This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json) Hash identifier: Ogu0rZ2MTylK9uGErB42q/40PyUrSN24fYlFM1BeHgM= Subject key identifier: A8:76:6A:B7:9E:59:70:47:A0:5E:DD:8A:0D:41:43:34:69:E9:52:2F Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft Manifest number: 0360 Signing time: Mon 22 Dec 2025 23:57:23 +0000 Manifest this update: Mon 22 Dec 2025 23:57:23 +0000 Manifest next update: Mon 29 Dec 2025 23:57:23 +0000 Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: dinXnZOchaaz5oXhG89JmA8aVpYGwqHNKte+qEvvtTc=) 2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: 4Q9eSoyybwKkbe+OvPprVAkVlq22srO6Z2iGnnSJ3hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Validity Not Before: Dec 22 23:57:23 2025 GMT Not After : Dec 29 23:57:23 2025 GMT Subject: CN=6949dae3-59cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:09:fa:79:f5:3e:c8:1f:c7:f7:ee:42:96: 68:00:e7:88:03:5c:9e:e0:31:bc:bf:01:51:27:cc: 8e:c6:5b:dd:46:59:75:3a:9d:2e:60:91:b2:65:a8: fa:4f:34:09:2f:70:b1:d1:02:04:57:b1:62:75:84: 38:27:a3:d4:7b:b2:12:68:6c:28:1b:10:67:90:5c: dd:97:8c:bc:38:15:8d:12:b6:09:31:54:ea:89:ca: b3:ee:7a:0b:4e:29:56:9e:2e:86:3e:c0:cf:ab:4b: 8c:21:ca:ec:5e:cb:e1:50:05:0b:8d:d0:e3:4c:5e: 57:2a:9e:3d:89:ec:b4:9a:31:98:97:20:0e:01:c3: be:7f:e5:60:09:57:52:d8:57:74:cc:24:5f:79:31: ff:48:c4:42:4d:8b:2e:4a:57:8b:3f:23:8f:98:d7: ac:34:9a:65:df:2c:b6:08:04:a7:60:99:2c:3c:d4: 03:3e:32:68:22:33:50:22:7c:62:31:95:72:4c:87: 39:25:45:31:31:6d:6a:2c:63:ed:26:c0:c0:1e:0d: fd:17:e1:b8:db:05:4c:fb:cb:e2:30:08:a2:6f:b6: 4e:a8:c2:b4:df:3b:96:25:63:6a:07:e0:11:f1:5c: 09:70:0a:31:95:c0:37:a1:7f:50:5e:f4:09:fa:df: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:76:6A:B7:9E:59:70:47:A0:5E:DD:8A:0D:41:43:34:69:E9:52:2F X509v3 Authority Key Identifier: keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c2:c6:0d:11:b0:4e:73:36:b0:dd:78:0b:34:ad:b1:06:92: 99:30:8b:17:14:c0:83:41:fa:6c:fd:53:cc:40:18:40:ae:6f: c3:dd:a9:06:35:f0:01:1e:f6:b1:1b:21:ce:e2:df:82:f9:fd: f4:36:1c:7d:b8:e5:7e:52:21:40:2f:0c:e6:71:1a:f9:1d:4b: 5a:53:99:75:b6:f5:77:23:8d:b3:71:15:a1:f3:7e:97:17:d9: ab:7f:3f:21:62:31:ee:65:0f:ae:24:12:0d:8e:d1:12:c2:d1: 91:bc:67:89:bd:36:87:f9:70:ca:ad:7c:e8:2b:86:ea:66:b5: 8d:12:05:cd:7e:4b:a8:27:0f:6e:ee:24:ed:85:c9:f5:63:ca: 1e:63:80:4c:b0:1d:9f:cb:27:c1:58:fb:42:a6:1e:7a:1b:33: a5:69:95:52:e3:53:74:e3:36:0b:af:8b:70:45:9a:15:d6:5e: 94:2f:cf:99:1d:30:6a:c5:e8:5d:60:ee:61:f6:7b:b2:42:49: 65:32:59:0a:5c:8e:7f:0b:d6:68:d2:6c:9c:5e:9b:82:05:86: 23:74:a2:ca:68:56:ce:d6:07:d7:4b:43:ed:ee:33:de:1b:ce: f0:bf:ab:8b:aa:47:0e:3a:ca:68:b9:d1:95:8b:b8:61:f8:f9: 2e:98:88:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE NDk1QUIzMzIwHhcNMjUxMjIyMjM1NzIzWhcNMjUxMjI5MjM1NzIzWjAYMRYwFAYD VQQDDA02OTQ5ZGFlMy01OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+UJ+nn1Psgfx/fuQpZoAOeIA1ye4DG8vwFRJ8yOxlvdRll1Op0uYJGyZaj6 TzQJL3Cx0QIEV7FidYQ4J6PUe7ISaGwoGxBnkFzdl4y8OBWNErYJMVTqicqz7noL TilWni6GPsDPq0uMIcrsXsvhUAULjdDjTF5XKp49iey0mjGYlyAOAcO+f+VgCVdS 2Fd0zCRfeTH/SMRCTYsuSleLPyOPmNesNJpl3yy2CASnYJksPNQDPjJoIjNQInxi MZVyTIc5JUUxMW1qLGPtJsDAHg39F+G42wVM+8viMAiib7ZOqMK03zuWJWNqB+AR 8VwJcAoxlcA3oX9QXvQJ+t8uiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh2aree WXBHoF7dig1BQzRp6VIvMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG NEQ1d3BnWEpsTVhVbGFzekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmwsYNEbBOczaw3XgLNK2xBpKZMIsXFMCDQfps/VPMQBhArm/D3akG NfABHvaxGyHO4t+C+f30Nhx9uOV+UiFALwzmcRr5HUtaU5l1tvV3I42zcRWh836X F9mrfz8hYjHuZQ+uJBINjtESwtGRvGeJvTaH+XDKrXzoK4bqZrWNEgXNfkuoJw9u 7iTthcn1Y8oeY4BMsB2fyyfBWPtCph56GzOlaZVS41N04zYLr4twRZoV1l6UL8+Z HTBqxehdYO5h9nuyQkllMlkKXI5/C9Zo0mycXpuCBYYjdKLKaFbO1gfXS0Pt7jPe G87wv6uLqkcOOspoudGVi7hh+PkumIjT -----END CERTIFICATE-----Generated at Wed Dec 24 02:01:32 2025 by rpki-client