This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: //9llzhoXojg9aEXuucuAsqqye1ZD7jo+HghztmUHA0= Subject key identifier: E8:DD:10:F5:A9:4E:CC:0D:78:25:F1:B3:FD:E6:BC:9D:D9:34:29:DD Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: 0115 Signing time: Fri 05 Dec 2025 02:55:05 +0000 Manifest this update: Fri 05 Dec 2025 02:55:05 +0000 Manifest next update: Fri 12 Dec 2025 02:55:05 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: a3KVQoSeKjo9UisoRhj5LF2yd7DjIw0LeJVxBFrwsNs=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Dec 5 02:55:05 2025 GMT Not After : Dec 12 02:55:05 2025 GMT Subject: CN=69324989-bf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:72:73:30:57:89:2e:09:e7:8b:10:3e:47: 13:e1:17:84:15:5f:40:18:ca:e3:bd:4c:7d:24:22: 30:60:bf:9b:ac:e9:2c:21:0f:20:0f:e3:d1:38:09: a5:bb:e0:b7:01:3e:25:6e:8e:74:21:90:25:97:42: 69:83:a4:81:c9:da:65:db:bd:ca:05:b1:f3:b0:03: 2f:8b:1c:df:ef:ec:56:86:34:36:8d:a6:46:b6:d2: 43:0b:82:fe:f1:91:10:46:81:18:51:36:08:9f:0d: f6:ce:6d:c1:c4:95:f6:60:31:11:67:61:50:92:89: a6:2a:81:72:20:dc:6c:7c:38:76:a6:48:80:b6:5e: b1:15:7d:35:47:69:33:11:8f:21:8e:6b:53:9d:ed: f5:8a:1d:bb:40:fa:85:6e:76:ec:31:6a:8f:92:7d: b2:38:31:c5:c2:fe:0d:4e:6f:16:3a:6e:0b:c3:ba: 5b:85:b8:f7:03:5a:bd:3c:e7:cf:fb:dd:62:cb:57: d8:4e:20:08:55:cd:59:5f:18:3c:47:23:d9:d7:fe: 2a:d2:81:45:2f:e5:48:44:ab:14:32:fb:1f:e5:cf: 3e:e5:38:2d:2f:53:dc:99:c7:47:f0:05:43:8b:84: 9d:3c:3c:69:7b:41:aa:ec:8d:57:64:8a:d4:25:15: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DD:10:F5:A9:4E:CC:0D:78:25:F1:B3:FD:E6:BC:9D:D9:34:29:DD X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cc:c9:7e:c3:fc:06:95:72:68:e4:cd:0a:82:ca:4d:4a:22: 98:1f:70:68:ad:9b:2e:60:0a:f5:c3:b3:b2:43:ae:31:9b:b6: 08:d2:46:d1:ee:44:cb:18:04:29:ed:ab:c3:a1:93:29:09:f4: e7:ce:a1:6a:24:ad:a7:c5:53:f1:6a:91:f9:f6:82:28:f9:e4: 03:0c:08:7b:48:d2:26:ee:43:f2:d4:10:d2:ac:78:82:ee:da: fb:84:6d:da:33:84:2e:43:98:ba:aa:20:83:31:fc:68:47:47: c2:85:67:b2:1c:1a:52:46:1f:51:ba:df:2b:cf:3a:90:ac:cd: 8f:a6:68:e7:37:39:06:60:f0:21:20:aa:37:34:29:dc:5d:71: 53:8b:7d:e0:4a:ae:07:5c:a3:1f:57:d9:11:fd:e8:5a:1d:86: cc:b9:a4:07:01:db:b1:92:22:33:6e:78:d3:31:45:f0:76:ed: 59:90:25:26:47:44:4a:81:5e:70:fb:c5:e4:1d:f5:d1:13:c1: 73:56:47:bf:fa:36:cf:93:aa:af:23:46:ce:58:84:ff:14:b0: 65:e2:5e:64:b3:15:8c:d4:f7:d2:a5:9f:65:28:bd:68:2e:1a: 04:c6:d7:6f:41:b6:00:eb:ef:b7:e6:7f:bc:44:5d:a2:dd:f8: 22:71:cb:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUxMjA1MDI1NTA1WhcNMjUxMjEyMDI1NTA1WjAYMRYwFAYD VQQDEw02OTMyNDk4OS1iZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqByczBXiS4J54sQPkcT4ReEFV9AGMrjvUx9JCIwYL+brOksIQ8gD+PROAml u+C3AT4lbo50IZAll0Jpg6SBydpl273KBbHzsAMvixzf7+xWhjQ2jaZGttJDC4L+ 8ZEQRoEYUTYInw32zm3BxJX2YDERZ2FQkommKoFyINxsfDh2pkiAtl6xFX01R2kz EY8hjmtTne31ih27QPqFbnbsMWqPkn2yODHFwv4NTm8WOm4Lw7pbhbj3A1q9POfP +91iy1fYTiAIVc1ZXxg8RyPZ1/4q0oFFL+VIRKsUMvsf5c8+5TgtL1PcmcdH8AVD i4SdPDxpe0Gq7I1XZIrUJRVOeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjdEPWp TswNeCXxs/3mvJ3ZNCndMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrzMl+w/wGlXJo5M0KgspNSiKYH3BorZsuYAr1w7OyQ64xm7YI0kbR 7kTLGAQp7avDoZMpCfTnzqFqJK2nxVPxapH59oIo+eQDDAh7SNIm7kPy1BDSrHiC 7tr7hG3aM4QuQ5i6qiCDMfxoR0fChWeyHBpSRh9Rut8rzzqQrM2PpmjnNzkGYPAh IKo3NCncXXFTi33gSq4HXKMfV9kR/ehaHYbMuaQHAduxkiIzbnjTMUXwdu1ZkCUm R0RKgV5w+8XkHfXRE8FzVke/+jbPk6qvI0bOWIT/FLBl4l5ksxWM1PfSpZ9lKL1o LhoExtdvQbYA6++35n+8RF2i3fgiccsd -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:03 2025 by rpki-client