This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: SsKm1drKPhOg96km3E+ACzgTAA0VtM3yduyZCsP/flw= Subject key identifier: 48:1C:BB:5F:31:EA:DE:77:05:53:74:D2:BF:B4:F8:40:D0:D9:03:A9 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 0297 Signing time: Sun 07 Dec 2025 00:05:15 +0000 Manifest this update: Sun 07 Dec 2025 00:05:15 +0000 Manifest next update: Sun 14 Dec 2025 00:05:15 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: Js7Rid/jb3GHd7ofBCCNq6Tqbm1Jxz8j0pTNMn29TWw=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: exVLBxR9pxtqc5cvsQFpU7WzBwIbqGPyCKYDoLeIqwE=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: qN+LRpSVnBxJ+EVMhollH7lNOxo/HzDT+qSzlpuJsAY=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: Uy1qQgtN2hy74kMiTUs5n5WOsga0Z6eI2tl5HqgZZRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Dec 7 00:05:15 2025 GMT Not After : Dec 14 00:05:15 2025 GMT Subject: CN=6934c4bb-d376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:94:1b:03:a2:2e:f8:93:d3:a2:b1:e0:c3: 3b:27:7f:47:c0:39:f9:a9:7c:45:d1:f2:17:bc:5e: 06:c6:8d:8f:86:a2:fd:c9:3e:87:91:23:f6:0f:e8: ac:3f:29:9a:00:20:41:9d:a8:56:9e:7d:44:a6:a2: 09:38:e4:a4:e5:f8:b1:e9:36:5f:ce:dd:a1:52:10: d3:71:27:52:db:c3:29:63:3e:80:57:0f:70:49:5d: 7f:4d:5a:ea:37:41:a6:65:3c:88:ea:dc:34:20:21: 02:42:5f:5e:60:45:da:2d:ed:2d:40:83:42:49:22: a7:cf:52:f3:5f:4e:8b:18:34:53:a1:5f:05:7d:64: 26:66:0f:11:7b:91:72:92:63:48:36:6e:3a:21:db: 66:74:2b:69:7d:5e:8c:bb:e1:9c:41:5a:cf:7c:c2: f5:4b:7e:a4:c3:e8:5b:df:95:9c:a7:bf:fd:6b:b3: 03:2b:60:c8:c7:4d:70:35:c6:62:f3:b3:55:42:70: 03:18:10:9a:36:06:6a:9a:f0:86:59:fb:2d:61:d7: 9e:e2:42:2a:fe:ab:cd:93:f4:e9:6c:7f:87:a3:22: 7d:bd:04:db:63:d5:bd:83:2f:4c:c4:66:6a:1f:9c: f7:66:63:eb:8a:9f:25:e9:e6:79:72:3f:b2:4e:eb: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1C:BB:5F:31:EA:DE:77:05:53:74:D2:BF:B4:F8:40:D0:D9:03:A9 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e0:78:7f:09:48:c2:d7:0b:d2:84:09:91:c9:c3:4a:4b:fa: e7:92:18:8c:8d:c5:4c:8c:77:e3:49:b6:81:f4:d6:6a:a5:43: e4:e8:3f:e9:e0:72:ae:96:ce:41:5b:1d:d7:7f:ff:b3:92:cc: 4a:fc:ed:7e:1a:42:ff:d4:4c:b3:dd:8f:04:df:31:e9:17:f7: 4a:30:a0:42:29:e0:7c:e4:72:88:71:35:2c:ee:bf:c1:f6:53: 42:a8:c7:1e:b0:98:b7:9f:0c:10:3d:a0:0f:e0:55:b5:aa:9c: a2:7a:2c:2a:dc:c1:a6:bf:20:ff:66:0f:24:da:1e:83:9d:db: b8:72:ac:8d:8e:69:65:1e:e1:2d:88:81:01:26:73:8d:4c:f9: de:8a:df:6e:2a:98:e5:c1:30:4d:8f:73:b9:54:80:02:2e:25: 71:ce:0f:fb:0a:53:f9:3b:71:3f:9a:0d:a2:08:d2:c3:bf:51: c9:a7:f5:39:2d:e8:d6:00:ca:65:3c:a9:e7:09:fc:8c:c3:f2: 49:dd:1e:ac:e1:ed:a1:f0:0c:11:4c:7c:88:89:d6:fd:f0:27: 79:05:32:b3:2c:77:3b:c5:a6:f8:23:dd:3d:e3:dc:4e:fb:21: 07:70:08:f4:14:02:71:ad:af:66:d0:0a:f7:c1:5e:d5:34:d6: 7f:54:8b:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUxMjA3MDAwNTE1WhcNMjUxMjE0MDAwNTE1WjAYMRYwFAYD VQQDEw02OTM0YzRiYi1kMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IqUGwOiLviT06Kx4MM7J39HwDn5qXxF0fIXvF4Gxo2PhqL9yT6HkSP2D+is PymaACBBnahWnn1EpqIJOOSk5fix6TZfzt2hUhDTcSdS28MpYz6AVw9wSV1/TVrq N0GmZTyI6tw0ICECQl9eYEXaLe0tQINCSSKnz1LzX06LGDRToV8FfWQmZg8Re5Fy kmNINm46IdtmdCtpfV6Mu+GcQVrPfML1S36kw+hb35Wcp7/9a7MDK2DIx01wNcZi 87NVQnADGBCaNgZqmvCGWfstYdee4kIq/qvNk/TpbH+HoyJ9vQTbY9W9gy9MxGZq H5z3ZmPrip8l6eZ5cj+yTuthIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgcu18x 6t53BVN00r+0+EDQ2QOpMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg4Hh/CUjC1wvShAmRycNKS/rnkhiMjcVMjHfjSbaB9NZqpUPk6D/p 4HKuls5BWx3Xf/+zksxK/O1+GkL/1Eyz3Y8E3zHpF/dKMKBCKeB85HKIcTUs7r/B 9lNCqMcesJi3nwwQPaAP4FW1qpyieiwq3MGmvyD/Zg8k2h6Dndu4cqyNjmllHuEt iIEBJnONTPneit9uKpjlwTBNj3O5VIACLiVxzg/7ClP5O3E/mg2iCNLDv1HJp/U5 LejWAMplPKnnCfyMw/JJ3R6s4e2h8AwRTHyIidb98Cd5BTKzLHc7xab4I90949xO +yEHcAj0FAJxra9m0Ar3wV7VNNZ/VIu5 -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:15 2025 by rpki-client