This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: 5HhFeGmFbUjLBNtsHYSE4FbXVAThAFb11A4EXlHdbZw= Subject key identifier: F5:BC:88:DB:95:4D:5E:5C:E5:D7:CE:15:91:C5:63:DF:65:95:7A:A4 Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 6F Signing time: Tue 23 Dec 2025 05:47:09 +0000 Manifest this update: Tue 23 Dec 2025 05:47:09 +0000 Manifest next update: Tue 30 Dec 2025 05:47:09 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: efm1lmNWLF0zHVHN4HUYWrOpekIALvKSqNUPF2m6e4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Dec 23 05:47:09 2025 GMT Not After : Dec 30 05:47:09 2025 GMT Subject: CN=694a2cdd-83af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:bc:f0:e1:63:52:46:99:40:5a:88:37:50: d7:a9:a9:ef:86:fa:d6:6a:f0:2a:34:2d:39:0c:cb: 98:f1:95:17:64:06:d0:ab:0a:7f:97:44:49:e9:8e: fb:b4:21:51:bb:58:f4:fa:7f:f4:7f:d6:4a:7d:10: 4b:05:35:bc:0f:8e:e8:b0:61:ba:c9:35:5b:86:42: f5:7f:88:9f:e3:b3:09:a8:29:e1:48:5d:ae:f1:60: f4:c3:00:14:f4:4a:4b:8b:98:32:72:3f:68:fe:e6: 20:fe:d5:3a:27:25:8e:b7:1a:5d:e0:c4:1a:db:a8: ba:60:5f:e3:6d:79:62:22:00:c7:bf:de:55:c2:7f: 30:9f:0a:93:0d:81:b2:1e:f3:2f:3b:27:a3:6d:b9: 84:b2:2a:db:2c:00:56:71:70:bd:9e:bd:03:66:a9: 9d:f8:9f:d3:0c:5c:e3:ec:59:f5:be:db:05:a6:a9: 74:9c:b9:70:9a:a3:bf:21:e6:9d:1f:87:29:4f:42: 69:f3:0a:12:c0:eb:c9:66:24:aa:f2:d9:23:6b:03: 9d:e3:d0:b7:94:8f:9a:87:6a:61:fe:fd:64:55:b9: bf:0a:f2:cc:34:b1:71:9a:42:b4:6e:5b:b9:b8:66: e7:a7:77:ee:d3:89:76:3b:55:89:92:db:75:0e:f1: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:88:DB:95:4D:5E:5C:E5:D7:CE:15:91:C5:63:DF:65:95:7A:A4 X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a2:15:c9:86:45:ac:2a:dc:af:5e:cc:31:36:fc:0c:0e:cd: 5d:85:d2:f5:ae:c0:5c:af:18:68:9c:9d:10:2b:71:ab:7b:1a: 9f:d5:f3:12:8a:e6:7c:8a:f0:3e:34:76:4b:2a:32:8d:eb:2f: 25:e5:90:dd:f8:25:17:1e:aa:cd:87:68:e8:76:9b:e2:b1:bf: e4:88:53:ea:3a:74:a1:67:f7:96:99:03:3e:14:ea:ca:b8:a9: 4a:43:02:c2:6c:6a:e0:a4:ac:7d:4a:10:02:2c:a1:57:a5:eb: f3:61:80:b8:57:d7:1e:56:ba:e1:51:15:47:3f:4d:65:d9:fe: ca:cc:bc:fd:0a:90:60:a2:2a:99:35:91:4d:f3:43:4c:8a:e3: a4:b5:f5:a3:10:d9:bb:f5:34:c3:c3:5b:f3:79:61:81:b7:34: c8:fb:f5:29:c7:74:18:4f:a9:52:12:66:2b:0a:05:26:86:fc: 96:49:83:32:d9:c1:f0:da:0a:ba:d3:69:c2:2b:3a:93:bf:e0: a0:d7:93:97:77:84:76:fa:c5:55:c8:45:4a:a7:da:eb:54:84: 3f:67:c6:59:0a:d7:88:d6:e7:3e:ba:30:f8:45:36:2b:46:d6: 85:05:83:1d:af:f3:a1:b1:80:fb:58:52:c2:2c:7e:5d:67:c3: 08:20:85:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTEyMjMwNTQ3MDlaFw0yNTEyMzAwNTQ3MDlaMBgxFjAUBgNV BAMMDTY5NGEyY2RkLTgzYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIdrzw4WNSRplAWog3UNepqe+G+tZq8Co0LTkMy5jxlRdkBtCrCn+XREnpjvu0 IVG7WPT6f/R/1kp9EEsFNbwPjuiwYbrJNVuGQvV/iJ/jswmoKeFIXa7xYPTDABT0 SkuLmDJyP2j+5iD+1TonJY63Gl3gxBrbqLpgX+NteWIiAMe/3lXCfzCfCpMNgbIe 8y87J6NtuYSyKtssAFZxcL2evQNmqZ34n9MMXOPsWfW+2wWmqXScuXCao78h5p0f hylPQmnzChLA68lmJKry2SNrA53j0LeUj5qHamH+/WRVub8K8sw0sXGaQrRuW7m4 Zuend+7TiXY7VYmS23UO8ecLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9byI25VN Xlzl184VkcVj32WVeqQwHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEqiFcmGRawq3K9ezDE2/AwOzV2F0vWuwFyvGGicnRArcat7Gp/V8xKK 5nyK8D40dksqMo3rLyXlkN34JRceqs2HaOh2m+Kxv+SIU+o6dKFn95aZAz4U6sq4 qUpDAsJsauCkrH1KEAIsoVel6/NhgLhX1x5WuuFRFUc/TWXZ/srMvP0KkGCiKpk1 kU3zQ0yK46S19aMQ2bv1NMPDW/N5YYG3NMj79SnHdBhPqVISZisKBSaG/JZJgzLZ wfDaCrrTacIrOpO/4KDXk5d3hHb6xVXIRUqn2utUhD9nxlkK14jW5z66MPhFNitG 1oUFgx2v86GxgPtYUsIsfl1nwwgghTo= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:47 2025 by rpki-client