This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: Nx8txAsXmhh9tx0L6mE121ZeETjLNdQFofpauJOhTfc= Subject key identifier: 5F:E1:A3:1D:EF:C8:55:75:AD:81:78:A3:AF:63:85:C7:A2:D0:E1:98 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3FCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3B5B Signing time: Sat 06 Dec 2025 14:19:05 +0000 Manifest this update: Sat 06 Dec 2025 14:19:05 +0000 Manifest next update: Sat 13 Dec 2025 14:19:05 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: RJUsx3yu+RJFaIloEmuFcraI05qmA8mK4Q3QzF4a/iA=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: zIbTXKElzSRDJDgFmgpHOKMMizwQLMFjRvUcTHCmSxI=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: +mgdTNP414SUTOGaWf8OsfORlNcz2M/R4gZld0HJ9Ck=) 4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: zGDGvlgT7VbRq78nqt2KCJawvdgk5RBzL4wyIDNIpkw=) 5: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: o3x3WNu8DVpOALptWI63rwh2Z21Ks2owpGrEUHSGlCk=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: TQSzjpxrOYYy8gpn8cpyl7UgdqE6NAtOL8QTPBk1Mrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16334 (0x3fce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Dec 6 14:19:05 2025 GMT Not After : Dec 13 14:19:05 2025 GMT Subject: CN=69343b59-099f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:96:67:a7:c0:3a:29:41:6e:ed:42:b8:86: af:d1:74:7c:c6:f8:c5:71:ac:3d:17:3a:ff:fb:1d: 40:56:99:e9:44:d7:0b:3e:aa:d0:b1:01:52:65:67: 65:27:76:5c:ef:e5:92:5d:1f:ba:cb:01:9a:75:55: 71:ad:3d:07:93:40:72:ab:07:db:d5:25:cb:50:fb: 98:d8:f3:a4:06:cc:69:67:d6:c1:56:d9:d3:e8:ff: 33:fd:a4:64:a2:1c:c3:0f:71:17:6a:0e:8b:6e:8b: 0a:d2:4f:fc:3d:ae:aa:93:f7:6a:03:ce:a4:d8:d3: ad:62:82:0a:94:78:e6:1f:56:e7:3b:b9:02:68:88: 65:90:0b:ff:22:5a:c1:ea:0f:84:4b:fc:de:3f:06: 53:3e:90:2a:d3:8e:ca:68:2c:83:39:8a:fe:24:6d: 3d:3b:d4:02:5c:32:e1:4e:73:92:03:1e:3e:07:5f: 04:c1:ab:f3:70:58:5e:82:f5:93:64:41:8d:68:86: 37:b0:c3:6e:31:70:dd:c1:9c:b8:9b:90:69:4e:bf: bd:38:c3:56:c4:90:3a:48:8c:36:d1:a6:2e:94:83: d4:0e:de:2e:1d:96:eb:2b:e7:4a:9c:0e:b5:11:bf: 4a:e6:4b:72:52:b8:47:85:ac:8c:0e:f1:68:15:36: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E1:A3:1D:EF:C8:55:75:AD:81:78:A3:AF:63:85:C7:A2:D0:E1:98 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:5a:7d:e6:6c:ed:8b:73:6c:0a:60:ac:55:1b:d7:1b:11:fd: 60:3a:28:6e:bf:a9:cd:3b:17:fa:ca:10:5a:e0:00:e0:6f:11: 43:87:41:11:30:3d:a3:b6:25:b7:02:f9:cc:4e:01:30:81:a8: f7:52:cf:5a:0c:80:8e:47:c3:2b:af:f2:7d:7a:c0:b5:5c:62: 50:6f:82:bf:ee:80:39:67:95:df:64:69:31:54:c7:f6:b9:17: f5:2d:c2:b1:88:fb:2a:25:3d:d2:36:6f:16:8a:fa:50:7b:54: 32:99:f1:e5:38:85:51:a5:dd:4e:5c:32:09:dc:e5:a2:b3:cf: a4:21:c2:a4:19:b7:b5:26:e6:d4:5d:6f:d0:8f:6d:67:65:93: d8:56:3a:de:2e:43:e9:78:3f:96:52:e4:cf:d1:2a:ca:97:b9: 58:6a:33:98:81:90:ea:47:9b:15:3d:d4:48:55:19:9b:54:bb: 06:e2:de:c5:3a:0e:66:74:34:0c:d7:3e:98:61:10:fe:ae:fb: a4:29:b7:1d:a0:33:cc:b3:8a:1a:1d:a2:14:e4:5a:40:2b:28: e4:08:39:7d:a4:68:d5:b6:40:bd:e4:19:e6:c1:93:0e:ac:03: 4b:ca:5f:da:46:aa:df:30:b2:a3:06:12:ff:8c:c2:a6:1c:38: 27:80:07:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUxMjA2MTQxOTA1WhcNMjUxMjEzMTQxOTA1WjAYMRYwFAYD VQQDEw02OTM0M2I1OS0wOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cOWZ6fAOilBbu1CuIav0XR8xvjFcaw9Fzr/+x1AVpnpRNcLPqrQsQFSZWdl J3Zc7+WSXR+6ywGadVVxrT0Hk0Byqwfb1SXLUPuY2POkBsxpZ9bBVtnT6P8z/aRk ohzDD3EXag6LbosK0k/8Pa6qk/dqA86k2NOtYoIKlHjmH1bnO7kCaIhlkAv/IlrB 6g+ES/zePwZTPpAq047KaCyDOYr+JG09O9QCXDLhTnOSAx4+B18EwavzcFhegvWT ZEGNaIY3sMNuMXDdwZy4m5BpTr+9OMNWxJA6SIw20aYulIPUDt4uHZbrK+dKnA61 Eb9K5ktyUrhHhayMDvFoFTZGhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/hox3v yFV1rYF4o69jhcei0OGYMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuWn3mbO2Lc2wKYKxVG9cbEf1gOihuv6nNOxf6yhBa4ADgbxFDh0ER MD2jtiW3AvnMTgEwgaj3Us9aDICOR8Mrr/J9esC1XGJQb4K/7oA5Z5XfZGkxVMf2 uRf1LcKxiPsqJT3SNm8WivpQe1QymfHlOIVRpd1OXDIJ3OWis8+kIcKkGbe1JubU XW/Qj21nZZPYVjreLkPpeD+WUuTP0SrKl7lYajOYgZDqR5sVPdRIVRmbVLsG4t7F Og5mdDQM1z6YYRD+rvukKbcdoDPMs4oaHaIU5FpAKyjkCDl9pGjVtkC95BnmwZMO rANLyl/aRqrfMLKjBhL/jMKmHDgngAfh -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:38 2025 by rpki-client