This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: uL0SwntYHz2yz/w14uAvnuZvI9pN28hb/RIE7FTxYYc= Subject key identifier: F3:45:AC:DB:C4:5F:6A:DA:A7:1D:23:B8:CF:FF:4D:C2:84:D1:29:E4 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 01D1 Signing time: Fri 05 Dec 2025 00:25:21 +0000 Manifest this update: Fri 05 Dec 2025 00:25:21 +0000 Manifest next update: Fri 12 Dec 2025 00:25:20 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: rhURSM6b2sJN8T6mwiTxO6ESMAjELiKgkdxK/X6rQq0=) 2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: ksbPiEON/rfN+9KcAeESjlw0pDzn0uwDVByAkHoOZ5I=) 3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: +GOwmmv/WQvXmYUv3zJL7t+sIDyt7sOnzLXJtteAzBQ=) 4: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: HWgtJZZShVOjpJyOjZHOrob9TQCrmSDpAAlvfRMr4WY=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: WqNYMWqxYNONSyEjRytn5l7aZGIUzjwjymCk0WTuD8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Dec 5 00:25:21 2025 GMT Not After : Dec 12 00:25:20 2025 GMT Subject: CN=69322671-d336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:8d:ab:5a:31:41:17:22:f6:c8:41:cb:78: 4b:05:9b:be:20:1b:e7:71:4b:28:4b:64:d8:78:9c: bd:99:fc:96:26:bf:8e:a2:6c:fa:56:73:20:e5:1e: 79:e5:d7:56:8a:f6:a6:6b:db:43:9d:8f:72:d7:84: b6:ba:3d:10:57:17:c2:dd:0a:6d:9c:f2:d3:88:87: 15:1c:c7:7b:6d:07:c7:92:2b:2f:90:0e:eb:ec:26: 3b:9d:e2:84:43:51:18:72:9b:9c:0b:9a:27:d4:7d: 23:c9:80:3d:f1:1e:f7:af:7a:94:56:10:d2:ad:75: d3:5b:3f:a5:01:6f:d1:cb:76:c4:67:77:eb:c9:06: 13:34:72:94:31:25:1e:21:99:3d:3f:f5:a1:ea:e1: f8:4d:c2:69:5f:d6:60:9c:33:a1:af:4f:0c:5a:3f: f9:a0:f2:d3:2a:20:f4:5f:f8:93:64:0d:78:b2:e0: 1e:cf:85:3f:e5:a9:66:50:37:92:cd:6f:93:13:56: 88:ca:8f:42:5f:27:3b:a1:47:37:57:f5:0e:d0:8c: a3:5f:9f:8f:56:97:7c:24:18:f1:5f:c2:1e:de:4d: 24:17:d9:1e:23:6f:f4:b5:bf:be:d7:1f:0b:35:50: d9:42:73:b8:0f:b8:b6:64:16:c9:21:d1:46:08:52: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:AC:DB:C4:5F:6A:DA:A7:1D:23:B8:CF:FF:4D:C2:84:D1:29:E4 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:42:6e:05:e4:51:b3:5d:fb:5f:9b:29:c8:3e:1f:d6:58: c3:f8:9f:0b:68:27:a6:71:ef:68:27:0f:7b:e3:28:3d:6c:f7: b6:fa:2f:7b:97:d6:98:db:ad:63:b8:30:e1:63:87:66:75:aa: 11:21:87:00:df:f4:f8:3a:72:bd:18:fa:ab:82:6f:23:b1:94: 21:58:96:0c:cc:cc:bc:df:9a:0b:d7:0b:dd:09:af:b6:aa:1c: c2:34:fb:0f:ec:f0:f5:67:a6:28:41:03:41:d3:b2:74:5e:c1: ca:b8:88:69:0b:3a:89:c5:cb:40:a6:5c:68:9f:de:ee:e1:c1: a7:e4:31:c7:b3:31:eb:2c:ce:92:ad:f3:2b:c4:d3:46:0e:7c: c7:9c:54:d4:38:80:55:c6:5e:40:38:17:54:bf:16:1a:c4:b0: f3:5f:fc:44:72:cd:93:5a:2d:98:01:7a:66:96:b4:dc:6f:ef: b8:7e:9d:21:94:82:c9:ef:69:57:c9:ac:91:06:d7:23:68:3e: 1e:3f:01:13:13:42:9f:f3:e7:c9:2e:71:10:bb:11:0e:19:59: f2:9a:44:35:25:22:fb:e3:37:10:0c:d8:89:e3:2e:cd:f0:16: ef:9e:6c:6a:cf:43:5b:7b:66:58:ff:1e:b2:99:73:5d:e1:a6: dd:e9:b0:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUxMjA1MDAyNTIxWhcNMjUxMjEyMDAyNTIwWjAYMRYwFAYD VQQDEw02OTMyMjY3MS1kMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBCNq1oxQRci9shBy3hLBZu+IBvncUsoS2TYeJy9mfyWJr+Oomz6VnMg5R55 5ddWivama9tDnY9y14S2uj0QVxfC3QptnPLTiIcVHMd7bQfHkisvkA7r7CY7neKE Q1EYcpucC5on1H0jyYA98R73r3qUVhDSrXXTWz+lAW/Ry3bEZ3fryQYTNHKUMSUe IZk9P/Wh6uH4TcJpX9ZgnDOhr08MWj/5oPLTKiD0X/iTZA14suAez4U/5almUDeS zW+TE1aIyo9CXyc7oUc3V/UO0IyjX5+PVpd8JBjxX8Ie3k0kF9keI2/0tb++1x8L NVDZQnO4D7i2ZBbJIdFGCFLOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNFrNvE X2rapx0juM//TcKE0SnkMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FEJuBeRRs137X5spyD4f1ljD+J8LaCemce9oJw974yg9bPe2+i97 l9aY261juDDhY4dmdaoRIYcA3/T4OnK9GPqrgm8jsZQhWJYMzMy835oL1wvdCa+2 qhzCNPsP7PD1Z6YoQQNB07J0XsHKuIhpCzqJxctAplxon97u4cGn5DHHszHrLM6S rfMrxNNGDnzHnFTUOIBVxl5AOBdUvxYaxLDzX/xEcs2TWi2YAXpmlrTcb++4fp0h lILJ72lXyayRBtcjaD4ePwETE0Kf8+fJLnEQuxEOGVnymkQ1JSL74zcQDNiJ4y7N 8Bbvnmxqz0Nbe2ZY/x6ymXNd4abd6bCi -----END CERTIFICATE-----Generated at Sat Dec 6 21:24:58 2025 by rpki-client