This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json) Hash identifier: YiiV0qJ1frhQXEUDGLIyKm7ht3dneGTit6BVjNNN5q4= Subject key identifier: 39:5F:0A:82:DC:69:DC:23:3F:94:BA:A5:2D:D1:21:1C:27:8C:51:E1 Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft Manifest number: 0232 Signing time: Fri 05 Dec 2025 00:17:25 +0000 Manifest this update: Fri 05 Dec 2025 00:17:24 +0000 Manifest next update: Fri 12 Dec 2025 00:17:24 +0000 Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: dcj2DWQSX4P7AgTZHtBiH1RZKxALo9oxmd6J+/nGseA=) 2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: YPKVhjI0QOxJDGKIkbhIcG0QRVYBhpe0iKALRG6i8e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Validity Not Before: Dec 5 00:17:24 2025 GMT Not After : Dec 12 00:17:24 2025 GMT Subject: CN=69322495-dde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:21:c9:27:5d:b6:70:4b:ed:27:32:4f:24: 72:1c:30:9f:bb:c9:01:c0:5f:c6:4a:62:a6:64:cf: 79:72:9e:90:63:75:44:d2:89:a8:e1:8a:18:4d:d0: 2d:54:32:89:b6:2c:13:bf:2d:8c:ea:9d:93:09:48: b3:a9:5c:0b:90:97:68:2b:cc:90:42:e0:e6:cd:4c: a9:3f:eb:56:82:be:22:ec:b9:1e:03:77:df:1d:72: c3:0b:97:8d:55:95:5d:39:df:fe:59:5b:5f:6b:26: a6:ca:84:a6:bd:fa:e6:7e:44:2d:22:99:06:a6:40: 35:ba:e0:1a:b4:ff:9e:cf:7e:44:3f:bb:8f:d4:eb: ad:a6:26:97:83:d9:c7:d3:85:2d:1a:fa:30:98:ba: cb:00:42:28:fe:bf:9b:fd:3e:f9:ac:d9:b9:dd:fe: eb:1a:a3:1f:99:9d:86:a2:40:da:45:55:10:73:d1: 1b:c2:60:21:18:36:68:4f:e6:3d:c6:e7:98:ce:75: 2d:5f:3d:0e:3f:34:5a:f2:4f:e8:e2:d5:a2:72:39: 11:55:f8:2d:5c:df:33:f3:3c:f2:a2:cc:ba:99:23: ba:ae:40:2d:44:e9:c8:c3:28:08:34:54:fc:28:e6: 73:9f:98:9c:b0:05:4b:c8:8f:c5:c1:60:98:79:71: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5F:0A:82:DC:69:DC:23:3F:94:BA:A5:2D:D1:21:1C:27:8C:51:E1 X509v3 Authority Key Identifier: keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:85:17:ad:8e:f6:c8:f3:7b:80:cb:9a:3c:42:a1:a9:22:95: 8c:8c:be:e3:ff:74:6c:17:20:97:06:df:36:b0:fd:b1:9e:7d: 8e:17:31:94:48:27:c1:91:0a:f6:dc:f0:c2:28:5d:a8:77:4b: 57:71:14:9b:bb:89:2e:7d:b4:d4:8a:b6:75:5c:53:c4:45:e5: 5b:34:87:2b:e1:f3:d6:89:f4:78:68:64:e1:80:7f:dc:8b:f5: 03:6c:4b:e1:5e:8a:73:55:f9:3a:84:62:7a:9e:06:2b:46:11: 23:2b:e9:f3:b9:89:c5:86:07:a0:c9:fc:ed:b3:59:7f:17:ca: 40:f7:b7:08:34:72:95:a9:6e:c7:ee:68:4d:18:ea:f4:23:d4: 73:06:51:c2:3d:a3:a3:15:f9:27:5c:b8:0f:13:60:16:66:3b: 9b:11:93:0e:dd:19:dc:5b:01:37:eb:85:94:7b:26:61:26:27: 16:0e:a2:37:0b:49:85:32:8a:e3:08:15:5b:30:44:30:3c:54: a4:82:49:2e:1c:2b:09:8c:09:f3:42:92:11:1c:bf:87:db:04: cf:e6:76:ad:26:95:49:f8:55:47:63:b3:fd:3b:a0:ea:a6:05: f5:69:09:6d:90:24:c9:99:f8:2a:83:f9:8b:d0:5e:43:67:3c: 33:ce:0e:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY3QjQxMTAvBgNVBAUTKDE4N0VFRUVBMkFENjA3QkNBNTQyMkQwOTJEREFDQzE5 OTA4RjJGRDcwHhcNMjUxMjA1MDAxNzI0WhcNMjUxMjEyMDAxNzI0WjAYMRYwFAYD VQQDEw02OTMyMjQ5NS1kZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEUhySddtnBL7ScyTyRyHDCfu8kBwF/GSmKmZM95cp6QY3VE0omo4YoYTdAt VDKJtiwTvy2M6p2TCUizqVwLkJdoK8yQQuDmzUypP+tWgr4i7LkeA3ffHXLDC5eN VZVdOd/+WVtfayamyoSmvfrmfkQtIpkGpkA1uuAatP+ez35EP7uP1OutpiaXg9nH 04UtGvowmLrLAEIo/r+b/T75rNm53f7rGqMfmZ2GokDaRVUQc9EbwmAhGDZoT+Y9 xueYznUtXz0OPzRa8k/o4tWicjkRVfgtXN8z8zzyosy6mSO6rkAtROnIwygINFT8 KOZzn5icsAVLyI/FwWCYeXH/AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlfCoLc adwjP5S6pS3RIRwnjFHhMB8GA1UdIwQYMBaAFBh+7uoq1ge8pUItCS3azBmQjy/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCNC84MDI2RjM5NDcw ODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3eWxRaTBKTGRyTUdaQ1BM OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIN3U2aXJXQjd5bFFpMEpMZHJNR1pDUEw5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjdCNC84MDI2RjM5NDcwODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3 eWxRaTBKTGRyTUdaQ1BMOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqhRetjvbI83uAy5o8QqGpIpWMjL7j/3RsFyCXBt82sP2xnn2OFzGU SCfBkQr23PDCKF2od0tXcRSbu4kufbTUirZ1XFPEReVbNIcr4fPWifR4aGThgH/c i/UDbEvhXopzVfk6hGJ6ngYrRhEjK+nzuYnFhgegyfzts1l/F8pA97cINHKVqW7H 7mhNGOr0I9RzBlHCPaOjFfknXLgPE2AWZjubEZMO3RncWwE364WUeyZhJicWDqI3 C0mFMorjCBVbMEQwPFSkgkkuHCsJjAnzQpIRHL+H2wTP5natJpVJ+FVHY7P9O6Dq pgX1aQltkCTJmfgqg/mL0F5DZzwzzg4L -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:36 2025 by rpki-client