This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: P8wOL1ICzGGRTtXcgIvGDonz7ZJY9d6j8Kfqw2eKdIk= Subject key identifier: CD:CE:10:BB:A8:3C:E0:1D:55:D8:DF:FC:20:EB:E4:12:E6:3D:54:FC Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 02F4 Signing time: Tue 23 Dec 2025 00:14:57 +0000 Manifest this update: Tue 23 Dec 2025 00:14:57 +0000 Manifest next update: Tue 30 Dec 2025 00:14:57 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: y6Xs+oB22CFBWAx7CIAH14hnSfFvXgr1hzRFkOLHybk=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: vDQoZAtho3Zfc3fEMkNHvcrZRkN5p0mTf80o1+Yo2ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Dec 23 00:14:57 2025 GMT Not After : Dec 30 00:14:57 2025 GMT Subject: CN=6949df01-6088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:58:89:36:a7:c9:ca:5b:e3:e5:4f:f1:ce: aa:64:50:1f:a3:62:2f:10:66:fa:65:c3:72:61:d7: fc:4d:47:55:52:42:38:5c:d9:3d:c5:ae:98:97:11: 9d:93:d7:c3:31:d3:6d:0b:a2:37:14:41:be:37:34: 57:58:ad:b5:4d:85:39:2e:8a:9a:a8:6f:64:d0:ab: 4b:1a:90:f9:82:4a:5e:0f:bd:66:81:27:b5:64:ea: c6:47:8d:ad:81:06:ce:5c:0b:4f:59:84:84:db:ae: 67:50:3a:1b:7e:2a:f8:16:dc:ff:f8:46:69:85:8b: f5:be:b9:99:28:19:db:a2:b5:18:00:13:7c:8e:97: 55:34:ed:4d:10:c4:29:b1:39:54:b5:8e:fb:83:d7: 6e:81:26:f1:77:92:36:bf:5e:03:f5:76:49:35:b6: 22:a1:02:62:a5:9a:df:b5:a9:31:9e:b9:f4:b4:b1: 7d:31:ec:7e:c5:bf:67:3c:b8:50:e5:e0:fc:37:c0: da:9a:92:3c:bb:36:69:6a:07:ef:b5:c7:40:c2:31: 4d:66:1e:75:44:2a:34:52:b5:17:75:65:22:e7:df: bb:f4:b5:f6:2a:f0:b2:65:8b:1f:dc:da:07:fb:bc: a2:99:9c:dd:19:66:9d:3d:f6:40:6a:13:a4:ea:30: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:10:BB:A8:3C:E0:1D:55:D8:DF:FC:20:EB:E4:12:E6:3D:54:FC X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ec:83:f5:9c:12:63:44:43:83:a8:6e:bc:12:a2:9c:e0:ec: 68:33:3e:df:c1:43:1c:af:18:e8:ce:fc:d6:0a:07:9a:f9:27: 24:ce:ec:5b:a9:84:d3:72:d4:69:c3:30:5f:1a:ae:2a:34:2f: db:e0:ac:e9:22:09:03:60:7d:dc:88:25:1d:b7:97:eb:41:a7: e4:33:f1:59:0d:77:0d:85:b0:44:b4:d4:3f:fb:f6:0c:de:98: d9:67:f0:db:b1:21:f3:54:f1:16:9a:8b:b8:51:25:f6:cf:92: 76:2b:37:39:a0:20:4d:ab:bb:ed:85:03:36:ec:2b:13:29:d8: 44:5b:21:cb:90:5f:f5:63:48:2b:91:ad:eb:28:67:2a:b3:e5: 9e:3b:85:5a:57:c7:ab:ff:e0:68:4f:fe:80:86:f7:fd:5d:5d: 3e:50:0b:b1:3a:d7:4a:fb:5f:76:a3:3d:a1:5a:88:d2:38:21: 96:0d:14:0c:00:63:ca:65:d3:68:83:8a:09:b4:e3:a1:50:f9: ed:9d:99:39:12:5d:95:70:7e:49:fe:6f:a6:97:32:28:0c:0b: 51:f8:fc:04:69:78:1d:52:56:dd:43:e4:de:a8:ae:e5:e7:af: 30:ee:2e:4c:af:04:f8:0c:34:b5:31:d2:de:01:50:82:7d:7e: 14:39:47:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUxMjIzMDAxNDU3WhcNMjUxMjMwMDAxNDU3WjAYMRYwFAYD VQQDDA02OTQ5ZGYwMS02MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncdYiTanycpb4+VP8c6qZFAfo2IvEGb6ZcNyYdf8TUdVUkI4XNk9xa6YlxGd k9fDMdNtC6I3FEG+NzRXWK21TYU5LoqaqG9k0KtLGpD5gkpeD71mgSe1ZOrGR42t gQbOXAtPWYSE265nUDobfir4Ftz/+EZphYv1vrmZKBnborUYABN8jpdVNO1NEMQp sTlUtY77g9dugSbxd5I2v14D9XZJNbYioQJipZrftakxnrn0tLF9Mex+xb9nPLhQ 5eD8N8DampI8uzZpagfvtcdAwjFNZh51RCo0UrUXdWUi59+79LX2KvCyZYsf3NoH +7yimZzdGWadPfZAahOk6jCjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3OELuo POAdVdjf/CDr5BLmPVT8MB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg7IP1nBJjREODqG68EqKc4OxoMz7fwUMcrxjozvzWCgea+Sckzuxb qYTTctRpwzBfGq4qNC/b4KzpIgkDYH3ciCUdt5frQafkM/FZDXcNhbBEtNQ/+/YM 3pjZZ/DbsSHzVPEWmou4USX2z5J2Kzc5oCBNq7vthQM27CsTKdhEWyHLkF/1Y0gr ka3rKGcqs+WeO4VaV8er/+BoT/6Ahvf9XV0+UAuxOtdK+192oz2hWojSOCGWDRQM AGPKZdNog4oJtOOhUPntnZk5El2VcH5J/m+mlzIoDAtR+PwEaXgdUlbdQ+TeqK7l 568w7i5MrwT4DDS1MdLeAVCCfX4UOUeU -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:51 2025 by rpki-client