This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: KRLfMTl3teo0ZnjxWnBw7AwMWTpyqtmS8loIeQCe4e0= Subject key identifier: 68:B7:FF:2F:EF:10:29:50:BB:FF:61:96:C4:C3:56:23:B3:70:29:F7 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: D3 Signing time: Fri 05 Dec 2025 03:43:57 +0000 Manifest this update: Fri 05 Dec 2025 03:43:57 +0000 Manifest next update: Fri 12 Dec 2025 03:43:57 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: gaZvnTENqv/mlhm0Ylz7napnPDJyJDEnpZIOVq+4fGY=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: fbK2ihQUPhJ5r2ba5rzkEzE0phvIKmf+DwHm9D+Afg4=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: NNRqGSmWdoe7pDPxn2mpdNUa0PJKi1Ydbw5oFhxloG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Dec 5 03:43:57 2025 GMT Not After : Dec 12 03:43:57 2025 GMT Subject: CN=693254fd-d7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:54:19:b3:cc:48:4b:ed:c1:6f:9d:12:be: 1e:71:5d:47:e7:1d:9b:79:39:7d:88:38:76:4c:bb: b0:e4:fa:d3:25:92:ba:79:c9:07:53:4a:16:1d:fd: 0c:c5:eb:7a:64:6c:0e:6c:ca:a5:8d:41:35:fb:ba: d2:dd:bd:da:95:e6:89:c2:92:8b:b8:1f:e0:b4:cc: b8:11:35:fa:aa:06:f0:d0:2a:34:26:09:e3:bc:05: 21:fa:07:9f:52:e3:6c:4a:2c:1d:e2:0b:a7:6e:95: c0:ef:8b:a3:92:5b:d6:bf:fa:03:60:0e:95:6e:22: 86:5a:ab:87:f9:c0:9f:4f:6e:77:31:ed:49:3c:b6: 77:7d:73:6a:d1:be:09:b8:aa:f7:3c:5b:d4:1e:9a: 71:56:d7:ef:e2:79:30:86:02:47:5a:1d:26:b4:8d: 59:80:b9:99:8e:6f:a5:ec:fa:e8:ae:f1:91:96:f6: 6e:dc:92:7e:1f:b1:cd:c8:0d:52:fe:e9:32:2c:ba: 4a:aa:d6:15:6f:f0:64:5e:24:0f:3a:0a:c3:5e:1b: db:22:01:1a:63:2a:bd:9f:40:0c:ca:34:2c:bc:df: e6:63:67:bc:d6:4f:d6:0e:14:03:ab:8c:0c:c8:e7: 74:85:ce:a4:94:16:0a:5a:30:fe:d9:27:38:a3:8a: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B7:FF:2F:EF:10:29:50:BB:FF:61:96:C4:C3:56:23:B3:70:29:F7 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:12:69:0d:44:43:e4:e4:e6:c3:e5:34:70:df:45:8b:55:72: 70:d5:3b:a4:25:ed:9f:28:1c:42:cb:53:eb:8a:f9:db:d1:82: 48:1c:69:5c:9e:69:9d:fd:f5:e8:76:38:d8:9a:ea:4b:0a:41: 05:5d:e3:0c:4e:e8:f6:fe:37:c7:5e:d1:bc:0f:73:64:da:d7: 6a:0d:41:56:3c:2a:84:bf:f0:f1:9b:e4:ad:a1:a0:75:f9:a6: 88:68:08:f9:8b:55:32:09:4e:94:06:80:59:16:7f:b8:26:74: 3c:51:f8:a2:40:f0:9f:f8:5f:07:1d:e6:22:93:fe:67:0d:ae: b7:90:54:0a:10:8c:29:31:a2:35:7b:1e:17:e2:75:19:f0:5c: a7:65:53:cc:e0:ce:50:44:c1:f1:0f:db:40:b6:5f:4c:2a:1d: 3b:f6:e8:4b:06:0a:f0:86:62:5c:ac:8d:e8:82:5d:75:6b:e5: 0f:80:c5:64:c7:44:0a:2f:83:81:8b:a0:5c:ec:ff:98:c4:58: 1f:bf:fc:ae:76:ae:dd:bf:96:53:cb:f8:9e:06:82:bd:9d:dc: 85:39:91:a3:71:7b:02:7b:43:15:ae:d6:21:a2:9c:e2:65:97: bf:e2:0d:28:68:54:88:70:6c:d6:0a:f4:d2:89:33:13:3b:7d: 16:a1:72:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx MTZEQTVERjIwHhcNMjUxMjA1MDM0MzU3WhcNMjUxMjEyMDM0MzU3WjAYMRYwFAYD VQQDEw02OTMyNTRmZC1kN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyylUGbPMSEvtwW+dEr4ecV1H5x2beTl9iDh2TLuw5PrTJZK6eckHU0oWHf0M xet6ZGwObMqljUE1+7rS3b3aleaJwpKLuB/gtMy4ETX6qgbw0Co0JgnjvAUh+gef UuNsSiwd4gunbpXA74ujklvWv/oDYA6VbiKGWquH+cCfT253Me1JPLZ3fXNq0b4J uKr3PFvUHppxVtfv4nkwhgJHWh0mtI1ZgLmZjm+l7ProrvGRlvZu3JJ+H7HNyA1S /ukyLLpKqtYVb/BkXiQPOgrDXhvbIgEaYyq9n0AMyjQsvN/mY2e81k/WDhQDq4wM yOd0hc6klBYKWjD+2Sc4o4pTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi3/y/v EClQu/9hlsTDViOzcCn3MB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzhGMC8wQTc3MUEzNjkzQUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9Ldzdv WlNEZkdQX1ZjcFVSYmFYZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKEmkNREPk5ObD5TRw30WLVXJw1TukJe2fKBxCy1Privnb0YJIHGlc nmmd/fXodjjYmupLCkEFXeMMTuj2/jfHXtG8D3Nk2tdqDUFWPCqEv/Dxm+StoaB1 +aaIaAj5i1UyCU6UBoBZFn+4JnQ8UfiiQPCf+F8HHeYik/5nDa63kFQKEIwpMaI1 ex4X4nUZ8FynZVPM4M5QRMHxD9tAtl9MKh079uhLBgrwhmJcrI3ogl11a+UPgMVk x0QKL4OBi6Bc7P+YxFgfv/yudq7dv5ZTy/ieBoK9ndyFOZGjcXsCe0MVrtYhopzi ZZe/4g0oaFSIcGzWCvTSiTMTO30WoXLE -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:57 2025 by rpki-client