This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json) Hash identifier: uT5rbkiRLLqcGuiAplBcGR5xj5GTLGPLst5HD8R25zw= Subject key identifier: C6:1C:85:48:EC:94:27:F5:68:C7:6A:96:28:68:E2:DD:8F:C4:20:A6 Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft Manifest number: 14 Signing time: Fri 05 Dec 2025 05:51:41 +0000 Manifest this update: Fri 05 Dec 2025 05:51:41 +0000 Manifest next update: Fri 12 Dec 2025 05:51:41 +0000 Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: Z8HUhFWdXMFw1L9uJ83D7joTGCxAIxR/Weh/3rKMYQk=) 2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: PsBUUdC0BLd6Gfr1NZqr/FpQy5dutVSQX3f0P269LMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259 Validity Not Before: Dec 5 05:51:41 2025 GMT Not After : Dec 12 05:51:41 2025 GMT Subject: CN=693272ed-ac8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:34:5e:61:27:ee:d0:58:7f:09:3a:c8:31: b2:de:52:7e:44:f2:5b:ba:5e:6a:55:14:b2:a2:d7: 51:53:bc:e8:87:91:53:5c:15:0e:e3:5d:b8:4d:b6: 74:f1:cc:43:a5:ab:36:6e:00:06:8b:3c:fa:ce:ec: b3:1a:47:3b:5a:15:8e:8b:06:28:0a:47:b5:c8:17: 4b:cc:ee:d0:1f:c4:8e:e5:05:c4:3c:26:f1:62:1b: 1f:18:c2:f7:3c:4d:4b:c9:31:fc:91:cc:cc:fd:2d: 50:ae:03:20:07:f3:38:b6:8b:79:45:86:7b:0f:94: 0c:bf:58:d4:a1:fd:1e:0b:af:7c:1f:6d:b1:a2:3f: 20:86:a5:e4:15:cb:71:f5:32:a1:1b:23:e8:d4:f3: eb:2c:33:58:12:44:b3:7a:9d:b2:98:be:3a:c7:cd: 03:9a:34:df:49:f9:1a:93:c7:e4:b2:05:e8:e6:91: 5e:9e:16:f8:b1:65:ed:a4:f8:1c:99:73:83:12:aa: d2:df:4d:e3:ed:e3:ed:d8:6a:ca:d2:a3:34:e4:4f: d9:c0:1c:94:81:b0:2d:1a:92:22:ad:af:69:e9:6e: fc:06:1f:b7:eb:d9:99:59:77:e7:55:7b:03:b7:88: 29:65:fe:97:58:d0:b9:77:5d:ab:a6:d4:e8:dd:e0: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1C:85:48:EC:94:27:F5:68:C7:6A:96:28:68:E2:DD:8F:C4:20:A6 X509v3 Authority Key Identifier: keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:71:30:69:2d:e0:1e:62:1f:5d:8a:87:fb:10:f0:25:d5:e9: 00:d8:16:1d:42:cb:fa:b6:18:74:1e:eb:d5:00:ed:57:0b:2f: d7:d5:03:c1:18:82:fa:70:cd:4e:89:d5:ee:14:73:8a:1c:21: d5:8b:63:cf:2f:ed:2e:2b:7a:ef:d7:fc:96:02:93:59:eb:11: 76:34:a7:82:fc:b4:09:84:0e:ec:5f:49:c5:d9:ac:e7:72:99: 55:04:f0:bc:36:bd:f8:c8:f1:f4:d7:8c:ea:b2:09:b7:1e:f8: 72:aa:ad:03:19:4b:da:c8:33:5f:7a:59:88:93:8f:fb:77:09: e4:bc:f6:5e:61:f9:9a:39:ba:1a:bf:35:93:01:ce:87:09:41: ea:a1:6a:94:4b:56:e4:fd:d0:97:60:0c:d3:97:0c:e5:77:eb: 70:7e:62:16:2f:da:86:c0:00:7d:46:c8:32:62:be:61:63:74: 0d:99:5d:0a:39:db:cf:51:0f:48:6b:6a:79:fa:01:24:07:20: c0:33:85:26:56:99:0b:bc:81:dc:49:6e:56:ec:e4:18:bf:21: b1:59:d0:b6:78:40:76:da:76:9f:4b:d5:7b:a4:b6:2d:71:87: 1d:34:ac:53:03:86:36:f6:be:62:6a:de:59:fc:7c:2d:4d:63: 6e:3a:44:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDcwQzExMC8GA1UEBRMoMTk5RDRCRTA2MDhBNTZGNTA0ODBDMEFEMjY0NURBRDdC NjkwMDI1OTAeFw0yNTEyMDUwNTUxNDFaFw0yNTEyMTIwNTUxNDFaMBgxFjAUBgNV BAMTDTY5MzI3MmVkLWFjOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrvjReYSfu0Fh/CTrIMbLeUn5E8lu6XmpVFLKi11FTvOiHkVNcFQ7jXbhNtnTx zEOlqzZuAAaLPPrO7LMaRztaFY6LBigKR7XIF0vM7tAfxI7lBcQ8JvFiGx8Ywvc8 TUvJMfyRzMz9LVCuAyAH8zi2i3lFhnsPlAy/WNSh/R4Lr3wfbbGiPyCGpeQVy3H1 MqEbI+jU8+ssM1gSRLN6nbKYvjrHzQOaNN9J+RqTx+SyBejmkV6eFvixZe2k+ByZ c4MSqtLfTePt4+3YasrSozTkT9nAHJSBsC0akiKtr2npbvwGH7fr2ZlZd+dVewO3 iCll/pdY0Ll3Xaum1Ojd4EgVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxhyFSOyU J/Vox2qWKGji3Y/EIKYwHwYDVR0jBBgwFoAUGZ1L4GCKVvUEgMCtJkXa17aQAlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NzBDL0FDNEQwQUI0QzY4 OTExRjA4RDJCRkUwQUM0RjlBRTAyL0daMUw0R0NLVnZVRWdNQ3RKa1hhMTdhUUFs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1oxTDRHQ0tWdlVFZ01DdEprWGExN2FRQWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NzBDL0FDNEQwQUI0QzY4OTExRjA4RDJCRkUwQUM0RjlBRTAyL0daMUw0R0NLVnZV RWdNQ3RKa1hhMTdhUUFsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9xMGkt4B5iH12Kh/sQ8CXV6QDYFh1Cy/q2GHQe69UA7VcLL9fVA8EY gvpwzU6J1e4Uc4ocIdWLY88v7S4reu/X/JYCk1nrEXY0p4L8tAmEDuxfScXZrOdy mVUE8Lw2vfjI8fTXjOqyCbce+HKqrQMZS9rIM196WYiTj/t3CeS89l5h+Zo5uhq/ NZMBzocJQeqhapRLVuT90JdgDNOXDOV363B+YhYv2obAAH1GyDJivmFjdA2ZXQo5 289RD0hrann6ASQHIMAzhSZWmQu8gdxJblbs5Bi/IbFZ0LZ4QHbadp9L1Xukti1x hx00rFMDhjb2vmJq3ln8fC1NY246RJI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:32:50 2025 by rpki-client