8a:96:ca:b4:72:de: c6:db:b3:58:1e:dc:1b:5c:d6:a8:ad:8e:b3:9f:e2: 7b:af:eb:67:e7:29:7a:5d:a0:9b:87:d4:9e:92:32: 64:6a:e4:f7:95:52:82:ea:70:0c:1c:65:98:d9:19: 2b:f2:d6:ab:ee:06:6c:78:ac:df:04:34:c5:67:27: 61:61:e6:82:bc:4b:97:94:9b:03:ee:f0:37:4c:71: d3:85:61:92:a2:75:af:92:dc:6b:3f:07:89:94:2e: 73:cf:55:51:39:9e:27:26:2e:c4:c3:2b:31:c5:f9: de:75:13:1e:42:31:46:f0:7c:8a:bf:9b:8b:62:de: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:53:9C:C6:3C:8F:B5:17:36:54:62:65:5F:76:66:BD:4E:55:E8:86 X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:03:94:f1:60:a8:e6:2a:5b:a0:b4:f7:db:ee:a7:47:10:79: 73:cb:54:79:79:f0:e8:d0:6d:8b:c7:86:f1:9b:17:29:e9:ec: 80:59:29:43:ca:dd:70:03:a6:ae:7d:5c:1e:90:cc:25:84:4a: 1f:6a:79:1a:a1:40:fe:5c:41:de:88:1d:1a:4d:a7:f5:1b:41: 37:32:1d:9d:ec:70:4c:51:54:c9:43:81:14:69:58:56:ce:64: b6:76:f8:da:71:60:6e:e8:bf:36:15:5b:67:f2:02:1c:8c:8e: 64:88:8a:56:a9:94:21:03:13:b1:e7:8a:b7:1c:25:fc:b6:3c: 57:12:4e:4c:60:51:c8:54:ff:6d:f8:f9:38:e2:60:4a:a8:87: 12:bf:1f:71:a2:f3:f8:0b:3e:a6:9d:16:34:5a:21:f1:6f:c6: eb:a4:2d:5c:c4:0e:07:85:e6:57:fc:83:85:35:f7:fc:6f:76: 82:7d:ca:20:1b:74:9e:78:94:6d:f8:59:42:fc:fe:c5:d5:3c: c4:a8:9c:90:4b:df:d7:06:bf:5b:d9:0b:8d:ad:af:f8:8e:76: cb:04:10:43:94:50:a7:dd:79:d9:f1:9b:f2:ff:89:b8:77:82: 5e:8b:ec:bf:49:7e:8b:c2:f3:59:d2:cc:78:ab:47:9d:ac:03: d3:f5:98:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjUxMjAyMTcyMjA0WhcNMjUxMjA5MTcyMjA0WjAYMRYwFAYD VQQDEw02OTJmMjAzZC0xYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF5Y4fu2h9hCATeRxz66PuXHSc4LUxyFGY4nN/CRfB63g3ARPgl3s74tYJIz uaK+413II70qr5tErEqoTP+erDOy+N0iy1m9rf8iWuANzGhNiMcsseyeLSruPD/A TiwfS/BFbypXkdGkSoxEviiu7ZpBhAlPXEuJX2CsmYJayLGKlsq0ct7G27NYHtwb XNaorY6zn+J7r+tn5yl6XaCbh9SekjJkauT3lVKC6nAMHGWY2Rkr8tar7gZseKzf BDTFZydhYeaCvEuXlJsD7vA3THHThWGSonWvktxrPweJlC5zz1VROZ4nJi7Ewysx xfnedRMeQjFG8HyKv5uLYt7SHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpTnMY8 j7UXNlRiZV92Zr1OVeiGMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPA5TxYKjmKlugtPfb7qdHEHlzy1R5efDo0G2Lx4bxmxcp6eyAWSlD yt1wA6aufVwekMwlhEofankaoUD+XEHeiB0aTaf1G0E3Mh2d7HBMUVTJQ4EUaVhW zmS2dvjacWBu6L82FVtn8gIcjI5kiIpWqZQhAxOx54q3HCX8tjxXEk5MYFHIVP9t +Pk44mBKqIcSvx9xovP4Cz6mnRY0WiHxb8brpC1cxA4HheZX/IOFNff8b3aCfcog G3SeeJRt+FlC/P7F1TzEqJyQS9/XBr9b2QuNra/4jnbLBBBDlFCn3XnZ8Zvy/4m4 d4Jei+y/SX6LwvNZ0sx4q0edrAPT9Zga -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:34 2025 by rpki-client