This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json) Hash identifier: 24MScQ8MWWMuQhMZXPKcfJPrsSp4CryYcC4R/g4+uBo= Subject key identifier: 16:44:B4:25:F9:A1:1A:AC:EB:82:A4:1D:C2:49:B3:96:91:1B:9A:7B Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft Manifest number: 06AF Signing time: Mon 22 Dec 2025 21:31:24 +0000 Manifest this update: Mon 22 Dec 2025 21:31:23 +0000 Manifest next update: Mon 29 Dec 2025 21:31:23 +0000 Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: 2PuzpK1yfvSAPNZqTDucF+TK09iN2pDNoxYklUh4gQk=) 2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: rIs0TSp/FOVS2yEmJo3gyqgsWO9NpZnz1xIrp85P4OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Validity Not Before: Dec 22 21:31:23 2025 GMT Not After : Dec 29 21:31:23 2025 GMT Subject: CN=6949b8ab-31b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:b8:9e:9b:20:46:20:63:ab:69:c1:a9:57: ca:2b:88:e5:c2:de:ed:71:75:f2:ff:f7:6a:f5:4d: 94:82:7a:ad:59:e7:71:83:fd:0f:17:9f:26:5e:1a: a5:58:74:4d:79:55:9b:62:33:03:8f:4d:22:ea:67: 64:bb:f1:39:79:4d:79:5e:92:51:16:82:47:5a:d3: 7d:f5:cb:7e:01:3b:61:4e:bb:c9:4c:b4:20:46:c8: cc:27:d3:8e:06:ba:0c:9d:e7:59:dc:89:0b:5b:fe: fc:f0:b1:f4:c8:b9:77:0d:ee:38:5a:b4:61:42:4c: 09:c3:43:c8:99:75:44:a4:ee:d9:e4:be:85:fd:a5: 65:61:f2:8b:af:83:8d:e8:a8:ab:3e:54:db:b6:77: 26:bf:3b:f5:58:c2:1d:c8:b2:b7:d9:f4:41:bb:cd: 84:c1:39:5a:9c:97:f5:6e:62:65:4c:21:75:ea:31: 16:f8:c1:2e:dc:b0:05:ec:5b:37:5c:fd:0c:85:a0: 57:44:d0:fd:91:67:71:95:60:31:82:04:f2:38:30: 7e:07:28:58:11:67:31:1c:ef:2d:f4:48:58:da:f9: 2a:10:d8:d5:fb:81:21:ee:f8:38:39:a0:36:ee:27: 81:25:67:e8:50:e0:8f:95:75:a4:58:99:7a:37:34: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:B4:25:F9:A1:1A:AC:EB:82:A4:1D:C2:49:B3:96:91:1B:9A:7B X509v3 Authority Key Identifier: keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bb:33:c2:d7:60:18:b6:31:8d:c2:a9:99:76:c3:50:1e:08: b4:13:a4:a1:4b:b2:b9:6f:18:5a:0b:c9:e9:06:53:71:20:30: 84:f4:69:42:52:b6:bd:1f:3d:b2:c4:f5:dc:23:5b:6b:4a:2e: fa:83:95:f5:43:93:65:e6:b9:4b:a0:92:1e:e4:d2:2c:9b:e3: 84:f0:2b:cb:5c:7d:89:07:a6:8b:2a:3e:d8:07:82:8a:0e:3f: 00:54:82:4e:6c:b9:e7:39:42:88:4c:0c:fa:55:98:d2:a9:3d: b3:62:c2:a6:0a:c3:6b:c9:59:98:51:3e:8c:f6:42:a6:fa:0a: 7a:39:b6:c1:9a:4b:bc:7b:6a:e4:14:28:f0:8a:2f:3d:dd:7c: 93:7e:af:06:b2:4c:79:66:39:cf:5f:7d:6e:91:52:42:bf:70: c7:a7:92:b2:61:05:7a:1e:54:70:9f:10:9e:13:0d:f6:4b:ed: c7:49:a0:69:a0:6a:bf:ed:48:34:3b:47:f0:ff:22:24:b3:d0: 94:6e:80:61:1d:64:08:2a:ee:85:3c:8d:69:12:ce:76:03:00: 79:71:70:f7:fb:24:74:5f:de:21:ea:ec:6b:27:8d:bb:c7:6a: 70:93:82:cd:43:19:9a:be:02:8a:f4:84:d5:3e:d2:28:c6:cc: 6b:6b:3e:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2 RjkwQkZDNjAwHhcNMjUxMjIyMjEzMTIzWhcNMjUxMjI5MjEzMTIzWjAYMRYwFAYD VQQDDA02OTQ5YjhhYi0zMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7+4npsgRiBjq2nBqVfKK4jlwt7tcXXy//dq9U2UgnqtWedxg/0PF58mXhql WHRNeVWbYjMDj00i6mdku/E5eU15XpJRFoJHWtN99ct+ATthTrvJTLQgRsjMJ9OO BroMnedZ3IkLW/788LH0yLl3De44WrRhQkwJw0PImXVEpO7Z5L6F/aVlYfKLr4ON 6KirPlTbtncmvzv1WMIdyLK32fRBu82EwTlanJf1bmJlTCF16jEW+MEu3LAF7Fs3 XP0MhaBXRND9kWdxlWAxggTyODB+ByhYEWcxHO8t9EhY2vkqENjV+4Eh7vg4OaA2 7ieBJWfoUOCPlXWkWJl6NzQh/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZEtCX5 oRqs64KkHcJJs5aRG5p7MB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBRC80QjY1MDY1ODhERTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpj MTR2Y09pRXJDMzV2a0xfR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+uzPC12AYtjGNwqmZdsNQHgi0E6ShS7K5bxhaC8npBlNxIDCE9GlC Ura9Hz2yxPXcI1trSi76g5X1Q5Nl5rlLoJIe5NIsm+OE8CvLXH2JB6aLKj7YB4KK Dj8AVIJObLnnOUKITAz6VZjSqT2zYsKmCsNryVmYUT6M9kKm+gp6ObbBmku8e2rk FCjwii893XyTfq8Gskx5ZjnPX31ukVJCv3DHp5KyYQV6HlRwnxCeEw32S+3HSaBp oGq/7Ug0O0fw/yIks9CUboBhHWQIKu6FPI1pEs52AwB5cXD3+yR0X94h6uxrJ427 x2pwk4LNQxmavgKK9ITVPtIoxsxraz5i -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:52 2025 by rpki-client