This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json) Hash identifier: ES0AcFR7d2McSYG+pN1qP3dvThM/ZVDZmP6SpuEcZ5Q= Subject key identifier: 9F:D9:C4:E7:3D:AD:68:77:3A:6F:FF:0E:B0:57:99:1E:91:DC:C3:17 Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft Manifest number: 0131 Signing time: Tue 23 Dec 2025 03:35:13 +0000 Manifest this update: Tue 23 Dec 2025 03:35:13 +0000 Manifest next update: Tue 30 Dec 2025 03:35:13 +0000 Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: Qa5ki7gHUdL2FzZl1DDeq63+zxKpjPWdpy+rmuc/Qp8=) 2: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: kRUKk6YhznpQLf70+sbW+4rHruxwNLVLHD+xyjgrv/8=) 3: A697738410FA11EF9A068536C4F9AE02.roa (hash: GgKSSa0DZkr/DMOZ+SWiE+267xJNKIhRXUimhakcIXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: Dec 23 03:35:13 2025 GMT Not After : Dec 30 03:35:13 2025 GMT Subject: CN=694a0df1-f40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e1:02:01:67:c9:09:cb:06:27:a7:0c:36:aa: a4:8a:d0:c1:55:b8:de:7d:d2:55:62:f8:13:8d:2b: c4:31:dc:25:5b:48:f0:41:91:8a:44:e4:5d:94:ad: 7e:d0:ee:a1:13:c6:26:50:c3:f3:79:86:0a:72:76: e3:ae:0c:27:cf:c4:38:8c:f6:87:36:54:98:13:a5: 28:20:d3:9c:67:33:49:40:1d:1d:e0:bd:fd:5e:99: a0:2a:10:e0:e1:b9:38:5f:23:e9:9e:75:c5:79:aa: 16:70:82:bf:a3:50:c5:91:73:bb:25:e8:2b:f5:86: e9:09:ca:13:cc:92:f6:cc:b2:d9:25:d5:f4:f6:f9: 01:33:59:7f:fd:6e:22:2d:30:98:9c:39:5b:45:ab: 7e:75:5d:2a:2c:7a:c6:e0:87:97:a9:f9:41:b2:56: 71:3b:ed:03:e2:0c:e3:84:be:65:e5:19:c3:b2:5a: 68:ec:be:ac:fa:0b:da:ba:b8:85:07:da:79:af:eb: 96:e2:04:ae:d3:07:16:a9:c3:08:49:a9:29:0b:88: b8:aa:85:f6:9a:a3:de:01:bc:5e:6a:0d:63:aa:bb: fa:d7:1f:fa:31:18:21:c1:8c:c7:04:27:ee:c4:44: b4:9d:11:4c:b9:1b:6f:80:fc:30:ae:fa:a5:9c:58: 70:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D9:C4:E7:3D:AD:68:77:3A:6F:FF:0E:B0:57:99:1E:91:DC:C3:17 X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b8:c5:7d:10:aa:bc:0c:78:e7:99:e0:42:27:03:06:74:3f: 9a:a9:11:4e:76:c0:6a:a2:9e:22:25:13:68:37:5f:e3:23:27: 5a:7b:97:3e:71:ad:1b:1f:65:2e:a7:85:f4:dc:09:07:b6:8c: f0:5f:84:d4:2b:ba:2c:4e:11:5a:d3:73:3c:49:17:39:45:e6: 1e:00:f8:ef:f1:fc:eb:d7:00:2c:b1:3c:da:f3:7a:d3:fc:c1: a9:7c:95:81:ce:fe:a0:96:2b:18:6e:1e:af:4f:66:93:12:91: dd:62:1e:56:0b:44:3e:26:52:a4:d6:aa:7f:0a:e1:0d:bd:fc: 8f:2d:d1:13:4e:ec:da:95:81:eb:f8:51:22:b6:84:1b:92:ce: c7:9e:2d:b6:07:01:bc:94:14:89:f6:bc:de:ca:d4:c8:5a:3a: 2f:00:9a:ed:a1:80:b8:17:04:c2:e7:60:19:24:b1:3b:2d:a2: bf:00:9a:6d:39:ab:75:16:f1:66:9c:31:40:0a:b7:ad:6f:68: af:10:4b:7b:64:fd:66:c7:b2:41:06:1a:0d:30:f9:fb:de:ac: 78:2a:c3:9a:66:b4:94:f6:db:c2:0f:31:aa:04:7f:79:36:61: cf:07:c3:3a:86:94:57:6d:14:9c:e4:14:c5:1a:ce:34:c0:1b: a7:73:b1:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRjExMTAvBgNVBAUTKDgwN0MwNDBGQTkwMUU1RDg2OTVBNjUzNERFNjZDM0Q2 QTBCRkJDQzUwHhcNMjUxMjIzMDMzNTEzWhcNMjUxMjMwMDMzNTEzWjAYMRYwFAYD VQQDDA02OTRhMGRmMS1mNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+ECAWfJCcsGJ6cMNqqkitDBVbjefdJVYvgTjSvEMdwlW0jwQZGKRORdlK1+ 0O6hE8YmUMPzeYYKcnbjrgwnz8Q4jPaHNlSYE6UoINOcZzNJQB0d4L39XpmgKhDg 4bk4XyPpnnXFeaoWcIK/o1DFkXO7Jegr9YbpCcoTzJL2zLLZJdX09vkBM1l//W4i LTCYnDlbRat+dV0qLHrG4IeXqflBslZxO+0D4gzjhL5l5RnDslpo7L6s+gvauriF B9p5r+uW4gSu0wcWqcMISakpC4i4qoX2mqPeAbxeag1jqrv61x/6MRghwYzHBCfu xES0nRFMuRtvgPwwrvqlnFhwbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/ZxOc9 rWh3Om//DrBXmR6R3MMXMB8GA1UdIwQYMBaAFIB8BA+pAeXYaVplNN5mw9agv7zF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGMS85NUI3MTFDNDEw RjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVkaHBXbVUwM21iRDFxQ192 TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGMS85NUI3MTFDNDEwRjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVk aHBXbVUwM21iRDFxQ192TVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFuMV9EKq8DHjnmeBCJwMGdD+aqRFOdsBqop4iJRNoN1/jIydae5c+ ca0bH2Uup4X03AkHtozwX4TUK7osThFa03M8SRc5ReYeAPjv8fzr1wAssTza83rT /MGpfJWBzv6glisYbh6vT2aTEpHdYh5WC0Q+JlKk1qp/CuENvfyPLdETTuzalYHr +FEitoQbks7Hni22BwG8lBSJ9rzeytTIWjovAJrtoYC4FwTC52AZJLE7LaK/AJpt Oat1FvFmnDFACretb2ivEEt7ZP1mx7JBBhoNMPn73qx4KsOaZrSU9tvCDzGqBH95 NmHPB8M6hpRXbRSc5BTFGs40wBunc7H/ -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:39 2025 by rpki-client