This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: IWwiTjTeEt08ZQypDgw4toZ5YB+dXibLIiGCBFdpILg= Subject key identifier: 16:2E:71:5B:AC:84:B4:2F:BE:DD:C7:57:97:D8:06:08:4B:A3:45:DE Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 2862 Signing time: Mon 22 Dec 2025 15:45:45 +0000 Manifest this update: Mon 22 Dec 2025 15:45:44 +0000 Manifest next update: Mon 29 Dec 2025 15:45:44 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: aF5nqTO56WLvD69zKt6zBbKX0mvrl6kFgL0iWvPoXFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: Dec 22 15:45:44 2025 GMT Not After : Dec 29 15:45:44 2025 GMT Subject: CN=694967a9-9044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cc:4b:7f:bc:ad:e0:66:14:19:fa:37:b4:80: 33:08:bd:d2:d9:9d:9d:8e:98:84:5f:2a:10:c9:a8: 68:0e:ac:da:a8:9d:ec:81:09:2a:e7:75:e8:69:44: 5f:63:44:4a:ce:39:fe:d3:7a:96:9b:4a:fa:f7:cc: bd:01:8b:45:f6:62:ec:c4:30:59:7c:7b:ae:a6:09: d4:fc:f4:96:da:0d:a0:45:b6:de:5d:fe:16:9f:fb: 56:4f:a5:3d:f5:73:78:23:c7:56:39:4a:44:c5:f7: 60:81:15:e9:ef:c0:f8:31:5e:93:8d:29:84:3d:31: 45:f5:4d:39:c9:43:0f:3d:db:b4:34:75:83:6b:44: f7:19:f0:e8:5f:bf:31:30:12:dc:ec:29:17:08:79: da:60:b8:3d:4b:1e:db:59:3e:88:e0:b3:81:3f:f8: 97:15:a8:56:9d:5d:42:a9:f6:25:aa:a9:f7:f4:2f: d1:5b:1f:3b:3e:05:09:5d:d4:0d:67:2e:31:5c:5a: 55:67:35:7e:54:4c:ce:02:05:0b:9a:d5:19:8a:57: 05:99:ed:fb:0c:8c:b5:ff:24:14:5e:a5:64:20:60: 4a:0d:c2:51:35:1e:ed:10:fc:84:8c:de:a1:a1:d6: 79:8a:05:d2:ee:7c:ed:c2:12:00:76:ee:7e:25:a5: 51:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:71:5B:AC:84:B4:2F:BE:DD:C7:57:97:D8:06:08:4B:A3:45:DE X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1a:f9:05:74:36:28:3b:33:fe:b1:b8:24:ae:92:21:3c:fb: f1:a0:2f:f0:39:b4:bf:bc:9a:7b:2c:16:87:03:fb:55:f6:9e: d8:d1:1d:dd:6f:26:7a:96:1a:e5:d5:73:db:79:73:32:ef:df: 0d:9f:55:a5:bc:03:f1:00:9a:af:41:6c:75:50:b3:47:d9:99: 2a:0d:06:8d:49:b5:15:c8:3a:72:f5:a4:d6:91:a7:fc:53:cb: 7c:fc:25:77:30:c9:1d:69:cb:5e:fe:11:e1:4a:d8:30:b5:04: 80:5f:f8:87:b3:4f:d5:b5:fb:ec:71:86:e6:74:7f:88:57:5b: f4:7e:db:d7:39:8e:1e:9e:aa:ed:9a:5f:22:97:f6:23:1a:df: 7a:63:55:89:5e:db:23:3a:68:6f:7a:94:6d:f3:a8:95:a1:5e: 02:db:35:d8:b8:78:20:d9:81:07:fc:1b:61:6a:e1:81:52:c7: 55:da:7d:df:57:5b:b8:4c:26:0e:34:2f:a6:80:76:b1:62:ce: 89:8b:64:30:6d:df:10:e1:ac:41:de:4f:e9:a8:30:22:f5:c3: 70:6a:ca:f9:01:1f:65:9b:72:c7:07:48:ac:1c:8d:8f:0e:6f: 03:2b:87:5c:9d:57:64:35:00:92:7e:f8:fb:3a:c9:0d:a6:6e: fc:d5:c2:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjUxMjIyMTU0NTQ0WhcNMjUxMjI5MTU0NTQ0WjAYMRYwFAYD VQQDDA02OTQ5NjdhOS05MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cxLf7yt4GYUGfo3tIAzCL3S2Z2djpiEXyoQyahoDqzaqJ3sgQkq53XoaURf Y0RKzjn+03qWm0r698y9AYtF9mLsxDBZfHuupgnU/PSW2g2gRbbeXf4Wn/tWT6U9 9XN4I8dWOUpExfdggRXp78D4MV6TjSmEPTFF9U05yUMPPdu0NHWDa0T3GfDoX78x MBLc7CkXCHnaYLg9Sx7bWT6I4LOBP/iXFahWnV1CqfYlqqn39C/RWx87PgUJXdQN Zy4xXFpVZzV+VEzOAgULmtUZilcFme37DIy1/yQUXqVkIGBKDcJRNR7tEPyEjN6h odZ5igXS7nztwhIAdu5+JaVRiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYucVus hLQvvt3HV5fYBghLo0XeMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeGvkFdDYoOzP+sbgkrpIhPPvxoC/wObS/vJp7LBaHA/tV9p7Y0R3d byZ6lhrl1XPbeXMy798Nn1WlvAPxAJqvQWx1ULNH2ZkqDQaNSbUVyDpy9aTWkaf8 U8t8/CV3MMkdacte/hHhStgwtQSAX/iHs0/VtfvscYbmdH+IV1v0ftvXOY4enqrt ml8il/YjGt96Y1WJXtsjOmhvepRt86iVoV4C2zXYuHgg2YEH/BthauGBUsdV2n3f V1u4TCYONC+mgHaxYs6Ji2Qwbd8Q4axB3k/pqDAi9cNwasr5AR9lm3LHB0isHI2P Dm8DK4dcnVdkNQCSfvj7OskNpm781cKp -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:30 2025 by rpki-client