This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json) Hash identifier: MBTJcUuinFzQY5TNza31/mzmJOwVh88VAQPPVcp3KLI= Subject key identifier: 21:2F:C1:DB:27:FB:15:97:1C:34:3B:CE:1A:08:7B:89:3E:09:79:C2 Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft Manifest number: 02CD Signing time: Thu 04 Dec 2025 23:45:33 +0000 Manifest this update: Thu 04 Dec 2025 23:45:33 +0000 Manifest next update: Thu 11 Dec 2025 23:45:33 +0000 Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: a4RtGuK+KhGgPhRLUtKUv+h5j/+xvf9f/wZkrqueXk8=) 2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: e8WAY0Y3CoS5+B8mQdHDLApUCt8COdKCwX61EjEYzJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Validity Not Before: Dec 4 23:45:33 2025 GMT Not After : Dec 11 23:45:33 2025 GMT Subject: CN=69321d1d-12b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:47:d2:96:b2:d0:8c:3b:79:9c:16:ed:9b: a9:2a:be:0e:de:53:b8:19:9f:21:ae:2b:1b:ab:6d: b0:4e:e8:ea:28:0c:c5:1a:07:6b:32:60:ab:d9:51: 12:94:02:ba:7f:50:04:07:10:65:ed:96:42:28:77: 3d:40:78:c5:18:2e:b4:0d:c0:eb:d1:0d:d9:2f:0d: dd:02:45:77:72:da:e6:11:1c:75:aa:c5:b6:90:6f: 8d:1d:15:ef:43:b0:d7:52:f5:f3:e6:d5:4b:98:ae: 8e:b3:f6:61:b9:f3:e0:c2:1f:b8:f1:08:82:24:a4: 07:24:67:ec:47:38:d7:2c:7d:db:11:64:9c:d0:69: 3f:26:fd:ba:53:e0:9e:09:4c:f7:b8:2e:9d:8e:3a: aa:9e:cf:a0:0a:c9:5b:1e:4d:b5:a3:8d:ad:81:c6: 19:b0:dc:2b:79:79:3c:0f:08:ab:04:0f:c9:fb:13: 76:79:1e:3c:2c:5c:a5:be:90:5b:de:30:ad:b8:79: 24:00:4c:fe:1e:48:b8:08:e5:26:2f:3f:c4:e9:0d: 83:8c:54:f1:dd:f1:f8:9e:a9:51:3a:a5:fe:c8:1c: ea:8c:7d:16:62:b4:68:4b:68:ca:0d:1b:67:64:ab: 1c:b2:0e:c4:a4:9a:4d:e4:bc:00:5e:7f:69:18:e6: b6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2F:C1:DB:27:FB:15:97:1C:34:3B:CE:1A:08:7B:89:3E:09:79:C2 X509v3 Authority Key Identifier: keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c4:26:38:9a:6b:a3:24:7c:23:dc:5d:91:ec:96:db:a0:bf: dd:ee:5c:bb:d3:ca:03:a2:6a:bf:e9:fd:89:0c:74:3a:a5:bf: 03:54:c7:bd:91:4e:3a:6a:b2:b5:d7:82:30:18:62:58:e9:c1: 72:2e:36:4e:71:a4:fd:14:f2:e5:28:36:ce:0f:7a:9a:7a:54: 5a:42:e1:1d:8e:b3:42:1c:26:b7:ca:3f:c6:f7:07:98:fc:79: 0f:15:3c:74:7f:cc:fa:00:76:e8:cd:f0:4c:0f:32:6b:36:ac: 09:f4:39:a6:05:56:7a:e0:ba:4d:65:df:84:0b:52:55:f4:ff: 56:a4:e8:73:5b:fa:18:c6:5a:34:8f:39:d3:de:95:32:0e:6c: 88:32:c9:14:84:b6:ac:f1:0b:d3:d3:2c:6e:87:fb:8a:a3:f6: 1b:d9:c8:c0:1d:71:96:74:b2:ed:37:ec:3d:c2:5c:74:3a:e7: 90:ac:6d:26:42:f0:f4:2b:ca:2c:07:3f:38:78:de:d3:96:3c: fa:77:de:47:fa:c9:e3:77:c6:ae:22:6e:7e:31:de:91:cc:54: d2:f4:10:d1:cf:a5:1e:fb:7b:a3:f7:4b:c6:a9:9f:85:ba:18: 32:47:34:96:8a:30:52:a7:1d:f2:dd:30:47:7d:f0:7e:76:4a: 85:d3:77:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2 MjMwMDU5RTgwHhcNMjUxMjA0MjM0NTMzWhcNMjUxMjExMjM0NTMzWjAYMRYwFAYD VQQDEw02OTMyMWQxZC0xMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ntH0pay0Iw7eZwW7ZupKr4O3lO4GZ8hrisbq22wTujqKAzFGgdrMmCr2VES lAK6f1AEBxBl7ZZCKHc9QHjFGC60DcDr0Q3ZLw3dAkV3ctrmERx1qsW2kG+NHRXv Q7DXUvXz5tVLmK6Os/ZhufPgwh+48QiCJKQHJGfsRzjXLH3bEWSc0Gk/Jv26U+Ce CUz3uC6djjqqns+gCslbHk21o42tgcYZsNwreXk8DwirBA/J+xN2eR48LFylvpBb 3jCtuHkkAEz+Hki4COUmLz/E6Q2DjFTx3fH4nqlROqX+yBzqjH0WYrRoS2jKDRtn ZKscsg7EpJpN5LwAXn9pGOa28wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEvwdsn +xWXHDQ7zhoIe4k+CXnCMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L T20xSXp3UWp4YlJpTUFXZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjxCY4mmujJHwj3F2R7JbboL/d7ly708oDomq/6f2JDHQ6pb8DVMe9 kU46arK114IwGGJY6cFyLjZOcaT9FPLlKDbOD3qaelRaQuEdjrNCHCa3yj/G9weY /HkPFTx0f8z6AHbozfBMDzJrNqwJ9DmmBVZ64LpNZd+EC1JV9P9WpOhzW/oYxlo0 jznT3pUyDmyIMskUhLas8QvT0yxuh/uKo/Yb2cjAHXGWdLLtN+w9wlx0OueQrG0m QvD0K8osBz84eN7Tljz6d95H+snjd8auIm5+Md6RzFTS9BDRz6Ue+3uj90vGqZ+F uhgyRzSWijBSpx3y3TBHffB+dkqF03fn -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:15 2025 by rpki-client