This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: y3Vj67zp6RaSv2g99qRB53xbAS6crjkiTWyGCgDNHhc= Subject key identifier: 94:B6:D2:C7:49:89:83:47:0E:04:33:6C:31:FC:71:CC:8A:8B:ED:8A Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 022B Signing time: Tue 23 Dec 2025 01:03:55 +0000 Manifest this update: Tue 23 Dec 2025 01:03:54 +0000 Manifest next update: Tue 30 Dec 2025 01:03:54 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: SwQLZ/TrUnx4tMhMhvaTcn2XfJvonL5fsv3fyya+z34=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: Dec 23 01:03:54 2025 GMT Not After : Dec 30 01:03:54 2025 GMT Subject: CN=6949ea7b-7a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:71:63:20:30:69:07:55:1e:84:4a:40:52:9e: ea:a7:8c:d4:10:62:d3:95:78:27:8e:4f:b3:00:19: 7f:d5:55:91:e9:8e:a4:e4:2c:d8:35:71:15:06:d1: 6a:84:e7:db:88:00:7a:0a:e8:4d:ba:d9:f0:23:87: 78:4b:b9:92:9a:57:26:d8:c4:e0:52:22:c5:57:db: 58:78:41:76:9a:27:ee:81:5d:24:c5:de:6c:8a:51: 28:19:cc:46:17:64:f3:6f:20:d6:30:f3:12:db:7b: ad:e7:c5:01:d4:b2:eb:5d:d4:ea:d0:5e:53:d8:dd: a6:5f:a8:2a:0e:8a:a4:dd:f0:10:20:02:1c:e1:72: a6:90:78:69:6a:46:03:75:b3:33:26:15:45:72:d0: 39:b5:98:f0:c6:14:3e:34:83:cf:3c:47:2e:ca:52: 4a:aa:8f:6f:d9:97:8e:81:79:28:93:ca:c8:33:ac: f7:76:4a:46:1e:3d:ab:83:a3:af:58:30:98:04:73: 8d:a8:a9:6d:5a:d2:57:e4:75:c6:66:60:2e:10:96: 86:93:b5:a3:68:65:5c:6f:fc:49:7b:1a:6b:4f:7c: 06:b6:e0:a7:9e:4e:02:0d:fa:7f:10:c8:8d:40:dc: a7:15:21:c7:e6:14:e4:42:ad:b1:7d:4f:00:d3:19: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:D2:C7:49:89:83:47:0E:04:33:6C:31:FC:71:CC:8A:8B:ED:8A X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:4f:7a:4b:55:21:a0:7d:16:40:88:8e:7d:fd:0c:90:70:d0: 7d:d0:e5:c1:62:71:81:4f:e9:5c:0a:b8:8f:f4:4e:7b:e8:af: 3f:9d:b0:b9:b2:62:ff:f6:69:e3:79:c2:55:92:e3:5c:d3:e5: c4:d4:c9:0f:09:c0:bf:d0:2f:b7:53:11:fb:44:86:3f:1e:49: a9:9c:d8:8b:b8:27:7f:dd:19:51:8d:5c:75:9f:ba:be:45:6a: 79:12:48:73:3f:a8:2f:b6:12:f2:ac:1a:1e:c9:6e:24:7b:b7: 41:ab:d2:fc:b3:49:7e:2a:16:3f:72:7c:8b:f6:93:cd:32:74: f4:7c:c2:ec:5b:38:68:62:fe:78:2f:5b:2a:b4:84:85:a7:26: 54:53:8b:ee:6f:58:79:50:ca:45:4d:2a:e7:16:9e:64:51:68: 1f:3f:fb:5c:90:eb:0d:73:ef:d4:86:fe:c7:f8:79:ae:52:9f: 31:a9:ef:53:42:9a:ed:79:0d:15:9e:a4:ed:dd:a1:49:ee:de: 12:48:fb:8c:68:a8:fe:00:b2:86:e3:e0:3e:df:76:0b:2e:ae: e8:ff:c6:ef:87:db:03:f5:1d:2c:4a:ce:7a:a4:46:e8:7f:6c: 27:e2:65:76:f2:48:a3:d8:7a:fd:2b:d4:b8:aa:74:96:a8:bd: b9:3a:3c:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUxMjIzMDEwMzU0WhcNMjUxMjMwMDEwMzU0WjAYMRYwFAYD VQQDDA02OTQ5ZWE3Yi03YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjHFjIDBpB1UehEpAUp7qp4zUEGLTlXgnjk+zABl/1VWR6Y6k5CzYNXEVBtFq hOfbiAB6CuhNutnwI4d4S7mSmlcm2MTgUiLFV9tYeEF2mifugV0kxd5silEoGcxG F2TzbyDWMPMS23ut58UB1LLrXdTq0F5T2N2mX6gqDoqk3fAQIAIc4XKmkHhpakYD dbMzJhVFctA5tZjwxhQ+NIPPPEcuylJKqo9v2ZeOgXkok8rIM6z3dkpGHj2rg6Ov WDCYBHONqKltWtJX5HXGZmAuEJaGk7WjaGVcb/xJexprT3wGtuCnnk4CDfp/EMiN QNynFSHH5hTkQq2xfU8A0xkc1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS20sdJ iYNHDgQzbDH8ccyKi+2KMB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDET3pLVSGgfRZAiI59/QyQcNB90OXBYnGBT+lcCriP9E576K8/nbC5 smL/9mnjecJVkuNc0+XE1MkPCcC/0C+3UxH7RIY/HkmpnNiLuCd/3RlRjVx1n7q+ RWp5EkhzP6gvthLyrBoeyW4ke7dBq9L8s0l+KhY/cnyL9pPNMnT0fMLsWzhoYv54 L1sqtISFpyZUU4vub1h5UMpFTSrnFp5kUWgfP/tckOsNc+/Uhv7H+HmuUp8xqe9T QprteQ0VnqTt3aFJ7t4SSPuMaKj+ALKG4+A+33YLLq7o/8bvh9sD9R0sSs56pEbo f2wn4mV28kij2Hr9K9S4qnSWqL25OjzX -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:11 2025 by rpki-client