This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: hUANE31/2WuL3G93MNb3x0nzEFMPXp4U6qWv+T71k84= Subject key identifier: BB:1C:0A:6D:CE:AF:C0:B7:1B:55:E3:01:05:C9:47:80:EC:71:01:82 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A95 Signing time: Thu 18 Dec 2025 19:10:53 +0000 Manifest this update: Thu 18 Dec 2025 19:10:52 +0000 Manifest next update: Thu 25 Dec 2025 19:10:52 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: pESRjMouUHcCFSddWvhaoVecMkJBYkmMz0kqFbAO4zY=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Dec 18 19:10:52 2025 GMT Not After : Dec 25 19:10:52 2025 GMT Subject: CN=694451bd-7254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b5:2e:ba:45:3b:73:79:bf:36:02:c3:70:38: e9:40:d6:58:93:4e:39:12:f7:f2:49:b4:0f:66:de: 13:73:21:ce:18:09:2a:bb:38:3d:2d:78:bc:6c:8f: ce:08:15:e0:72:7f:30:7b:5b:f0:01:20:48:54:ae: 2b:4c:86:4b:f5:4a:b7:44:8e:57:bd:a8:37:d8:bb: 9b:34:14:71:18:ad:d4:be:86:46:93:bc:bf:94:4e: 51:b8:42:1f:2a:8b:fe:01:29:bb:34:35:c9:90:7c: e7:ef:21:ec:15:5c:8f:00:a1:1b:79:80:d8:f2:ec: e1:6f:de:4b:79:8a:20:63:1b:34:6f:c9:a2:f0:86: 93:d6:33:a4:a0:6d:dc:b4:50:d6:03:27:f3:90:ce: c4:78:ba:2d:68:92:89:92:ec:29:be:eb:0e:af:5d: c0:e6:8a:dd:8c:01:d7:b1:1d:6c:2b:c7:bd:2c:ff: 18:c4:67:54:9a:41:8e:13:ef:d5:5a:15:f8:de:26: b5:49:dd:99:8f:91:09:a0:bd:bd:7a:5a:79:c9:67: dc:6f:de:15:42:dc:6f:48:f2:05:01:63:fa:ed:eb: a6:0b:0d:83:64:77:56:86:1c:67:6f:f8:a9:8c:fd: 87:af:21:36:2d:d2:37:d0:ad:1d:29:2f:0b:44:e9: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1C:0A:6D:CE:AF:C0:B7:1B:55:E3:01:05:C9:47:80:EC:71:01:82 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:78:72:42:1b:40:05:79:71:1b:3f:93:d9:3f:4a:f5:ef:2b: ed:72:85:19:4e:3b:15:f7:f4:0e:7d:38:85:c5:ad:8c:57:51: 99:77:4c:20:b1:82:48:54:6d:f6:d1:47:65:f3:d1:aa:df:fd: b0:41:96:b7:d6:e8:27:50:27:fc:a4:66:54:8d:c3:ac:10:c6: e2:3f:48:45:51:2d:20:9d:72:ce:08:d4:f8:9a:b2:6a:ea:c2: c9:3a:d4:60:56:d1:ac:af:07:5d:e6:0b:eb:ed:e6:3a:31:62: 78:6a:3a:0e:5f:0a:63:28:59:75:f6:c8:49:d1:77:b6:50:69: df:44:24:ac:2d:ca:a0:d2:11:f5:f7:3b:71:fe:6d:e3:08:9c: ca:61:50:bd:fc:30:5f:0b:f7:70:97:3d:99:80:ac:d5:f5:19: f9:14:c8:8e:cd:89:35:19:93:76:ed:17:8c:d9:0f:e7:a8:b3: 1b:ae:7f:a7:00:73:ee:c2:38:95:b2:b5:12:05:5e:ed:9a:c9: ce:57:99:06:ca:f5:e5:1b:43:66:f1:92:92:85:0f:93:00:10: 30:d0:76:5f:e2:9f:a6:d0:cb:0b:81:96:a8:90:ca:f1:0b:3e: fb:2a:4c:3f:d4:41:ac:08:e6:1d:f7:b6:87:d8:49:76:46:b6: e7:6a:ed:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUxMjE4MTkxMDUyWhcNMjUxMjI1MTkxMDUyWjAYMRYwFAYD VQQDDA02OTQ0NTFiZC03MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrUuukU7c3m/NgLDcDjpQNZYk045EvfySbQPZt4TcyHOGAkquzg9LXi8bI/O CBXgcn8we1vwASBIVK4rTIZL9Uq3RI5Xvag32LubNBRxGK3UvoZGk7y/lE5RuEIf Kov+ASm7NDXJkHzn7yHsFVyPAKEbeYDY8uzhb95LeYogYxs0b8mi8IaT1jOkoG3c tFDWAyfzkM7EeLotaJKJkuwpvusOr13A5ordjAHXsR1sK8e9LP8YxGdUmkGOE+/V WhX43ia1Sd2Zj5EJoL29elp5yWfcb94VQtxvSPIFAWP67eumCw2DZHdWhhxnb/ip jP2HryE2LdI30K0dKS8LROnYKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLscCm3O r8C3G1XjAQXJR4DscQGCMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBeHJCG0AFeXEbP5PZP0r17yvtcoUZTjsV9/QOfTiFxa2MV1GZd0wg sYJIVG320Udl89Gq3/2wQZa31ugnUCf8pGZUjcOsEMbiP0hFUS0gnXLOCNT4mrJq 6sLJOtRgVtGsrwdd5gvr7eY6MWJ4ajoOXwpjKFl19shJ0Xe2UGnfRCSsLcqg0hH1 9ztx/m3jCJzKYVC9/DBfC/dwlz2ZgKzV9Rn5FMiOzYk1GZN27ReM2Q/nqLMbrn+n AHPuwjiVsrUSBV7tmsnOV5kGyvXlG0Nm8ZKShQ+TABAw0HZf4p+m0MsLgZaokMrx Cz77Kkw/1EGsCOYd97aH2El2Rrbnau0+ -----END CERTIFICATE-----Generated at Sat Dec 20 08:57:30 2025 by rpki-client