This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: i4NYP9KPf0GK9fShfY0HRGGw0XVxfTt5DJrB73FhmQw= Subject key identifier: 3C:C1:83:A4:4C:06:77:B8:F9:0D:D9:5A:58:3F:DA:4E:96:50:69:CE Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 04D5 Signing time: Mon 22 Dec 2025 22:55:14 +0000 Manifest this update: Mon 22 Dec 2025 22:55:13 +0000 Manifest next update: Mon 29 Dec 2025 22:55:13 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: lrxbo1UjNvg3+Oc6Hj6C7NbKtUHAO2ccdBghXbAYJr4=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: 3HpM5sDyPcBnfCNQnGdseSNgNAwpkHGO3HMNHlML1pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Dec 22 22:55:13 2025 GMT Not After : Dec 29 22:55:13 2025 GMT Subject: CN=6949cc51-4f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4a:f4:2a:7c:7d:24:c0:79:22:94:8b:41:1c: 0d:59:fa:2a:ef:4e:df:93:a0:05:d2:98:53:89:dc: 49:f6:e1:a2:5a:78:e9:9e:38:20:97:d1:4f:7f:a3: d6:67:26:9e:7f:27:04:75:07:d0:03:0d:21:ae:e9: 80:f7:d4:c0:68:72:9d:2f:24:4d:ef:bd:d1:55:1a: 28:b5:57:df:ad:df:69:7a:87:61:a7:83:0e:e4:fa: 5e:04:b3:d2:1d:6c:1e:cd:4f:ef:0a:27:bb:c1:23: 1c:51:ea:ba:7e:30:49:5b:1f:c6:0e:a9:59:e1:26: 8a:3e:bc:74:23:d4:af:d5:3e:15:20:6f:a1:77:1a: 5e:fb:c0:5e:eb:5f:f3:96:61:29:c2:31:77:b4:de: 2c:33:01:7d:48:36:be:df:63:b7:2c:06:a6:da:25: 2e:cd:5f:d0:60:6a:33:5c:bd:06:8e:36:b5:66:5e: 99:ff:72:b7:fd:9c:36:d8:14:68:11:10:8f:ba:d0: 99:08:58:51:a2:72:0a:f1:18:6c:aa:5f:3c:fa:ae: a9:ad:dd:e1:76:22:db:f0:dc:71:8f:ad:57:27:5f: 68:64:19:c0:fe:55:31:66:0a:95:1f:b2:f7:9d:61: 84:97:2e:f8:6b:b7:41:87:84:bc:1b:73:ae:ab:ca: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:83:A4:4C:06:77:B8:F9:0D:D9:5A:58:3F:DA:4E:96:50:69:CE X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:46:33:44:82:46:37:78:03:8a:bc:17:f4:22:d8:d0:a6:91: 7e:87:29:3e:90:30:92:a5:7b:36:cc:ff:fb:db:cd:f9:ca:59: a7:66:87:3e:6f:77:26:15:5c:9d:4e:06:e2:b2:6e:b3:5b:2e: 1b:cf:79:6f:9a:b5:fe:76:a7:38:9b:e1:c6:ed:91:df:fd:0c: fb:ed:cc:f2:c6:05:a5:91:12:37:85:b5:1f:70:f0:d7:05:76: 06:31:4f:16:3f:53:f0:cb:38:1f:23:7b:c4:92:ee:86:90:f3: 96:88:d4:c0:25:e9:c7:5f:49:ec:6b:61:eb:19:fe:17:84:80: a6:32:b2:cf:25:e5:cb:94:ed:65:c8:ef:f2:f2:db:19:54:45: 6b:63:9a:e4:39:fe:c1:85:57:e3:34:d3:71:05:96:69:02:7f: c6:4e:68:4d:eb:22:43:fc:b9:c5:bc:f9:1b:09:e9:18:f5:c6: d0:b6:34:3d:8f:4e:f8:a2:35:50:44:d0:8e:e5:23:14:e7:bd: 39:f7:0b:4f:40:cb:4b:ff:d4:cb:74:90:bf:69:99:0e:a7:85: f0:34:73:bd:9c:88:76:d0:a7:99:73:69:9b:58:15:be:ae:85: 2b:01:7f:a5:ee:d3:ba:f4:ce:b6:c8:e0:cd:fb:58:0b:ff:9d: f8:3d:5f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUxMjIyMjI1NTEzWhcNMjUxMjI5MjI1NTEzWjAYMRYwFAYD VQQDDA02OTQ5Y2M1MS00ZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ur0Knx9JMB5IpSLQRwNWfoq707fk6AF0phTidxJ9uGiWnjpnjggl9FPf6PW ZyaefycEdQfQAw0hrumA99TAaHKdLyRN773RVRootVffrd9peodhp4MO5PpeBLPS HWwezU/vCie7wSMcUeq6fjBJWx/GDqlZ4SaKPrx0I9Sv1T4VIG+hdxpe+8Be61/z lmEpwjF3tN4sMwF9SDa+32O3LAam2iUuzV/QYGozXL0Gjja1Zl6Z/3K3/Zw22BRo ERCPutCZCFhRonIK8Rhsql88+q6prd3hdiLb8Nxxj61XJ19oZBnA/lUxZgqVH7L3 nWGEly74a7dBh4S8G3Ouq8oAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzBg6RM Bne4+Q3ZWlg/2k6WUGnOMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFRjNEgkY3eAOKvBf0ItjQppF+hyk+kDCSpXs2zP/72835ylmnZoc+ b3cmFVydTgbism6zWy4bz3lvmrX+dqc4m+HG7ZHf/Qz77czyxgWlkRI3hbUfcPDX BXYGMU8WP1PwyzgfI3vEku6GkPOWiNTAJenHX0nsa2HrGf4XhICmMrLPJeXLlO1l yO/y8tsZVEVrY5rkOf7BhVfjNNNxBZZpAn/GTmhN6yJD/LnFvPkbCekY9cbQtjQ9 j074ojVQRNCO5SMU57059wtPQMtL/9TLdJC/aZkOp4XwNHO9nIh20KeZc2mbWBW+ roUrAX+l7tO69M62yODN+1gL/534PV98 -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:10 2025 by rpki-client