This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: CvP8/qWLqvpNN3HZW9VjYfQ4QcZHNGIAmit28MQq6lw= Subject key identifier: 2B:3D:75:8C:C8:E1:D1:9F:1C:84:90:8A:FA:DC:87:CE:C2:C4:17:5F Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 350D Signing time: Mon 22 Dec 2025 14:34:18 +0000 Manifest this update: Mon 22 Dec 2025 14:34:18 +0000 Manifest next update: Mon 29 Dec 2025 14:34:18 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: +f79sn/g3YsuqWnm68sbnvu3of4yweXklEh/64gqG/0=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: 24BjWAqe2qRsQURE8DMBPNk7l6vHhbx1QB6qiJta7cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Dec 22 14:34:18 2025 GMT Not After : Dec 29 14:34:18 2025 GMT Subject: CN=694956ea-ebb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:25:bf:5f:81:91:72:3f:d8:2d:5b:10:56: 60:f5:50:e9:8a:8e:0e:4b:2f:4b:ce:ba:78:e0:0f: cc:85:22:97:43:ac:8c:51:cf:35:5e:78:d7:db:46: eb:92:46:9b:b3:99:75:11:a0:57:66:08:41:45:48: 9e:12:c0:03:3b:5b:c2:cd:ec:84:ec:e8:c8:2e:1d: 64:0f:0a:c4:6f:c2:2c:0f:65:84:b9:10:79:c0:30: 6b:9c:00:42:64:7d:50:d5:81:b8:ff:6e:b4:3c:92: 7a:7e:80:64:aa:3b:8e:8d:7b:61:e4:d6:f5:57:37: e7:a2:72:62:3c:25:b9:15:ee:a3:94:98:5b:df:ca: d1:2b:28:43:d0:a5:2a:12:4d:d6:b4:b4:83:c5:7a: cc:bd:1c:4c:5c:ca:61:84:ec:9f:18:e2:fa:c1:0e: 7d:d3:ef:89:73:4b:13:84:cd:cf:dc:4b:20:a8:e7: 6f:38:0c:6f:d0:70:72:89:1d:f0:ff:40:32:a6:61: 4e:2a:e5:f4:b3:2c:92:21:58:61:76:7a:3b:bc:54: 26:81:66:1a:91:c9:75:89:e9:2d:ac:cc:5c:be:49: bd:76:78:69:7c:ba:f9:4a:1a:78:54:41:38:66:d6: 05:8a:a7:56:5f:d9:44:d1:83:d3:bd:2a:e4:ba:f9: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3D:75:8C:C8:E1:D1:9F:1C:84:90:8A:FA:DC:87:CE:C2:C4:17:5F X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9d:d0:25:20:df:83:78:f2:cf:b6:19:b5:71:89:13:3f:d4: e5:dd:e9:fd:ba:fc:36:d6:52:db:64:f3:d0:54:4c:92:22:3f: f1:45:c0:f5:35:b8:86:7b:c3:81:10:97:f4:7a:00:96:fb:70: dc:87:1b:2e:c2:4b:5d:17:6d:37:e3:67:17:b9:e6:c0:f9:09: 9a:01:52:2f:b2:cc:79:24:74:fa:fd:13:b7:e9:9f:15:00:c0: 0c:38:bb:d1:d1:83:43:98:6c:df:b0:74:5e:a4:7d:61:10:94: bd:b6:5b:84:83:5c:c5:2c:56:a3:64:2a:b7:5e:eb:3a:01:17: ab:c0:03:71:f0:d3:22:c5:58:11:31:e7:a2:1f:b8:cf:b4:f3: a6:d8:3c:02:97:62:a4:be:ee:a9:8b:b1:50:65:d7:31:f2:0b: 8a:60:66:58:12:1b:bd:a8:eb:31:34:1a:2b:26:6e:67:75:58: 23:5f:81:24:8b:dd:09:e4:e6:91:92:63:75:12:d7:f2:d2:5e: da:94:50:ab:8c:43:84:d8:22:57:32:3f:58:31:7e:0e:3d:42: 46:02:a8:bf:b3:50:d4:f8:b2:0a:e8:6d:12:72:32:13:4d:ad: 72:9f:23:1b:23:39:57:65:7b:98:06:58:4c:65:88:16:1e:7d: 95:65:86:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUxMjIyMTQzNDE4WhcNMjUxMjI5MTQzNDE4WjAYMRYwFAYD VQQDDA02OTQ5NTZlYS1lYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovElv1+BkXI/2C1bEFZg9VDpio4OSy9Lzrp44A/MhSKXQ6yMUc81XnjX20br kkabs5l1EaBXZghBRUieEsADO1vCzeyE7OjILh1kDwrEb8IsD2WEuRB5wDBrnABC ZH1Q1YG4/260PJJ6foBkqjuOjXth5Nb1VzfnonJiPCW5Fe6jlJhb38rRKyhD0KUq Ek3WtLSDxXrMvRxMXMphhOyfGOL6wQ590++Jc0sThM3P3EsgqOdvOAxv0HByiR3w /0AypmFOKuX0syySIVhhdno7vFQmgWYakcl1iektrMxcvkm9dnhpfLr5Shp4VEE4 ZtYFiqdWX9lE0YPTvSrkuvnLdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs9dYzI 4dGfHISQivrch87CxBdfMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkndAlIN+DePLPthm1cYkTP9Tl3en9uvw21lLbZPPQVEySIj/xRcD1 NbiGe8OBEJf0egCW+3DchxsuwktdF20342cXuebA+QmaAVIvssx5JHT6/RO36Z8V AMAMOLvR0YNDmGzfsHRepH1hEJS9tluEg1zFLFajZCq3Xus6ARerwANx8NMixVgR MeeiH7jPtPOm2DwCl2Kkvu6pi7FQZdcx8guKYGZYEhu9qOsxNBorJm5ndVgjX4Ek i90J5OaRkmN1Etfy0l7alFCrjEOE2CJXMj9YMX4OPUJGAqi/s1DU+LIK6G0ScjIT Ta1ynyMbIzlXZXuYBlhMZYgWHn2VZYZ1 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:30 2025 by rpki-client