This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft File: GOzmKe7ztqJpbrqzSz-wLviouIc.mft (raw, json) Hash identifier: pGVJN/H37AbfUCBehkIOuuBuiRI/ER85txHxcABJwyU= Subject key identifier: 96:2D:EB:E8:82:8C:B4:ED:BE:AD:E1:32:06:4E:D5:6F:BC:A3:1D:D1 Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87 Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft Manifest number: 29 Signing time: Fri 05 Dec 2025 05:30:41 +0000 Manifest this update: Fri 05 Dec 2025 05:30:41 +0000 Manifest next update: Fri 12 Dec 2025 05:30:41 +0000 Files and hashes: 1: GOzmKe7ztqJpbrqzSz-wLviouIc.crl (hash: F/387IZqAj3GEk4QKzi3gT3gRe1HTvccY0F9+302XzA=) 2: 0A2469F095E011F0B2B5CE77C4F9AE02.roa (hash: 2TUs1YZ2Eqxk5relT6yIF5miILYOJS8mbAVh6fsYe7A=) 3: 8201D598AD9B11F080BD6B82C4F9AE02.roa (hash: XnkbG03fdUQKsnLMxvWnS0QGXcRDDBgD4VhVjpHPreg=) 4: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (hash: 9TR+7jMSEj42WP2HgrvlmxnuqGeYCxwav28DarkHDK0=) 5: 9F82952895C511F0B89BD26BC4F9AE02.roa (hash: +1Bt6gAyfoUFpig1US0y9IYf8gqxESp603kTB9cS2LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887 Validity Not Before: Dec 5 05:30:41 2025 GMT Not After : Dec 12 05:30:41 2025 GMT Subject: CN=69326e01-ff03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:86:8c:17:28:1e:25:ba:87:b6:38:4d:2f: a8:db:de:be:82:17:a4:47:17:73:d6:4c:b7:ad:98: c5:53:31:2b:6a:63:76:57:8d:22:f0:d4:b6:37:e9: 81:5a:5f:1a:61:07:fe:a1:71:aa:c5:7d:e5:05:0c: 49:c7:07:82:4c:8c:06:99:66:f0:cb:54:6e:16:b7: af:6e:a3:51:4b:91:91:b7:e6:8e:75:97:c6:4d:64: ae:b9:f6:19:3f:c3:b6:83:97:9e:7e:29:db:03:a5: 48:00:38:68:20:ef:9b:4d:c5:4b:c9:bf:ec:bc:dc: 1c:78:c4:11:35:08:60:7c:58:20:d6:8e:be:79:e4: 7d:53:e9:5d:8c:09:0f:d6:6d:ad:bf:82:cd:27:50: 3c:e4:08:28:75:32:0c:87:4e:3b:32:06:41:f5:84: 62:f1:7c:3f:d1:cd:14:44:99:05:18:d1:b0:5b:c4: 80:a4:77:8b:04:a8:22:2d:cd:59:28:aa:e3:0e:d9: a0:5c:bc:8b:2d:16:e4:c2:12:ec:6f:54:67:43:5d: 83:bc:92:92:2f:a7:bb:cf:40:1d:98:48:58:9f:7b: e6:bb:c2:c3:82:c6:42:b7:30:84:ba:04:d1:24:85: f2:5b:dd:70:fb:3c:56:85:3e:a2:e1:16:05:5c:86: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:EB:E8:82:8C:B4:ED:BE:AD:E1:32:06:4E:D5:6F:BC:A3:1D:D1 X509v3 Authority Key Identifier: keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:83:af:e6:d4:4e:87:cd:5a:98:cd:59:15:40:66:99:cb:0d: 