This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: nbQdXXta6kEExTYtLsyjR1NfhvMAkl+r3kxq9ZFqGOU= Subject key identifier: 29:01:0C:4C:34:82:70:C4:9C:9B:68:5B:71:8E:BA:5F:7F:A2:3B:2F Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A6A Signing time: Sat 20 Dec 2025 16:08:39 +0000 Manifest this update: Sat 20 Dec 2025 16:08:39 +0000 Manifest next update: Sat 27 Dec 2025 16:08:39 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: RtrhgifV426BygWGqSmZ4l2WwOLlL7BESYzNevaC4co=) 2: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: eoxU71y8QTEqx+M0m1aW0+InRIR2E5b4rwucrZ2tLw0=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: byvxwIxUmbdh0bP7R33Ns0I16OD6QTEmSRLJ7M5XZ6s=) 4: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: GKqNBD5V71h0LJHoO121osmAczldGj86vre7flmyl/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6799 (0x1a8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Dec 20 16:08:39 2025 GMT Not After : Dec 27 16:08:39 2025 GMT Subject: CN=6946ca07-e262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7c:99:4b:83:f6:c7:8e:03:6a:3b:78:d9:26: d0:c8:f7:09:a2:de:ce:23:c3:f4:87:2b:3e:9f:d3: 1d:6c:94:56:0b:17:4f:7a:eb:dc:4c:0c:b5:2a:73: 23:d8:60:f4:6a:9b:12:05:e2:d2:b5:9d:70:9f:3d: 9c:b7:ac:dd:4c:a7:e1:7d:78:3d:03:4a:ed:e9:70: 60:39:1a:e5:b0:f4:06:d2:07:fc:00:bd:de:11:cb: e5:c4:0b:b7:1d:1a:e7:b0:42:c4:02:88:ef:18:cb: cb:a8:a9:ab:ca:2b:b7:1b:0f:7e:9e:db:25:7d:79: fe:ac:02:6b:82:b9:03:25:1b:4a:1e:b5:f6:8c:19: da:39:ba:9a:67:13:3a:74:17:df:12:4f:bb:03:6c: 7f:a9:07:11:74:42:7a:0c:0e:41:29:bd:d6:c0:5f: 4e:12:f9:16:b6:e4:6b:81:5f:9b:a3:cd:5f:e7:1a: a1:ba:0f:59:f5:c8:81:60:0b:d8:d0:d3:d2:2f:3a: 20:e1:dd:e2:b9:70:b7:22:74:4a:ac:7c:7b:14:bc: 03:08:e4:d0:a8:18:14:b6:22:2e:51:0c:07:80:ea: 65:ce:70:98:1f:77:eb:63:d9:97:09:f0:71:c2:ca: 6b:8a:b1:7c:db:34:59:b3:53:89:55:09:a1:28:6e: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:0C:4C:34:82:70:C4:9C:9B:68:5B:71:8E:BA:5F:7F:A2:3B:2F X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8d:e0:dd:74:74:c1:73:9e:5d:cc:95:3d:4e:7a:ee:c2:02: d6:95:ee:31:b9:7c:46:63:cc:0b:47:28:d0:b0:9c:34:37:d1: 6c:33:9c:35:0e:f3:8f:98:2d:b0:75:57:7a:66:26:d2:ab:d7: fa:4f:4c:7d:b2:38:3f:0b:1b:e0:55:75:8f:fc:3d:c9:c2:ae: 5c:ad:82:90:97:f2:4a:3e:ff:cb:1b:f1:4d:5e:0d:59:bb:42: 4c:84:31:aa:05:68:4a:56:59:5a:73:9d:e5:69:2a:eb:c1:88: 8a:f5:75:75:2e:72:cf:0e:92:59:63:9d:e0:62:91:cb:17:45: 3d:5b:71:97:87:95:0b:3a:70:f1:87:fd:2e:77:07:44:32:b9: a1:c0:cd:a0:6e:60:48:4f:82:4e:26:b9:c0:a7:c3:cf:64:92: 82:25:44:9d:fc:c2:62:fb:33:cd:6a:04:f0:8e:31:8d:e2:78: d9:70:f0:52:79:db:72:c7:bc:ad:be:e0:3f:b0:d3:d5:52:d7: 7f:f9:0e:79:e2:4f:74:9d:82:80:48:bc:e7:3d:0e:b0:1d:40: 38:18:3b:14:d6:91:6f:9b:ec:d8:a2:b3:09:16:72:0c:48:74: 6b:b1:67:e3:46:4c:f6:4c:4e:0a:f4:e4:a1:90:07:47:4f:5d: f1:8f:9a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUxMjIwMTYwODM5WhcNMjUxMjI3MTYwODM5WjAYMRYwFAYD VQQDDA02OTQ2Y2EwNy1lMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3yZS4P2x44Dajt42SbQyPcJot7OI8P0hys+n9MdbJRWCxdPeuvcTAy1KnMj 2GD0apsSBeLStZ1wnz2ct6zdTKfhfXg9A0rt6XBgORrlsPQG0gf8AL3eEcvlxAu3 HRrnsELEAojvGMvLqKmryiu3Gw9+ntslfXn+rAJrgrkDJRtKHrX2jBnaObqaZxM6 dBffEk+7A2x/qQcRdEJ6DA5BKb3WwF9OEvkWtuRrgV+bo81f5xqhug9Z9ciBYAvY 0NPSLzog4d3iuXC3InRKrHx7FLwDCOTQqBgUtiIuUQwHgOplznCYH3frY9mXCfBx wsprirF82zRZs1OJVQmhKG40ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkBDEw0 gnDEnJtoW3GOul9/ojsvMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvjeDddHTBc55dzJU9TnruwgLWle4xuXxGY8wLRyjQsJw0N9FsM5w1 DvOPmC2wdVd6ZibSq9f6T0x9sjg/CxvgVXWP/D3Jwq5crYKQl/JKPv/LG/FNXg1Z u0JMhDGqBWhKVllac53laSrrwYiK9XV1LnLPDpJZY53gYpHLF0U9W3GXh5ULOnDx h/0udwdEMrmhwM2gbmBIT4JOJrnAp8PPZJKCJUSd/MJi+zPNagTwjjGN4njZcPBS edtyx7ytvuA/sNPVUtd/+Q554k90nYKASLznPQ6wHUA4GDsU1pFvm+zYorMJFnIM SHRrsWfjRkz2TE4K9OShkAdHT13xj5rq -----END CERTIFICATE-----Generated at Mon Dec 22 06:51:32 2025 by rpki-client