This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: 8lS/Bvyt4WErD/+2zIqTsyMosrKIY2+WOtKNoaj19nY= Subject key identifier: 4E:6A:3C:1E:84:B3:74:49:24:61:4B:93:8C:BD:2D:61:BD:64:49:73 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 34F6 Signing time: Mon 22 Dec 2025 14:38:26 +0000 Manifest this update: Mon 22 Dec 2025 14:38:25 +0000 Manifest next update: Mon 29 Dec 2025 14:38:25 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: SmAZx9mdKoV0/VIYn8f0XzImh7RG3KW0lWOOMIsYAyc=) 2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: f0s5M+jY8Uq/Wkuq+EBQtTt5fdf658GNQxqS9tNI1Ho=) 3: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: amc5JKgDCW0FwP7fqve5MmmvPdX66HObowu8LFy8/hw=) 4: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: XxjtUd/hL+kIKHkOi4rgqBJdsfuyYhtMzuXgGEu/n3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Dec 22 14:38:25 2025 GMT Not After : Dec 29 14:38:25 2025 GMT Subject: CN=694957e2-a421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:7e:9c:e9:08:e9:25:e6:84:43:96:66:aa: 4b:cf:e9:c8:e9:fa:e6:f8:f8:f8:43:2c:be:e0:1c: e3:51:9e:06:3e:57:15:4f:6a:00:38:b8:19:7c:74: 9e:c2:67:4f:c0:4f:c6:2c:28:49:c0:30:f5:7c:71: 6c:7a:44:ab:d1:90:12:e3:61:84:42:03:2f:4e:ac: 6e:a5:45:66:be:a7:22:f9:16:66:af:c1:98:81:ab: bd:6a:bb:b9:80:9e:d3:04:2f:ee:c2:24:a8:35:4d: 5d:11:02:66:e9:76:93:b9:0d:d1:69:31:69:da:28: aa:21:5a:25:5a:85:e8:3d:86:c4:6a:ce:d8:b4:c4: 68:4a:10:96:a7:c6:b0:b2:7a:6d:bb:23:0e:d2:43: 85:cd:97:81:9b:b4:16:ba:69:ec:1f:41:05:ee:6f: 43:f0:30:da:cd:7b:6e:6a:6f:e5:03:ec:f7:ae:7d: 32:82:07:14:9d:9c:c7:81:41:74:d0:86:f9:90:de: cc:cd:2b:2d:44:32:a1:3a:f4:54:24:da:26:12:bb: 0b:ed:6c:d5:96:20:9b:a6:c7:0d:35:8a:41:27:3c: 9a:6d:55:a2:66:61:29:76:35:99:2a:a0:7f:af:55: ea:83:4d:c8:c5:24:b9:23:2b:c4:5a:27:b3:6a:25: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6A:3C:1E:84:B3:74:49:24:61:4B:93:8C:BD:2D:61:BD:64:49:73 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e0:1b:14:f4:95:7b:f7:90:bb:88:c6:c1:45:23:88:55:90: dd:73:dc:00:77:78:ee:54:26:0e:dc:dd:22:96:3c:96:39:5a: 3a:d0:af:74:1d:8b:49:09:97:66:61:92:23:1b:ca:dc:7c:c3: 26:e1:91:8b:f9:39:c8:ff:b8:9e:cd:57:c0:db:d0:35:62:49: f7:25:b6:e6:56:dd:a0:d8:b8:90:1c:96:05:c7:88:0e:65:7a: 82:e9:16:2f:ac:66:90:de:a0:3f:c0:6a:1a:a1:15:63:08:e3: 13:02:b0:eb:a0:64:f1:14:07:36:92:ba:f8:43:83:7e:ae:f3: a7:d5:0b:82:88:e2:12:d3:21:27:ba:94:47:49:cd:55:64:45: 59:6b:73:d3:5d:ee:e4:65:45:a9:fe:42:66:35:79:6e:d0:d9: 11:c5:29:d6:a2:44:31:94:83:67:d7:75:fa:9c:2e:46:49:6b: 2d:22:b8:26:b3:22:a5:ae:93:34:fe:ab:8d:68:30:58:58:99: 14:fb:a1:b3:e7:0a:a8:83:f4:a3:ec:51:0f:95:10:61:5c:89: 8a:90:ad:fa:f7:52:ac:f0:4b:f2:24:5c:aa:22:fb:54:f7:ac: 4a:62:e2:9e:27:58:ae:ec:52:53:14:ff:9e:4a:5c:53:e1:02: 3d:b6:95:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjUxMjIyMTQzODI1WhcNMjUxMjI5MTQzODI1WjAYMRYwFAYD VQQDDA02OTQ5NTdlMi1hNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstN+nOkI6SXmhEOWZqpLz+nI6frm+Pj4Qyy+4BzjUZ4GPlcVT2oAOLgZfHSe wmdPwE/GLChJwDD1fHFsekSr0ZAS42GEQgMvTqxupUVmvqci+RZmr8GYgau9aru5 gJ7TBC/uwiSoNU1dEQJm6XaTuQ3RaTFp2iiqIVolWoXoPYbEas7YtMRoShCWp8aw snptuyMO0kOFzZeBm7QWumnsH0EF7m9D8DDazXtuam/lA+z3rn0yggcUnZzHgUF0 0Ib5kN7MzSstRDKhOvRUJNomErsL7WzVliCbpscNNYpBJzyabVWiZmEpdjWZKqB/ r1Xqg03IxSS5IyvEWiezaiXqzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5qPB6E s3RJJGFLk4y9LWG9ZElzMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt4BsU9JV795C7iMbBRSOIVZDdc9wAd3juVCYO3N0iljyWOVo60K90 HYtJCZdmYZIjG8rcfMMm4ZGL+TnI/7iezVfA29A1Ykn3JbbmVt2g2LiQHJYFx4gO ZXqC6RYvrGaQ3qA/wGoaoRVjCOMTArDroGTxFAc2krr4Q4N+rvOn1QuCiOIS0yEn upRHSc1VZEVZa3PTXe7kZUWp/kJmNXlu0NkRxSnWokQxlINn13X6nC5GSWstIrgm syKlrpM0/quNaDBYWJkU+6Gz5wqog/Sj7FEPlRBhXImKkK3691Ks8EvyJFyqIvtU 96xKYuKeJ1iu7FJTFP+eSlxT4QI9tpWt -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:08 2025 by rpki-client