This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: ngTUpzsJBynQ28dpZtbCVu8VOJ/I7C6DYXFan+ooNTI= Subject key identifier: FC:4A:5F:8A:48:39:10:51:EB:8B:53:BE:16:C5:03:F3:04:82:B3:20 Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: DB Signing time: Tue 23 Dec 2025 04:35:46 +0000 Manifest this update: Tue 23 Dec 2025 04:35:45 +0000 Manifest next update: Tue 30 Dec 2025 04:35:45 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: gAS6hIBx1Mw4hXdZAYl4nxjDqUUcyHEeSSvcUlvzgw8=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: b7PxFokUIXPBGz+iss/nauBD0ImGfyI3acw64tuMWC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Dec 23 04:35:45 2025 GMT Not After : Dec 30 04:35:45 2025 GMT Subject: CN=694a1c22-f8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:93:97:0b:db:b3:0c:f0:f6:6d:41:d7:71:48: a8:37:04:13:73:66:6b:23:54:55:f4:86:9e:ad:8c: 51:c1:94:bb:b5:a0:c5:0c:14:d1:43:b3:75:cf:5b: 73:3c:90:16:0a:a7:86:db:8d:f0:85:46:20:f3:0b: c3:b3:a6:ce:71:77:e2:7a:4f:8c:95:0f:36:42:ae: 18:b9:83:80:4a:ab:aa:96:81:8a:a0:3c:56:7b:22: f7:b2:14:84:69:ca:59:eb:eb:48:36:d7:1c:6a:49: ba:1a:a7:6d:3c:83:e3:22:40:64:f6:ff:92:ff:d4: 39:b5:71:2c:09:51:5a:ef:85:2b:64:84:c4:bd:fc: a3:4b:fd:37:48:c5:fc:cb:18:84:62:65:09:7c:df: ac:e1:00:68:7f:dd:04:85:ae:8b:56:ed:ee:c5:6c: bf:74:93:e8:64:16:18:ce:eb:a8:f5:dd:9d:1b:1d: 69:2f:fd:71:11:08:66:81:3f:c9:12:23:c0:f4:0a: 58:d2:d3:e1:d7:b7:5c:f9:fb:b7:7c:a5:b6:00:cb: dc:6e:80:11:1d:b0:8d:d5:9b:9c:8f:a5:59:69:6c: 97:3a:92:cd:bd:f2:db:5d:f4:5e:72:95:8a:c7:78: bf:bb:c4:1b:c5:97:15:bc:8a:c8:4f:c3:99:a9:ee: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4A:5F:8A:48:39:10:51:EB:8B:53:BE:16:C5:03:F3:04:82:B3:20 X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ec:24:2f:59:4a:c2:4c:9f:50:ed:8c:85:9f:9c:6b:99:94: 26:f0:be:2d:f0:46:e1:80:c5:16:41:7f:f5:5b:63:2e:7f:2b: 75:7f:bf:85:84:9b:7b:19:ce:59:57:d8:d4:dc:a3:20:4a:9e: 9b:75:e5:f6:1b:a7:a0:f0:b7:d1:92:01:30:10:9a:02:92:34: fe:bf:b2:e1:7f:c6:d8:b3:60:4e:ec:cd:18:2a:33:66:e2:82: 5f:e5:be:8c:c3:59:72:8f:ed:51:e1:82:07:a0:fa:38:2c:cc: 37:f6:0d:7e:fd:6c:26:90:2e:1a:86:be:10:96:60:ec:c8:67: 9e:f0:4c:be:81:0b:f7:0b:dd:e1:61:9e:d3:e4:4d:9c:d9:b2: 85:b1:4c:9e:4e:85:34:97:94:34:e4:02:2a:0a:00:5a:e0:f0: fa:e2:b0:65:e4:cc:b6:67:da:d1:5c:85:60:ec:96:ea:d8:97: 8c:7e:40:3f:f6:ae:2b:e4:73:c4:3f:14:55:a9:ae:e1:01:ec: 11:70:bb:dc:bd:67:f6:f5:bc:6b:74:1b:49:95:a2:12:57:23: 2c:5c:a0:3e:62:13:83:4a:ad:b0:0b:7a:12:ef:ca:e0:3e:6b: d0:b8:9b:5d:4d:56:d2:34:c5:82:90:e6:df:33:72:34:fe:55: 29:bc:65:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy NDIyRUI2NkYwHhcNMjUxMjIzMDQzNTQ1WhcNMjUxMjMwMDQzNTQ1WjAYMRYwFAYD VQQDDA02OTRhMWMyMi1mOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pOXC9uzDPD2bUHXcUioNwQTc2ZrI1RV9IaerYxRwZS7taDFDBTRQ7N1z1tz PJAWCqeG243whUYg8wvDs6bOcXfiek+MlQ82Qq4YuYOASquqloGKoDxWeyL3shSE acpZ6+tINtccakm6GqdtPIPjIkBk9v+S/9Q5tXEsCVFa74UrZITEvfyjS/03SMX8 yxiEYmUJfN+s4QBof90Eha6LVu3uxWy/dJPoZBYYzuuo9d2dGx1pL/1xEQhmgT/J EiPA9ApY0tPh17dc+fu3fKW2AMvcboARHbCN1Zucj6VZaWyXOpLNvfLbXfRecpWK x3i/u8QbxZcVvIrIT8OZqe6Y2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxKX4pI ORBR64tTvhbFA/MEgrMgMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0 bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51 VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg7CQvWUrCTJ9Q7YyFn5xrmZQm8L4t8EbhgMUWQX/1W2Mufyt1f7+F hJt7Gc5ZV9jU3KMgSp6bdeX2G6eg8LfRkgEwEJoCkjT+v7Lhf8bYs2BO7M0YKjNm 4oJf5b6Mw1lyj+1R4YIHoPo4LMw39g1+/WwmkC4ahr4QlmDsyGee8Ey+gQv3C93h YZ7T5E2c2bKFsUyeToU0l5Q05AIqCgBa4PD64rBl5My2Z9rRXIVg7Jbq2JeMfkA/ 9q4r5HPEPxRVqa7hAewRcLvcvWf29bxrdBtJlaISVyMsXKA+YhODSq2wC3oS78rg PmvQuJtdTVbSNMWCkObfM3I0/lUpvGUx -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:25 2025 by rpki-client