This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: KPSDErfaobfHi3oJBwuuHkVDwJXOMsqMQrb/+l26ERo= Subject key identifier: FE:C6:0B:43:5F:4C:62:FC:80:A4:3C:30:1F:B8:60:84:77:35:88:26 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 0555 Signing time: Mon 22 Dec 2025 22:32:05 +0000 Manifest this update: Mon 22 Dec 2025 22:32:04 +0000 Manifest next update: Mon 29 Dec 2025 22:32:04 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: yj84wclS/TzBMcM0512NelfQ90kjcg7y9crBfN/SxcA=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: V9gxitcASEhBtZ5mFM0D3uOUUMEJz8JM7gRGecF35Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Dec 22 22:32:04 2025 GMT Not After : Dec 29 22:32:04 2025 GMT Subject: CN=6949c6e5-93c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:40:11:b9:53:3f:79:04:42:26:89:0a:fa: 39:5d:25:fd:9f:b2:20:8e:ce:f5:ca:5d:8e:81:86: 9c:6c:b5:97:85:4c:46:1b:e2:5c:2a:56:d9:3f:03: 12:e8:e4:eb:5f:94:4b:f8:de:1a:06:23:f2:a1:2a: ef:78:b3:35:c1:0b:03:26:8e:7d:8d:34:dd:95:46: 25:e0:9b:26:35:07:91:7d:98:11:99:ec:09:56:4a: 1b:cc:a6:db:fe:10:54:e7:f1:e4:5a:64:89:01:5e: 12:a8:6a:e2:58:41:e5:58:26:1e:3f:b8:fe:d6:3f: 6d:81:a8:e5:6e:16:89:ef:74:ab:82:e3:6c:4c:c4: 65:ff:1d:73:5c:6d:dd:21:dd:8d:23:74:72:e9:e6: b5:99:56:58:f2:91:3d:ff:44:8f:70:08:a8:29:8f: 89:54:bd:06:22:d6:d1:ea:e3:fe:34:c8:a3:d8:50: 18:2f:cd:e0:76:a1:d3:20:d8:3f:6a:2a:b2:f3:58: 54:8a:f4:19:fb:b0:a9:38:02:a5:ca:f2:f8:6a:10: a4:9f:2d:3a:8f:42:77:10:47:3a:82:e2:ce:fd:c8: 77:eb:9d:25:b8:38:55:09:4e:b3:13:e9:51:e7:29: 4e:46:74:f2:23:ff:9d:82:04:db:1e:4a:ca:eb:cd: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:0B:43:5F:4C:62:FC:80:A4:3C:30:1F:B8:60:84:77:35:88:26 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:82:25:2c:71:cb:54:48:e7:66:a4:87:58:9d:fe:45:c5:a3: 93:5d:76:4f:3e:92:3c:0a:ae:84:eb:1d:87:fd:22:35:23:d8: da:1a:a3:61:2c:98:53:e8:76:c0:34:53:f2:97:41:ce:c8:c5: 19:73:a4:90:8e:be:86:1a:a1:1a:20:3f:25:d5:0c:9f:c7:6d: 66:64:bb:4c:1d:78:f2:b1:5d:54:12:19:5e:a3:1d:90:d0:c9: 66:19:f0:b4:af:44:aa:93:96:00:8b:65:a3:c2:2d:b5:6a:d6: f5:9e:50:f8:28:ce:b4:3a:42:79:5d:cb:86:de:4c:e7:5b:2d: 12:95:f7:e8:2c:e6:73:b7:16:e0:7d:fa:f3:bf:6b:1e:04:5a: cd:bd:11:b5:f7:27:63:fc:66:16:c9:83:ea:37:76:7f:32:88: de:9d:8e:b5:4c:10:fb:c6:42:c6:cf:80:41:cc:c6:c2:c4:46: 09:f7:c7:67:4d:cd:60:4c:58:a9:21:8a:8a:1f:27:3c:cd:31: 4b:af:e6:77:04:1c:b8:a0:0f:7d:af:c7:77:be:ff:e1:f5:4c: 4f:ce:a1:4e:49:51:46:ef:70:c6:ef:e1:7a:8a:c6:78:3c:c2: 43:1b:4d:48:af:ad:35:fe:40:d8:53:85:b6:e1:53:0d:3b:4f: e1:c0:d2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUxMjIyMjIzMjA0WhcNMjUxMjI5MjIzMjA0WjAYMRYwFAYD VQQDDA02OTQ5YzZlNS05M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8VAEblTP3kEQiaJCvo5XSX9n7Igjs71yl2OgYacbLWXhUxGG+JcKlbZPwMS 6OTrX5RL+N4aBiPyoSrveLM1wQsDJo59jTTdlUYl4JsmNQeRfZgRmewJVkobzKbb /hBU5/HkWmSJAV4SqGriWEHlWCYeP7j+1j9tgajlbhaJ73SrguNsTMRl/x1zXG3d Id2NI3Ry6ea1mVZY8pE9/0SPcAioKY+JVL0GItbR6uP+NMij2FAYL83gdqHTINg/ aiqy81hUivQZ+7CpOAKlyvL4ahCkny06j0J3EEc6guLO/ch3650luDhVCU6zE+lR 5ylORnTyI/+dggTbHkrK680hAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7GC0Nf TGL8gKQ8MB+4YIR3NYgmMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTgiUscctUSOdmpIdYnf5FxaOTXXZPPpI8Cq6E6x2H/SI1I9jaGqNh LJhT6HbANFPyl0HOyMUZc6SQjr6GGqEaID8l1Qyfx21mZLtMHXjysV1UEhleox2Q 0MlmGfC0r0Sqk5YAi2Wjwi21atb1nlD4KM60OkJ5XcuG3kznWy0SlffoLOZztxbg ffrzv2seBFrNvRG19ydj/GYWyYPqN3Z/MojenY61TBD7xkLGz4BBzMbCxEYJ98dn Tc1gTFipIYqKHyc8zTFLr+Z3BBy4oA99r8d3vv/h9UxPzqFOSVFG73DG7+F6isZ4 PMJDG01Ir601/kDYU4W24VMNO0/hwNKd -----END CERTIFICATE-----Generated at Wed Dec 24 19:26:22 2025 by rpki-client