This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: Z7pbRRSH4G38dF71KSzxU97zfWRLgm6yUIxxuBmDMpg= Subject key identifier: AC:DA:04:2F:2D:7B:AD:69:EA:9D:C6:5F:C5:DA:46:76:7F:07:DC:C1 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 0437 Signing time: Mon 22 Dec 2025 23:20:56 +0000 Manifest this update: Mon 22 Dec 2025 23:20:56 +0000 Manifest next update: Mon 29 Dec 2025 23:20:56 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: oR6FCpW4tOx8xpUISl9V242lloT6wAGNPXt8/nzkke8=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: bpLtQ8qLL6l2ZogXhZIDbdT4T6FC+6P3DrjrNo4piak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: Dec 22 23:20:56 2025 GMT Not After : Dec 29 23:20:56 2025 GMT Subject: CN=6949d258-9905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:3b:19:b6:06:6f:ea:77:67:43:37:ba:d9: 93:77:03:ae:92:cf:61:ae:cd:a4:75:e1:6a:75:e3: 9c:1e:22:f5:98:1a:db:f5:56:06:8c:0d:d0:08:e4: f9:2b:1b:af:32:db:87:1c:1a:e6:80:f0:e4:42:29: 8e:49:7a:45:49:a3:f2:9a:06:50:43:6d:03:a0:13: f4:c4:98:d8:d2:e9:1c:90:7a:39:1b:85:80:fd:52: bf:e5:2c:72:3d:4e:6c:76:19:48:14:22:96:d9:42: bc:31:76:72:f7:6b:38:1a:ad:a1:21:e1:88:38:bc: 88:b5:77:07:f9:b1:5b:9f:43:0a:ef:d6:63:a5:dc: 19:41:d5:30:3e:19:c6:3d:49:1f:ac:fe:d3:6e:c8: 73:fa:82:2b:d8:8c:a7:93:e4:a6:6a:95:57:d1:b3: a3:e1:ab:51:58:40:8d:90:be:15:5b:d4:6f:f4:9c: 0f:cf:fe:b7:8f:79:80:0c:f6:45:41:0d:63:b2:f4: 04:71:d4:4a:27:be:cb:0a:ce:b0:5f:f4:9c:7e:ca: c1:4b:bb:64:51:e8:9e:0d:3f:82:61:ba:25:0e:2e: 71:43:40:8d:94:4a:41:89:3a:b5:a6:e6:da:f4:b8: 09:cf:25:a7:91:ba:f4:fd:0b:92:ca:ce:b3:34:64: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:04:2F:2D:7B:AD:69:EA:9D:C6:5F:C5:DA:46:76:7F:07:DC:C1 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:01:3b:61:75:01:8b:86:f6:9b:85:7f:fe:33:af:c3:6f:37: 99:53:48:83:05:76:68:ba:55:3d:f1:0d:5f:04:5b:2a:90:3e: 67:79:d0:96:13:2c:f7:ca:f2:fe:d9:8f:6c:76:7e:d2:93:0f: 5a:df:96:91:88:99:6a:7a:e0:4f:99:05:6b:8d:02:bd:c2:84: 23:f2:f2:94:a3:91:29:c8:04:3f:8e:fe:c6:b5:19:53:25:76: 42:ce:04:0a:f3:f3:66:18:48:65:d4:f8:ff:d6:06:70:c3:7c: ea:cb:b5:87:1c:d8:4d:dd:22:81:3a:3a:b0:58:39:5f:6a:c7: d7:1a:c5:63:ca:59:be:99:8f:f9:29:29:da:3a:d2:d5:49:4b: ba:f3:12:7a:ae:c8:58:1c:64:4d:43:cd:e7:df:59:4e:4d:3d: 01:d5:00:ba:d0:e4:de:fd:f0:92:6e:2a:75:cd:0c:11:cd:60: 10:2d:9d:09:a3:b6:09:f0:21:fe:6f:01:9a:c3:73:43:57:aa: ee:4c:08:09:08:26:33:99:55:5c:a5:70:22:01:3a:2a:f8:df: 5f:b6:bd:6f:9c:66:76:af:4c:7e:b1:43:e0:6f:67:7a:df:d6: 5e:3c:c1:fa:83:d7:e3:a0:a0:ea:77:48:de:60:d9:9d:fa:ad: 4e:29:dc:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjUxMjIyMjMyMDU2WhcNMjUxMjI5MjMyMDU2WjAYMRYwFAYD VQQDDA02OTQ5ZDI1OC05OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNQ7GbYGb+p3Z0M3utmTdwOuks9hrs2kdeFqdeOcHiL1mBrb9VYGjA3QCOT5 KxuvMtuHHBrmgPDkQimOSXpFSaPymgZQQ20DoBP0xJjY0ukckHo5G4WA/VK/5Sxy PU5sdhlIFCKW2UK8MXZy92s4Gq2hIeGIOLyItXcH+bFbn0MK79ZjpdwZQdUwPhnG PUkfrP7Tbshz+oIr2Iynk+SmapVX0bOj4atRWECNkL4VW9Rv9JwPz/63j3mADPZF QQ1jsvQEcdRKJ77LCs6wX/ScfsrBS7tkUeieDT+CYbolDi5xQ0CNlEpBiTq1puba 9LgJzyWnkbr0/QuSys6zNGTy1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzaBC8t e61p6p3GX8XaRnZ/B9zBMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSATthdQGLhvabhX/+M6/DbzeZU0iDBXZoulU98Q1fBFsqkD5nedCW Eyz3yvL+2Y9sdn7Skw9a35aRiJlqeuBPmQVrjQK9woQj8vKUo5EpyAQ/jv7GtRlT JXZCzgQK8/NmGEhl1Pj/1gZww3zqy7WHHNhN3SKBOjqwWDlfasfXGsVjylm+mY/5 KSnaOtLVSUu68xJ6rshYHGRNQ83n31lOTT0B1QC60OTe/fCSbip1zQwRzWAQLZ0J o7YJ8CH+bwGaw3NDV6ruTAgJCCYzmVVcpXAiAToq+N9ftr1vnGZ2r0x+sUPgb2d6 39ZePMH6g9fjoKDqd0jeYNmd+q1OKdyR -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:23 2025 by rpki-client