This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: fHz6GGxayU1NhCuePY2Hm9kKuIHjxlo00czAl72tPRg= Subject key identifier: 90:95:1D:2F:E3:8B:9F:2B:16:83:2E:BF:BC:4B:C6:D4:75:D0:B7:0F Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 027A Signing time: Tue 23 Dec 2025 00:36:13 +0000 Manifest this update: Tue 23 Dec 2025 00:36:13 +0000 Manifest next update: Tue 30 Dec 2025 00:36:13 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: +KlsalvYKcceFTsE9Em1wbqqBNbKg+qxU5kp1n0TQ0c=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: +md5I194ApAFzI9Vr3T+f9A2DpbYrH7HshUb/eOgpZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Dec 23 00:36:13 2025 GMT Not After : Dec 30 00:36:13 2025 GMT Subject: CN=6949e3fd-fb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:68:2f:2a:a5:3d:1a:7e:64:dc:6d:b3:c5:ea: aa:a6:f6:11:f0:19:d7:5d:fc:2f:87:02:cf:78:7d: 90:ed:d8:12:c2:0d:a6:ef:ef:48:ac:72:0a:4b:82: e8:da:72:f8:b0:69:5f:c2:a7:00:3d:30:b8:a8:de: ef:4e:96:4e:2a:71:c3:0b:e2:63:25:14:85:9c:b2: 19:d4:7c:27:73:fb:7d:39:0e:2c:85:57:3e:69:c0: cc:6a:b4:89:ac:d9:0f:63:f2:19:5a:c3:0d:4b:ac: c8:71:0e:b5:6f:98:b9:53:e7:33:95:2b:c3:b3:00: ec:51:26:e2:20:9c:34:36:f5:28:4b:8d:39:ae:7d: 2d:7f:d3:d1:4b:05:e6:68:9b:2e:6b:4a:98:29:68: 02:4b:ca:39:26:8d:7d:73:de:af:34:b1:a1:0a:43: 1a:d7:77:a0:4b:25:84:cf:00:63:b8:bd:99:ea:63: 9d:69:ae:bf:84:44:36:fb:a8:11:d1:6d:77:7a:03: d1:82:18:65:c3:6b:23:cf:62:a7:e2:b6:85:c3:e7: 8b:5c:7c:95:f4:21:78:ea:6c:4f:9c:f2:41:8b:1b: 75:4f:81:b2:bd:79:42:c6:e3:50:e9:43:77:b0:ab: 53:d3:21:58:df:0b:18:72:af:11:b1:bc:af:47:e3: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:95:1D:2F:E3:8B:9F:2B:16:83:2E:BF:BC:4B:C6:D4:75:D0:B7:0F X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:09:dc:05:3c:51:00:f1:2b:27:3b:db:5c:43:78:93:bc:60: 85:dc:1c:be:27:b3:64:f4:11:ea:f0:b6:5e:8f:b0:4d:d2:7c: 3d:59:10:3a:61:de:85:31:60:91:ce:aa:7a:71:59:72:26:a3: b2:95:c7:d1:d6:60:96:f4:fd:d2:97:dd:bc:0b:92:46:73:98: 46:6c:09:d8:d3:da:21:d7:ee:83:79:c1:b3:0e:f5:6a:b0:48: 56:f4:45:d2:a8:18:33:b2:82:9c:39:37:68:ab:e6:6f:8e:d5: 24:eb:73:87:08:2b:78:f3:90:26:7f:e4:2c:af:6a:4d:ab:22: 93:ba:7d:5f:77:da:fe:47:b4:0d:dd:81:2f:d8:67:a6:40:89: af:ea:7b:f0:fd:cb:32:85:e8:0b:ce:78:90:76:a9:eb:ec:48: 8b:18:af:ff:1d:f1:57:3c:b7:2a:c1:e5:87:2c:18:38:3e:e1: f8:c9:10:23:bd:f4:37:a4:6e:fe:c3:10:ec:3f:ec:b9:6d:e5: 24:0a:71:93:fb:dd:16:de:aa:23:2e:7c:03:44:d1:a2:3d:5c: b6:f1:2b:3a:45:38:e9:76:af:77:d1:fe:c2:fd:0c:33:63:e5: f2:93:75:1b:f1:fd:3d:31:b3:7a:8e:59:ec:3c:a2:d8:a0:ef: 85:a1:c7:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUxMjIzMDAzNjEzWhcNMjUxMjMwMDAzNjEzWjAYMRYwFAYD VQQDDA02OTQ5ZTNmZC1mYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjWgvKqU9Gn5k3G2zxeqqpvYR8BnXXfwvhwLPeH2Q7dgSwg2m7+9IrHIKS4Lo 2nL4sGlfwqcAPTC4qN7vTpZOKnHDC+JjJRSFnLIZ1Hwnc/t9OQ4shVc+acDMarSJ rNkPY/IZWsMNS6zIcQ61b5i5U+czlSvDswDsUSbiIJw0NvUoS405rn0tf9PRSwXm aJsua0qYKWgCS8o5Jo19c96vNLGhCkMa13egSyWEzwBjuL2Z6mOdaa6/hEQ2+6gR 0W13egPRghhlw2sjz2Kn4raFw+eLXHyV9CF46mxPnPJBixt1T4GyvXlCxuNQ6UN3 sKtT0yFY3wsYcq8RsbyvR+NToQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCVHS/j i58rFoMuv7xLxtR10LcPMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZCdwFPFEA8SsnO9tcQ3iTvGCF3By+J7Nk9BHq8LZej7BN0nw9WRA6 Yd6FMWCRzqp6cVlyJqOylcfR1mCW9P3Sl928C5JGc5hGbAnY09oh1+6DecGzDvVq sEhW9EXSqBgzsoKcOTdoq+ZvjtUk63OHCCt485Amf+Qsr2pNqyKTun1fd9r+R7QN 3YEv2GemQImv6nvw/csyhegLzniQdqnr7EiLGK//HfFXPLcqweWHLBg4PuH4yRAj vfQ3pG7+wxDsP+y5beUkCnGT+90W3qojLnwDRNGiPVy28Ss6RTjpdq930f7C/Qwz Y+Xyk3Ub8f09MbN6jlnsPKLYoO+Focca -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:50 2025 by rpki-client