This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: +x3dkswFLK1Am8IOi0JryeDhTfPBPtLHemwhPS6pRiM= Subject key identifier: DF:99:A8:88:F3:F1:F3:02:9A:31:CC:1E:B1:EE:D5:67:EE:E3:DD:34 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 2317 Signing time: Mon 22 Dec 2025 15:40:23 +0000 Manifest this update: Mon 22 Dec 2025 15:40:23 +0000 Manifest next update: Mon 29 Dec 2025 15:40:23 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: 1IdDCcNlhgEePKuvTFo4TvavUJl6dfNzu7IBhfWePrU=) 2: 55D95690A13811F0BF53567FC4F9AE02.roa (hash: wfIg4YQ25Mg9FB53wM9axrO11ggNzJyyDGc+cl9NhDU=) 3: 05596FAEBA1811F080138957C4F9AE02.roa (hash: h0JWy7ziGkjmOsJL8dHAJhvnalo12yE0dGnYrcqdH2A=) 4: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (hash: EqPoHokWPSQ1L2lcAAXRF+UXl8dKiWjU9iYk2iUWo3s=) 5: ECB36EBCA54211F08D0FD466C4F9AE02.roa (hash: SuKYaB6T0tGfEKvGlTa0CLqgp2xb848WliNxbdmfrSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9063 (0x2367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Dec 22 15:40:23 2025 GMT Not After : Dec 29 15:40:23 2025 GMT Subject: CN=69496667-7edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:68:3c:1c:46:bf:42:17:4a:18:f5:6c:e1: b0:ca:ca:de:fe:e3:57:30:c7:15:b9:77:80:0a:e4: 35:5f:b2:de:10:f2:a6:b9:7f:c2:d9:02:25:01:bf: 68:ea:49:f2:69:56:ae:a2:df:a1:38:69:71:78:9a: 4d:f8:82:af:aa:19:dc:0f:e3:d5:bc:1c:c4:bc:3a: f7:a1:fd:73:00:d0:96:bc:a2:8b:1d:45:35:68:63: 88:71:64:61:5f:f5:5a:70:9c:36:66:17:89:0f:1a: 65:e8:31:eb:5f:bf:ad:f2:d7:f7:eb:2a:84:7e:5f: b7:8d:27:74:ba:65:92:ca:4f:95:8e:e2:a6:d0:7e: 7b:6f:30:a5:24:20:e0:48:c6:a1:10:16:8d:5c:ef: ad:f7:f1:b1:50:c5:4f:6d:f6:f3:99:26:29:7b:d6: 83:ef:fc:f9:d1:ae:74:e2:a5:58:b4:0d:e5:2d:ab: 49:5a:b3:5f:72:b8:b8:2d:5b:17:7a:39:3f:47:62: 57:46:b5:ef:3e:dc:61:19:05:bc:5c:8a:d9:7f:88: 93:21:42:3a:89:78:49:9b:c6:ea:39:26:57:c8:7d: 20:1d:27:1b:d4:e1:89:4f:95:a4:6a:1a:87:a5:ad: 7e:29:10:d6:60:b8:8f:c7:89:3e:55:5b:cf:3f:e0: 6f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:99:A8:88:F3:F1:F3:02:9A:31:CC:1E:B1:EE:D5:67:EE:E3:DD:34 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:00:cd:de:b5:51:7b:d0:69:3d:d9:07:ca:1a:a7:3f:0e:42: 25:a8:6b:10:fe:9c:ad:b5:a2:d1:4e:11:08:05:9f:e5:d4:e1: 1b:15:e7:ab:89:d1:24:c5:7a:11:23:61:6b:95:6c:b1:17:36: b9:63:2e:d4:77:28:9f:91:24:4d:ce:7f:27:37:55:7b:7b:79: f0:ac:ed:be:a0:31:44:46:9f:ff:75:9d:b1:15:b0:bc:f7:3f: ef:88:b7:e3:22:a4:ca:af:c2:92:98:b5:6f:b8:b0:5b:bd:84: 69:b4:42:17:77:65:26:09:f5:91:aa:de:bb:ae:30:ae:18:9f: 9a:00:8f:b9:34:e0:b3:4b:6b:04:41:7f:26:40:65:0e:73:42: c8:27:19:c5:8d:25:de:e8:14:1a:e0:33:1a:7c:f0:a9:29:5a: 63:0b:9f:77:34:49:77:fb:8a:87:57:13:f3:18:bb:33:6d:ab: bc:b6:1b:29:c9:61:8c:06:a5:1f:3f:75:03:29:5a:85:37:4f: 38:fc:03:2a:90:4b:84:40:8c:a4:5a:2d:e1:5f:e7:87:51:db: f9:fe:2d:b8:19:64:b6:52:56:d4:da:19:7e:a0:ab:6f:e6:35: d4:52:ca:1c:97:bd:93:ca:45:72:33:2f:d5:8d:f0:ca:6e:8e: 9c:56:58:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUxMjIyMTU0MDIzWhcNMjUxMjI5MTU0MDIzWjAYMRYwFAYD VQQDDA02OTQ5NjY2Ny03ZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV5oPBxGv0IXShj1bOGwysre/uNXMMcVuXeACuQ1X7LeEPKmuX/C2QIlAb9o 6knyaVauot+hOGlxeJpN+IKvqhncD+PVvBzEvDr3of1zANCWvKKLHUU1aGOIcWRh X/VacJw2ZheJDxpl6DHrX7+t8tf36yqEfl+3jSd0umWSyk+VjuKm0H57bzClJCDg SMahEBaNXO+t9/GxUMVPbfbzmSYpe9aD7/z50a504qVYtA3lLatJWrNfcri4LVsX ejk/R2JXRrXvPtxhGQW8XIrZf4iTIUI6iXhJm8bqOSZXyH0gHScb1OGJT5WkahqH pa1+KRDWYLiPx4k+VVvPP+Bv0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+ZqIjz 8fMCmjHMHrHu1Wfu4900MB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIAM3etVF70Gk92QfKGqc/DkIlqGsQ/pyttaLRThEIBZ/l1OEbFeer idEkxXoRI2FrlWyxFza5Yy7UdyifkSRNzn8nN1V7e3nwrO2+oDFERp//dZ2xFbC8 9z/viLfjIqTKr8KSmLVvuLBbvYRptEIXd2UmCfWRqt67rjCuGJ+aAI+5NOCzS2sE QX8mQGUOc0LIJxnFjSXe6BQa4DMafPCpKVpjC593NEl3+4qHVxPzGLszbau8thsp yWGMBqUfP3UDKVqFN084/AMqkEuEQIykWi3hX+eHUdv5/i24GWS2UlbU2hl+oKtv 5jXUUsocl72TykVyMy/VjfDKbo6cVlix -----END CERTIFICATE-----Generated at Tue Dec 23 04:11:47 2025 by rpki-client