This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: Og7f3LHJvKqmsuYzztm8uLWoe4fShlCt51vxt6NhBjA= Subject key identifier: E4:E9:7D:52:A9:F6:1C:39:D5:2A:D3:F1:BC:85:A6:7D:72:F7:4C:72 Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 0492 Signing time: Thu 04 Dec 2025 22:35:45 +0000 Manifest this update: Thu 04 Dec 2025 22:35:44 +0000 Manifest next update: Thu 11 Dec 2025 22:35:44 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: 3kpwcRyCn2dqCBaNIDZqWBq6NqDAzR47pn5qrPHKpr4=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: bFGAY7gHkrvRuSHehHQRzFx9uBqTtWyMVWm0D4E7juI=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Validity Not Before: Dec 4 22:35:44 2025 GMT Not After : Dec 11 22:35:44 2025 GMT Subject: CN=69320cc1-8f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:4d:68:47:01:75:9c:01:49:df:9c:70:fc: f9:cb:02:74:27:d1:86:d5:ea:98:f9:66:73:92:d0: 92:e0:58:f8:05:d4:0e:c3:65:63:37:74:84:ba:ac: fc:4a:bf:a8:6d:98:19:31:52:33:ef:8d:34:9b:14: a2:8a:46:47:42:d3:79:c6:c9:1b:a7:e8:b3:83:c0: 83:28:93:2a:2c:5b:bd:5b:f2:97:c6:6b:5a:c4:8a: bf:0e:07:6d:de:70:e4:a5:88:6f:ba:71:b8:1e:c7: 60:51:a9:9d:80:13:f2:62:4e:02:52:dc:a6:cf:4c: 43:93:16:34:9b:bd:b3:fc:b2:c8:56:57:6c:4e:15: 17:35:a3:21:58:a1:d9:90:00:ba:88:13:87:e0:92: 21:33:30:29:d8:e8:5d:c4:bd:28:f9:31:b3:07:ea: 79:f4:e9:f2:80:9d:99:db:33:04:00:f1:26:df:30: 70:41:9b:73:1f:a1:db:68:f1:13:4e:79:d2:c0:fb: 9a:3a:93:63:68:e5:a2:de:e4:a4:45:ff:c7:aa:44: 81:d0:20:5a:c5:4e:88:d1:c8:44:19:62:ec:ec:9f: bc:84:ae:78:24:c5:69:49:ed:86:da:ed:86:b0:df: ae:c2:ad:d9:a2:29:c7:81:8f:12:73:5d:3e:90:59: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E9:7D:52:A9:F6:1C:39:D5:2A:D3:F1:BC:85:A6:7D:72:F7:4C:72 X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:88:06:2f:03:31:d0:71:94:db:0b:c7:82:ee:63:e8:a3:de: d0:42:92:ea:49:a0:29:83:ec:bf:9f:7f:18:e3:d1:fa:8d:3b: fb:90:e2:6c:c2:23:9e:74:b8:59:a5:95:6b:53:4e:c3:72:81: 09:2d:57:97:c0:b5:87:17:e9:de:7d:a6:e7:1e:ab:d8:1b:8c: bd:d9:c3:a4:08:f1:6c:1a:07:00:88:ff:ea:a0:a4:fe:34:82: 9d:45:e4:c0:7f:74:74:50:ef:12:e9:cc:67:9d:5a:47:53:0f: 60:a5:ce:28:99:d3:74:1a:f0:17:a6:12:19:e6:b7:ef:ff:6c: d4:84:b6:ba:e2:b2:0a:d4:c1:a7:68:2d:33:59:b4:33:c3:aa: d3:40:7d:85:1a:5f:20:f9:5e:7f:0c:69:be:9f:a8:db:07:d5: 09:e5:1b:1e:95:e1:eb:d7:f5:6a:fb:ac:9d:f6:d3:25:a3:10: b7:dd:f6:c4:ab:a7:21:26:ff:df:0b:5b:34:72:8c:dd:a3:3e: 98:88:30:46:d0:a4:09:97:4b:88:66:5b:03:a4:e8:05:fc:f4: 8d:8f:70:26:7b:1a:29:60:bd:7a:4e:df:9d:76:cd:46:29:67: 70:2b:f0:a8:03:c9:1a:9c:31:59:96:65:39:7b:95:16:6c:9e: c8:6a:32:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjUxMjA0MjIzNTQ0WhcNMjUxMjExMjIzNTQ0WjAYMRYwFAYD VQQDEw02OTMyMGNjMS04ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcdNaEcBdZwBSd+ccPz5ywJ0J9GG1eqY+WZzktCS4Fj4BdQOw2VjN3SEuqz8 Sr+obZgZMVIz7400mxSiikZHQtN5xskbp+izg8CDKJMqLFu9W/KXxmtaxIq/Dgdt 3nDkpYhvunG4HsdgUamdgBPyYk4CUtymz0xDkxY0m72z/LLIVldsThUXNaMhWKHZ kAC6iBOH4JIhMzAp2OhdxL0o+TGzB+p59OnygJ2Z2zMEAPEm3zBwQZtzH6HbaPET TnnSwPuaOpNjaOWi3uSkRf/HqkSB0CBaxU6I0chEGWLs7J+8hK54JMVpSe2G2u2G sN+uwq3ZoinHgY8Sc10+kFnL4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTpfVKp 9hw51SrT8byFpn1y90xyMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHiAYvAzHQcZTbC8eC7mPoo97QQpLqSaApg+y/n38Y49H6jTv7kOJs wiOedLhZpZVrU07DcoEJLVeXwLWHF+nefabnHqvYG4y92cOkCPFsGgcAiP/qoKT+ NIKdReTAf3R0UO8S6cxnnVpHUw9gpc4omdN0GvAXphIZ5rfv/2zUhLa64rIK1MGn aC0zWbQzw6rTQH2FGl8g+V5/DGm+n6jbB9UJ5RseleHr1/Vq+6yd9tMloxC33fbE q6chJv/fC1s0cozdoz6YiDBG0KQJl0uIZlsDpOgF/PSNj3AmexopYL16Tt+dds1G KWdwK/CoA8kanDFZlmU5e5UWbJ7IajJP -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:45 2025 by rpki-client