This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: hgNpF2RRri1F+4tNVsj0iZya6agUidbxqDmTkz08BVM= Subject key identifier: 56:01:F3:21:A9:32:D2:B8:54:A3:CC:3F:CA:4C:78:14:68:B7:51:62 Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: 29 Signing time: Wed 03 Dec 2025 05:51:35 +0000 Manifest this update: Wed 03 Dec 2025 05:51:34 +0000 Manifest next update: Wed 10 Dec 2025 05:51:34 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: OQeKlxZ61lwzODRDCGV3HKTm8plWYmMATYi2a9RnTNg=) 2: B226671A93CF11F0AFB6CD40C4F9AE02.roa (hash: ngks6JND6Z6i0nLhplVqWNOwGOFboijRbjaCtOqBPMU=) 3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: apbntEW54Z7A4caHXTIqLm5PS8fFH3F9o/xC7IDPABM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Dec 3 05:51:34 2025 GMT Not After : Dec 10 05:51:34 2025 GMT Subject: CN=692fcfe7-0b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a0:c3:3f:05:4a:f1:5d:66:43:c2:69:5d:39: 48:b2:af:29:f2:fe:f0:52:17:6d:ec:1f:dd:f6:b3: 90:c3:0a:60:d9:f3:59:e0:27:aa:ac:f8:09:46:f3: 95:bd:42:22:1d:99:c0:7a:3e:2e:2f:7e:95:3f:76: 2f:73:fb:e7:9b:a8:99:29:52:11:04:1e:78:36:27: 34:43:ff:c9:00:f1:39:06:2e:74:b2:ab:17:66:eb: 4e:04:e0:48:27:ad:02:6f:9a:fb:7e:87:5a:06:66: 77:9c:69:05:cb:71:a5:58:a5:64:7f:13:75:43:16: a1:58:28:61:2f:a3:59:98:3b:57:ef:f6:f8:09:67: 49:bf:7c:28:d3:06:83:b1:7e:42:f6:27:f5:b1:fd: 3e:2b:2d:bc:c3:11:47:b2:05:df:ff:b7:1d:da:84: 49:37:c4:77:09:b4:46:8c:5d:09:02:e6:75:01:2d: 5f:f6:6f:37:38:0b:13:77:f3:ed:ba:db:e9:a5:51: 7f:f4:eb:39:86:db:0d:42:b7:21:69:f7:43:6d:3d: 74:7d:5a:5b:0d:b5:2d:66:8b:ce:e7:c7:0c:6f:92: 46:c5:04:ad:33:b7:c1:41:e3:84:21:3f:50:f1:d8: 76:ba:f7:18:7c:99:ec:39:60:52:17:86:dd:cc:85: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:01:F3:21:A9:32:D2:B8:54:A3:CC:3F:CA:4C:78:14:68:B7:51:62 X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c1:54:0f:94:19:6b:4d:73:5b:e0:c9:8b:63:b8:6a:ca:7b: b7:f7:eb:e6:91:6f:ad:1a:92:23:30:7d:75:1e:36:4f:c1:44: 23:e2:1c:a7:40:a3:40:2a:cc:3a:5e:17:12:e7:a2:a6:f1:8c: 93:b5:0f:ec:db:0e:6d:55:f6:7e:45:c3:86:54:d9:a1:8b:c2: 7d:c9:1b:c4:39:57:f8:1d:7e:b1:1a:4d:b2:5f:43:cf:44:26: 5a:bc:9a:6f:88:0f:9b:05:17:fe:f4:3c:33:13:ac:6e:8a:11: 90:27:b7:96:c1:a6:41:93:9e:73:75:31:d6:0c:03:28:42:5f: b4:96:9f:28:b5:95:b2:21:18:08:d6:4f:3b:d1:95:4d:12:6a: cc:cf:e5:d7:8d:24:19:70:f4:d3:f7:c7:f9:56:36:ea:00:21: 7b:9c:70:9c:80:d7:e2:4e:e3:a6:46:d2:a1:6e:23:3d:4a:32: c3:e3:e0:dc:90:78:b6:3d:13:aa:ec:7e:30:9e:0e:fd:56:75: 8e:33:2c:b9:bd:28:e9:33:30:3a:9d:ea:56:f2:b2:7c:93:65: 3d:48:17:bd:2b:27:c3:0a:44:cb:4a:6e:83:69:9b:40:14:9c: 71:fe:c3:3e:3b:e1:97:8a:95:9b:3a:4e:2d:6c:8a:f7:18:5f: c0:9f:1c:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoMThFOTI5N0ExRjFBMThDQjg3OUE3RTEyNEI1MTA3QzQ0 MDU3M0M2MzAeFw0yNTEyMDMwNTUxMzRaFw0yNTEyMTAwNTUxMzRaMBgxFjAUBgNV BAMTDTY5MmZjZmU3LTBiNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7oMM/BUrxXWZDwmldOUiyryny/vBSF23sH932s5DDCmDZ81ngJ6qs+AlG85W9 QiIdmcB6Pi4vfpU/di9z++ebqJkpUhEEHng2JzRD/8kA8TkGLnSyqxdm604E4Egn rQJvmvt+h1oGZnecaQXLcaVYpWR/E3VDFqFYKGEvo1mYO1fv9vgJZ0m/fCjTBoOx fkL2J/Wx/T4rLbzDEUeyBd//tx3ahEk3xHcJtEaMXQkC5nUBLV/2bzc4CxN38+26 2+mlUX/06zmG2w1CtyFp90NtPXR9WlsNtS1mi87nxwxvkkbFBK0zt8FB44QhP1Dx 2Ha69xh8mew5YFIXht3MhcnVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVgHzIaky 0rhUo8w/ykx4FGi3UWIwHwYDVR0jBBgwFoAUGOkpeh8aGMuHmn4SS1EHxEBXPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1LzZCNjY2OTBBOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR09rcGVoOGFHTXVIbW40U1MxRUh4RUJYUEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1LzZCNjY2OTBBOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011 SG1uNFNTMUVIeEVCWFBHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI3BVA+UGWtNc1vgyYtjuGrKe7f36+aRb60akiMwfXUeNk/BRCPiHKdA o0AqzDpeFxLnoqbxjJO1D+zbDm1V9n5Fw4ZU2aGLwn3JG8Q5V/gdfrEaTbJfQ89E Jlq8mm+ID5sFF/70PDMTrG6KEZAnt5bBpkGTnnN1MdYMAyhCX7SWnyi1lbIhGAjW TzvRlU0SaszP5deNJBlw9NP3x/lWNuoAIXuccJyA1+JO46ZG0qFuIz1KMsPj4NyQ eLY9E6rsfjCeDv1WdY4zLLm9KOkzMDqd6lbysnyTZT1IF70rJ8MKRMtKboNpm0AU nHH+wz474ZeKlZs6Ti1sivcYX8CfHGY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:30 2025 by rpki-client