This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft File: Gb2CLT62_26TcCRe6HS-qeuL7lU.mft (raw, json) Hash identifier: luznwQ+kmBYLMPZ9BRZQe+Sj4e3WXHLKj9mI025NUxg= Subject key identifier: 15:C8:70:D2:C1:C4:06:FA:45:37:BB:39:EF:30:44:A5:21:62:20:76 Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft Manifest number: 27 Signing time: Wed 03 Dec 2025 05:55:35 +0000 Manifest this update: Wed 03 Dec 2025 05:55:34 +0000 Manifest next update: Wed 10 Dec 2025 05:55:34 +0000 Files and hashes: 1: Gb2CLT62_26TcCRe6HS-qeuL7lU.crl (hash: kr2c0Nfi0pF/wZQ5pO8hyG0DqtytN7PIIrUel/3OwQY=) 2: 1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (hash: OPNRGLnOYn0FnL/Q0g2b6h1BOq6mkXKBmGsTnzds7jI=) 3: 208EBFD6A2F811F0ACA39B18C4F9AE02.roa (hash: eFEue/RfyteO6Qa9ns27FA3e4ja3uTb1hbjiGbGNmwg=) 4: 1F8F98EEA2F811F0ACA39B18C4F9AE02.roa (hash: /KNy5MCRgQfgCQnLITh3QQ/nwilhQ6gGRg8j3dhXM+U=) 5: 1E0F8E02A2F811F0ACA39B18C4F9AE02.roa (hash: a9ce5XpTdFJn+nuz0UuFLj9iqDPeMhg24PniTTaMiuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Validity Not Before: Dec 3 05:55:34 2025 GMT Not After : Dec 10 05:55:34 2025 GMT Subject: CN=692fd0d7-edf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:8e:67:36:c4:2d:98:65:09:78:10:96:ea: ea:b6:2b:4b:58:c1:15:7b:1b:66:2e:d3:c6:50:0e: 20:09:5c:a4:c6:6c:10:6f:82:93:96:c5:ab:ad:64: 99:f5:7c:c8:02:fa:71:4a:bc:7f:7c:c8:26:0b:ca: 98:70:2d:2a:b2:49:1f:cd:e3:bd:8e:55:e2:22:36: 58:86:da:f5:82:22:19:7f:23:66:26:7f:e4:6f:1f: 8a:6c:0c:86:e8:56:65:3b:c6:db:f8:c3:b7:58:03: f9:f2:f9:d8:a9:23:bd:9e:b1:c2:f7:50:09:d2:ca: 6b:c2:28:45:c7:f3:c4:5d:10:12:7b:4d:4d:8d:d4: 57:5c:85:cf:86:a3:d5:51:be:67:00:be:90:82:cb: 4c:8d:0b:c9:6f:79:38:17:93:44:cc:1c:ed:23:bc: 8d:5a:fe:07:28:f5:17:50:95:6c:3d:64:4a:4d:aa: e1:d8:ad:8a:5b:67:7d:57:4e:74:cb:39:8f:e5:99: 67:1f:a6:b6:ac:db:5f:02:62:fa:ed:9f:95:f2:c1: 10:69:5e:29:34:59:ba:b2:46:ad:24:dd:5a:3d:43: ea:ff:e3:5b:21:22:fb:4b:0b:da:fb:cc:94:2f:34: db:8c:88:84:dd:fa:25:60:7c:68:42:4b:4c:74:12: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C8:70:D2:C1:C4:06:FA:45:37:BB:39:EF:30:44:A5:21:62:20:76 X509v3 Authority Key Identifier: keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:52:78:53:37:e4:a6:4a:92:6f:f3:dc:1f:69:43:68:a4:c3: fc:6d:f3:6c:36:09:af:93:e9:2b:86:a5:e4:51:ab:0b:9a:86: