This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: PndAibi5BgwBGMwMCl3x9f7hy6Zq1T53fV+XnJ9ajp8= Subject key identifier: 0B:8C:FC:04:96:9F:1A:C2:C3:AB:6C:AF:A0:49:AF:C5:34:FC:6C:C3 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: DB Signing time: Sun 21 Dec 2025 04:46:19 +0000 Manifest this update: Sun 21 Dec 2025 04:46:19 +0000 Manifest next update: Sun 28 Dec 2025 04:46:19 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: Zai590NKkTC/+XnbieGJmSLFFrzTGH1TDr3qLElL7ps=) 2: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: NNRqGSmWdoe7pDPxn2mpdNUa0PJKi1Ydbw5oFhxloG4=) 3: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: fbK2ihQUPhJ5r2ba5rzkEzE0phvIKmf+DwHm9D+Afg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Dec 21 04:46:19 2025 GMT Not After : Dec 28 04:46:19 2025 GMT Subject: CN=69477b9b-0e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:0f:d8:bf:6f:a5:b7:a4:64:28:58:cf:53: cb:ce:0b:2c:5b:2e:2a:04:1b:66:d9:88:77:0a:3e: b1:6c:ec:a5:56:07:ce:79:79:ce:1b:34:a6:26:ce: b3:4c:28:30:58:e8:1f:90:97:12:9c:2c:64:26:f0: bd:ec:6b:0f:8a:db:94:79:8e:4a:42:73:10:f9:77: f0:ab:e6:39:fa:02:e7:16:de:09:1c:fa:bf:e9:81: 59:6e:94:2e:e8:18:02:b6:46:0d:a5:77:cb:8b:41: 2f:f7:ee:2d:50:82:4f:93:d5:c1:e8:92:66:0e:e3: dd:b3:d2:a8:e7:ca:aa:43:76:57:b3:74:49:cb:4f: c4:bd:ea:3c:ee:be:c8:c9:81:23:ad:5e:8c:a5:66: 1a:67:aa:dd:7f:75:55:14:18:8b:98:da:0a:2b:38: 66:b6:e5:3f:cf:41:1c:99:7a:6e:8a:02:12:31:ce: a6:92:d9:73:de:c5:29:fe:35:fd:22:05:a3:ad:d1: 03:99:2e:a5:88:f3:2b:a7:8a:bd:16:9c:70:79:ee: f2:ad:0b:fc:80:e7:a5:f0:f6:6b:6e:e3:c2:12:a1: 14:ae:e4:2a:37:c8:e7:1f:90:72:33:73:67:36:4b: 3b:a6:2a:71:83:e9:96:f5:73:b5:8c:5d:16:da:6a: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8C:FC:04:96:9F:1A:C2:C3:AB:6C:AF:A0:49:AF:C5:34:FC:6C:C3 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ac:fe:4c:96:c4:88:4e:7a:b0:5e:4a:dd:19:e2:ab:c4:5b: 86:0d:1d:e5:c3:a1:bc:15:42:a1:21:79:e8:85:1e:f7:ba:4b: 67:ef:95:3e:08:d8:a0:a7:88:17:38:6b:6d:67:c0:93:2b:0c: 0e:36:62:55:10:02:81:5c:49:08:9a:aa:70:b3:7d:62:e8:19: bd:14:9f:92:56:5d:91:c7:4c:ed:56:80:01:1b:cc:bc:47:4f: d9:d4:fb:85:3c:e3:21:20:54:5a:6c:df:52:73:ac:a6:64:01: 1d:80:13:56:4c:9c:e0:41:b6:bd:ce:5d:b8:7d:ee:4f:e0:9b: df:94:86:70:07:51:a3:76:b4:04:c8:1f:53:2a:e9:1b:70:0e: d6:f7:0c:04:db:05:c1:ef:7b:15:85:ae:20:5d:38:db:2f:42: dd:c9:23:29:34:ff:86:f9:57:85:aa:95:cf:a8:e0:71:6c:34: 81:a7:80:4a:fe:25:ee:23:52:5b:65:48:13:53:95:d4:c3:3f: aa:45:ee:7b:90:61:16:6a:11:45:ca:69:81:ec:0a:56:6d:20: 80:a9:73:01:f2:e5:b5:18:a5:29:70:60:71:66:9c:5a:44:d1: 17:e1:fa:b7:11:52:33:8d:7c:f4:e8:37:2b:43:78:1f:07:50: 4b:30:67:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx MTZEQTVERjIwHhcNMjUxMjIxMDQ0NjE5WhcNMjUxMjI4MDQ0NjE5WjAYMRYwFAYD VQQDDA02OTQ3N2I5Yi0wZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqoP2L9vpbekZChYz1PLzgssWy4qBBtm2Yh3Cj6xbOylVgfOeXnOGzSmJs6z TCgwWOgfkJcSnCxkJvC97GsPituUeY5KQnMQ+Xfwq+Y5+gLnFt4JHPq/6YFZbpQu 6BgCtkYNpXfLi0Ev9+4tUIJPk9XB6JJmDuPds9Ko58qqQ3ZXs3RJy0/Eveo87r7I yYEjrV6MpWYaZ6rdf3VVFBiLmNoKKzhmtuU/z0EcmXpuigISMc6mktlz3sUp/jX9 IgWjrdEDmS6liPMrp4q9Fpxwee7yrQv8gOel8PZrbuPCEqEUruQqN8jnH5ByM3Nn Nks7pipxg+mW9XO1jF0W2mqaqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuM/ASW nxrCw6tsr6BJr8U0/GzDMB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzhGMC8wQTc3MUEzNjkzQUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9Ldzdv WlNEZkdQX1ZjcFVSYmFYZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1rP5MlsSITnqwXkrdGeKrxFuGDR3lw6G8FUKhIXnohR73uktn75U+ CNigp4gXOGttZ8CTKwwONmJVEAKBXEkImqpws31i6Bm9FJ+SVl2Rx0ztVoABG8y8 R0/Z1PuFPOMhIFRabN9Sc6ymZAEdgBNWTJzgQba9zl24fe5P4JvflIZwB1GjdrQE yB9TKukbcA7W9wwE2wXB73sVha4gXTjbL0LdySMpNP+G+VeFqpXPqOBxbDSBp4BK /iXuI1JbZUgTU5XUwz+qRe57kGEWahFFymmB7ApWbSCAqXMB8uW1GKUpcGBxZpxa RNEX4fq3EVIzjXz06DcrQ3gfB1BLMGc6 -----END CERTIFICATE-----Generated at Sun Dec 21 17:30:55 2025 by rpki-client