85:37:33:3e:1b:2f:76:9b:fb:f9:87:84:9a:ee:87:88:15:ee: 83:bf:b4:23:61:1b:6a:74:75:89:58:0e:eb:ec:cd:a9:92:b7: ce:15:86:26:45:af:ee:e0:1d:43:6e:d0:d1:b0:db:f8:54:aa: 3b:32:55:3d:4c:ea:dc:43:d0:95:30:75:52:0e:6f:06:40:7e: 84:e6:5b:18:70:77:00:7a:1b:73:52:d7:14:f8:91:48:ff:6b: ec:5b:be:60:db:1d:7d:20:11:27:27:3e:3b:7d:2b:32:fc:bf: 1f:58:0f:42:38:1d:3b:4b:8e:a7:43:c2:d1:dc:bb:24:4a:20: e9:1f:a0:2c:cd:ce:49:a2:10:6b:06:a9:6b:9c:77:07:a5:e5: 21:72:38:67:df:a9:a8:6b:8b:47:e5:55:9b:7d:24:a1:34:8e: 46:3e:5a:fc:98:0f:61:db:5b:9a:3d:4b:5a:ec:df:c1:67:54: 96:21:63:67:34:7e:62:e3:f8:85:6d:18:b8:40:9e:37:21:89: 97:6a:64:9d:1f:65:eb:4e:28:5f:d1:e5:cd:c6:5d:e4:ae:82: b1:52:fb:ec:45:1a:33:2a:5b:4e:20:5c:8e:fc:55:28:aa:be: c6:39:37:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFBRjExMC8GA1UEBRMoMThFQ0U2MjlFRUYzQjZBMjY5NkVCQUIzNEIzRkIwMkVG OEE4Qjg4NzAeFw0yNTEyMDUwNTMwNDFaFw0yNTEyMTIwNTMwNDFaMBgxFjAUBgNV BAMTDTY5MzI2ZTAxLWZmMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCja4aMFygeJbqHtjhNL6jb3r6CF6RHF3PWTLetmMVTMStqY3ZXjSLw1LY36YFa XxphB/6hcarFfeUFDEnHB4JMjAaZZvDLVG4Wt69uo1FLkZG35o51l8ZNZK659hk/ w7aDl55+KdsDpUgAOGgg75tNxUvJv+y83Bx4xBE1CGB8WCDWjr555H1T6V2MCQ/W ba2/gs0nUDzkCCh1MgyHTjsyBkH1hGLxfD/RzRREmQUY0bBbxICkd4sEqCItzVko quMO2aBcvIstFuTCEuxvVGdDXYO8kpIvp7vPQB2YSFife+a7wsOCxkK3MIS6BNEk hfJb3XD7PFaFPqLhFgVchrWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUli3r6IKM tO2+reEyBk7Vb7yjHdEwHwYDVR0jBBgwFoAUGOzmKe7ztqJpbrqzSz+wLviouIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MUFGLzZCMjhCM0U0OTVD NDExRjA5NEU4NEUzNkM0RjlBRTAyL0dPem1LZTd6dHFKcGJycXpTei13THZpb3VJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR096bUtlN3p0cUpwYnJxelN6LXdMdmlvdUljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MUFGLzZCMjhCM0U0OTVDNDExRjA5NEU4NEUzNkM0RjlBRTAyL0dPem1LZTd6dHFK cGJycXpTei13THZpb3VJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6Dr+bUTofNWpjNWRVAZpnLDYU3Mz4bL3ab+/mHhJruh4gV7oO/tCNh G2p0dYlYDuvszamSt84VhiZFr+7gHUNu0NGw2/hUqjsyVT1M6txD0JUwdVIObwZA foTmWxhwdwB6G3NS1xT4kUj/a+xbvmDbHX0gEScnPjt9KzL8vx9YD0I4HTtLjqdD wtHcuyRKIOkfoCzNzkmiEGsGqWucdwel5SFyOGffqahri0flVZt9JKE0jkY+WvyY D2HbW5o9S1rs38FnVJYhY2c0fmLj+IVtGLhAnjchiZdqZJ0fZetOKF/R5c3GXeSu grFS++xFGjMqW04gXI78VSiqvsY5N6c= -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:56 2025 by rpki-client