e0:c0:9e:a9:8e:e4:94:11:62:02:0d:3c:37:3a:68:9f:45:36: 98:21:2d:d6:82:41:d8:bf:8e:e5:14:31:29:62:4a:f4:ae:9b: 40:4a:03:e2:04:4e:5b:56:de:d7:e9:09:33:63:fc:1b:23:94: 30:4e:4c:af:64:73:d1:ff:05:15:dc:5d:48:2a:93:a1:8d:cc: 69:fb:13:0c:18:3f:d0:82:b2:be:0a:68:06:65:f7:54:13:ff: 7f:49:13:f6:21:c2:dc:1c:f6:cf:56:10:ad:a7:66:01:a3:62: 19:67:6e:7b:68:ee:84:cf:49:e4:0c:49:1b:20:59:2b:f8:9f: aa:06:63:88:d9:e8:7f:2e:36:63:66:2a:24:c8:d5:f7:38:c5: c9:c8:16:ec:f4:8f:15:fa:61:79:c8:1d:b4:cb:32:42:64:e2: da:b1:ef:8a:84:64:9a:88:e4:40:b3:9b:b8:6f:6e:a0:8a:5b: 3f:be:b2:55:cf:32:17:30:05:2a:c4:ab:00:a0:3a:80:a9:a6: d4:f8:5a:80:67:07:f0:b3:03:58:51:a3:69:ea:c6:ea:da:35: 01:ac:b5:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoMTlCRDgyMkQzRUI2RkY2RTkzNzAyNDVFRTg3NEJFQTlF QjhCRUU1NTAeFw0yNTEyMDMwNTU1MzRaFw0yNTEyMTAwNTU1MzRaMBgxFjAUBgNV BAMTDTY5MmZkMGQ3LWVkZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCldo5nNsQtmGUJeBCW6uq2K0tYwRV7G2Yu08ZQDiAJXKTGbBBvgpOWxautZJn1 fMgC+nFKvH98yCYLyphwLSqySR/N472OVeIiNliG2vWCIhl/I2Ymf+RvH4psDIbo VmU7xtv4w7dYA/ny+dipI72escL3UAnSymvCKEXH88RdEBJ7TU2N1Fdchc+Go9VR vmcAvpCCy0yNC8lveTgXk0TMHO0jvI1a/gco9RdQlWw9ZEpNquHYrYpbZ31XTnTL OY/lmWcfpras218CYvrtn5XywRBpXik0WbqyRq0k3Vo9Q+r/41shIvtLC9r7zJQv NNuMiITd+iVgfGhCS0x0Elq9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFchw0sHE BvpFN7s57zBEpSFiIHYwHwYDVR0jBBgwFoAUGb2CLT62/26TcCRe6HS+qeuL7lUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0JEQzA5QTJBOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL0diMkNMVDYyXzI2VGNDUmU2SFMtcWV1TDds VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2IyQ0xUNjJfMjZUY0NSZTZIUy1xZXVMN2xVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0JEQzA5QTJBOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL0diMkNMVDYyXzI2 VGNDUmU2SFMtcWV1TDdsVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9SeFM35KZKkm/z3B9pQ2ikw/xt82w2Ca+T6SuGpeRRqwuahuDAnqmO 5JQRYgINPDc6aJ9FNpghLdaCQdi/juUUMSliSvSum0BKA+IETltW3tfpCTNj/Bsj lDBOTK9kc9H/BRXcXUgqk6GNzGn7EwwYP9CCsr4KaAZl91QT/39JE/Yhwtwc9s9W EK2nZgGjYhlnbnto7oTPSeQMSRsgWSv4n6oGY4jZ6H8uNmNmKiTI1fc4xcnIFuz0 jxX6YXnIHbTLMkJk4tqx74qEZJqI5ECzm7hvbqCKWz++slXPMhcwBSrEqwCgOoCp ptT4WoBnB/CzA1hRo2nqxuraNQGstW8= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:59 2025 by rpki-client