This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: dQ0slpzjbWqQBx7tQe5S6vky2/98BRFvWArtrYXWwPM= Subject key identifier: 63:93:65:16:4B:84:E2:36:A5:05:3E:C4:41:E3:D1:13:85:7A:FA:4C Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: 0115 Signing time: Tue 23 Dec 2025 03:53:38 +0000 Manifest this update: Tue 23 Dec 2025 03:53:38 +0000 Manifest next update: Tue 30 Dec 2025 03:53:38 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: NdJI05CSLSNIG+6edeQJWJbBOXTLgbOflhlGJPT3giE=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Dec 23 03:53:38 2025 GMT Not After : Dec 30 03:53:38 2025 GMT Subject: CN=694a1242-7bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:fc:f4:f8:8f:b4:fb:4d:d4:27:af:7c:db: 8d:04:ea:f6:53:25:93:e7:28:59:0b:55:ff:21:1c: cc:62:cb:6e:af:99:09:22:52:d9:88:58:6b:d2:bc: 7b:c5:2c:e0:bb:89:95:83:45:5e:8f:46:32:0e:a5: 59:c4:be:de:c0:09:f8:82:89:ce:08:b3:1f:e2:75: 91:f8:5a:a9:56:61:0f:ef:7d:db:2b:4b:21:02:7a: 96:c3:5b:37:eb:26:ff:cb:f9:4e:3f:35:97:3a:ab: 70:ab:83:6c:fb:1c:48:64:69:02:ba:e2:8a:05:5a: 87:f0:a2:88:1f:da:b2:c8:ab:99:27:d7:90:56:c7: a5:44:66:79:50:bd:02:05:04:7d:0d:fe:05:a7:c1: 0d:92:01:1c:c3:8f:03:2d:c8:b3:79:3d:97:d5:50: f1:7a:c9:7a:92:e7:f9:aa:27:b1:19:56:ad:13:9a: ce:df:fc:4b:78:db:ac:60:63:e6:20:28:a8:e6:11: 57:68:3b:f8:d4:b2:05:5d:f1:26:a6:9a:20:e9:92: 78:23:8b:d3:67:69:63:12:74:4d:a7:61:b6:7b:84: cc:88:31:91:a7:0c:b0:66:06:e8:2b:0b:b7:32:50: 4c:1e:5e:ec:81:01:1f:67:61:f7:ca:8b:31:0c:d1: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:93:65:16:4B:84:E2:36:A5:05:3E:C4:41:E3:D1:13:85:7A:FA:4C X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:07:b1:79:93:15:ac:3a:ec:6c:77:7f:ab:24:0c:28:df:0d: 32:c9:f2:d9:ca:b6:c3:30:86:68:d7:b6:dd:eb:16:0c:19:37: b9:85:ae:f8:fa:e5:b2:ef:e9:bb:7e:a2:06:2b:aa:a4:6c:dc: 9f:96:a9:a3:4c:65:9c:0c:25:97:89:2f:38:c5:bb:f8:1d:f7: 81:4a:59:36:02:55:a9:09:9a:b8:02:bc:62:19:09:de:92:da: 9e:41:f5:d4:89:12:6c:43:0a:d8:15:55:23:6d:22:93:14:5e: 64:e3:0a:08:96:a5:c5:b9:fb:6a:b0:2c:ce:78:3d:1c:2b:76: 29:5a:19:94:9e:a3:69:9b:3b:1a:75:2e:bb:2c:21:94:ae:4e: 90:df:e2:e9:58:4d:0f:42:21:22:17:b6:37:58:5a:4d:f4:31: 90:d2:bf:33:4f:ef:d1:37:d4:d4:bb:29:0b:a8:9d:a9:31:e8: e3:28:b8:e0:4e:d2:04:a0:b3:10:2a:9c:20:d1:5e:22:2a:74: fd:3e:a5:c1:e4:4e:19:5f:c1:ce:82:df:cd:d3:d0:cc:8a:0c: 79:f4:02:35:e4:06:77:cf:f9:cd:29:ac:d8:49:3a:0d:13:24: 90:48:08:3d:57:cc:fd:5a:3e:2b:c4:13:ae:5d:30:7a:75:7b: 5b:de:6d:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUxMjIzMDM1MzM4WhcNMjUxMjMwMDM1MzM4WjAYMRYwFAYD VQQDDA02OTRhMTI0Mi03YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+P89PiPtPtN1CevfNuNBOr2UyWT5yhZC1X/IRzMYstur5kJIlLZiFhr0rx7 xSzgu4mVg0Vej0YyDqVZxL7ewAn4gonOCLMf4nWR+FqpVmEP733bK0shAnqWw1s3 6yb/y/lOPzWXOqtwq4Ns+xxIZGkCuuKKBVqH8KKIH9qyyKuZJ9eQVselRGZ5UL0C BQR9Df4Fp8ENkgEcw48DLcizeT2X1VDxesl6kuf5qiexGVatE5rO3/xLeNusYGPm ICio5hFXaDv41LIFXfEmppog6ZJ4I4vTZ2ljEnRNp2G2e4TMiDGRpwywZgboKwu3 MlBMHl7sgQEfZ2H3yosxDNG7qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOTZRZL hOI2pQU+xEHj0ROFevpMMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn WXpYQXRGNW1VWHRRaTROUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0B7F5kxWsOuxsd3+rJAwo3w0yyfLZyrbDMIZo17bd6xYMGTe5ha74 +uWy7+m7fqIGK6qkbNyflqmjTGWcDCWXiS84xbv4HfeBSlk2AlWpCZq4ArxiGQne ktqeQfXUiRJsQwrYFVUjbSKTFF5k4woIlqXFuftqsCzOeD0cK3YpWhmUnqNpmzsa dS67LCGUrk6Q3+LpWE0PQiEiF7Y3WFpN9DGQ0r8zT+/RN9TUuykLqJ2pMejjKLjg TtIEoLMQKpwg0V4iKnT9PqXB5E4ZX8HOgt/N09DMigx59AI15AZ3z/nNKazYSToN EySQSAg9V8z9Wj4rxBOuXTB6dXtb3m12 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:18 2025 by rpki-client