This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: 4xYq7RSlDUJmP6RqPmKFu9t8BXjM7HBqMB3ZK76gzHw= Subject key identifier: 22:9D:A1:D6:CF:BF:BC:86:D8:16:9E:EA:17:C8:0D:F6:E4:D4:57:B3 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 44 Signing time: Fri 19 Dec 2025 06:21:12 +0000 Manifest this update: Fri 19 Dec 2025 06:21:11 +0000 Manifest next update: Fri 26 Dec 2025 06:21:11 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: 9nfnQTS0g7Ay1LeqBBmGOZYvFwwwIpW1CJungWcgQxE=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Dec 19 06:21:11 2025 GMT Not After : Dec 26 06:21:11 2025 GMT Subject: CN=6944eed8-5171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:bf:74:bd:db:71:45:f4:87:83:03:51:ed: a4:62:93:83:ad:90:db:a2:4b:cc:6e:af:a1:4c:6f: 7f:dd:c8:38:e0:c1:b5:ec:4f:28:ee:60:f3:1c:5f: 74:75:8c:83:ae:16:f0:8c:f7:5a:16:b5:69:44:7f: 1b:f4:c3:ef:09:27:87:a4:1e:24:ba:60:0f:ba:a0: 5b:0b:d7:e7:9f:03:b5:0b:e0:30:cc:b6:18:68:52: 19:6d:a2:c7:dc:8b:fc:1d:6d:40:77:1b:b9:a0:a2: 15:0d:b0:44:b8:2a:1f:9c:1d:52:79:fa:c7:23:d8: 0f:fc:1c:b4:b6:95:86:49:f9:5f:6a:f6:cb:51:69: 29:55:15:01:14:ed:78:de:7b:6a:ee:2d:40:38:fb: 12:b2:31:88:f8:c1:4a:61:96:ed:12:a2:57:d0:c3: 92:09:d2:54:2d:d4:cb:b4:c7:34:71:d8:5c:49:0c: 61:38:92:d7:2e:8d:e7:42:7a:37:ac:30:75:c8:37: 79:fa:44:69:a4:76:18:d7:44:a7:ee:1e:0e:89:d5: d5:b0:1d:53:7e:3c:1e:ca:c3:5d:bd:a7:3e:a4:79: 92:86:5c:03:e6:79:ee:d6:99:32:c0:a1:1a:34:c8: 6f:5e:ce:9f:c6:8d:78:3e:15:0b:43:1b:5b:d5:00: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:A1:D6:CF:BF:BC:86:D8:16:9E:EA:17:C8:0D:F6:E4:D4:57:B3 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0b:97:4c:45:14:d4:ec:0d:8c:6e:23:e5:48:cd:59:06:5e: 4c:f4:bc:5e:b2:38:ff:b3:e0:4f:18:72:4f:35:fd:a7:61:53: 8c:f4:48:31:31:97:85:f3:ad:cd:32:b6:32:8f:ea:22:14:40: a5:df:9b:ff:50:3c:dd:4d:fc:2a:51:3e:30:9c:4c:1f:d9:27: 5c:6b:70:69:89:bc:b0:01:57:06:95:50:f6:df:6e:24:bd:d1: cd:d5:85:65:d7:58:a5:41:df:41:53:bf:6b:68:56:0c:3c:da: 11:db:eb:19:0c:8e:d6:ab:11:2e:54:19:c0:d4:1f:18:67:51: 9d:ac:61:24:df:57:97:03:9e:07:4e:18:0a:7f:3f:dd:78:c1: d8:bc:d3:d9:1f:4f:c0:99:54:42:5c:b0:c2:b3:a6:f6:a0:d3: ed:82:2f:e4:87:c4:00:9e:a1:54:b9:09:57:e1:20:49:4d:94: 26:a0:63:49:cd:54:76:d4:71:50:9a:62:d0:cb:39:11:23:6e: 50:88:e5:4a:7b:63:db:a8:4f:ca:71:64:38:34:73:2a:dc:f6: b8:bc:cc:37:1d:29:c0:fa:71:71:ac:d8:c0:85:88:43:ef:50: 8d:0f:a2:cd:93:f3:7f:1a:a7:f4:8f:3a:6d:f5:dd:b3:e3:1c: bc:cb:72:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNTEyMTkwNjIxMTFaFw0yNTEyMjYwNjIxMTFaMBgxFjAUBgNV BAMMDTY5NDRlZWQ4LTUxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQN790vdtxRfSHgwNR7aRik4OtkNuiS8xur6FMb3/dyDjgwbXsTyjuYPMcX3R1 jIOuFvCM91oWtWlEfxv0w+8JJ4ekHiS6YA+6oFsL1+efA7UL4DDMthhoUhltosfc i/wdbUB3G7mgohUNsES4Kh+cHVJ5+scj2A/8HLS2lYZJ+V9q9stRaSlVFQEU7Xje e2ruLUA4+xKyMYj4wUphlu0SolfQw5IJ0lQt1Mu0xzRx2FxJDGE4ktcujedCejes MHXIN3n6RGmkdhjXRKfuHg6J1dWwHVN+PB7Kw129pz6keZKGXAPmee7WmTLAoRo0 yG9ezp/GjXg+FQtDG1vVAGV7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIp2h1s+/ vIbYFp7qF8gN9uTUV7MwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwLl0xFFNTsDYxuI+VIzVkGXkz0vF6yOP+z4E8Yck81/adhU4z0SDEx l4Xzrc0ytjKP6iIUQKXfm/9QPN1N/CpRPjCcTB/ZJ1xrcGmJvLABVwaVUPbfbiS9 0c3VhWXXWKVB30FTv2toVgw82hHb6xkMjtarES5UGcDUHxhnUZ2sYSTfV5cDngdO GAp/P914wdi809kfT8CZVEJcsMKzpvag0+2CL+SHxACeoVS5CVfhIElNlCagY0nN VHbUcVCaYtDLOREjblCI5Up7Y9uoT8pxZDg0cyrc9ri8zDcdKcD6cXGs2MCFiEPv UI0Pos2T838ap/SPOm313bPjHLzLcg8= -----END CERTIFICATE-----Generated at Sat Dec 20 13:19:23 2025 by rpki-client