This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: etm5dFhLuJWmSCHI5OlGmpBOSeBhoTFyiB07IrUUpTA= Subject key identifier: F7:E3:AA:D2:1B:EC:4A:A4:BD:8F:1D:ED:2F:83:FA:5E:2A:9F:96:1F Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: D2 Signing time: Fri 05 Dec 2025 03:44:35 +0000 Manifest this update: Fri 05 Dec 2025 03:44:34 +0000 Manifest next update: Fri 12 Dec 2025 03:44:34 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: xQkOnQdHheVa8slZhdsjfzk+nlDag/mPybX9VzQWFzQ=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: b7PxFokUIXPBGz+iss/nauBD0ImGfyI3acw64tuMWC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Dec 5 03:44:34 2025 GMT Not After : Dec 12 03:44:34 2025 GMT Subject: CN=69325522-7687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:67:26:ae:b0:5e:45:e4:e8:e8:52:35:1f: 04:95:0c:74:35:94:06:a2:d1:89:27:a0:39:a6:b8: 55:db:f0:d3:84:df:e1:42:e1:cc:0e:3b:aa:12:f6: d0:73:ec:df:2e:5f:8f:bc:ac:ba:7e:db:b5:34:59: a3:58:81:7e:03:e4:ff:2c:e9:4b:84:35:09:2b:c9: dd:55:89:c0:3b:72:43:57:45:9a:08:19:df:f0:7c: a7:dc:6f:82:ba:b8:ae:b0:86:1d:58:4e:7c:0c:9a: 39:32:0f:fa:ed:f7:f2:ef:a9:b0:db:fc:1a:03:f3: da:70:f1:80:83:e3:a9:6a:13:c9:3c:f8:5b:4d:0d: e0:6e:80:de:8b:f1:73:5a:af:d8:16:3e:13:32:bf: c2:77:5b:f1:3c:82:c1:54:92:39:3b:a7:4d:e7:ca: 86:f6:16:35:0d:f8:ea:03:a9:ba:31:f6:70:15:f8: b8:b6:ff:db:94:07:d2:1b:d3:f4:e3:ba:51:d4:96: f0:9a:7c:cf:e1:9a:5a:ac:6c:c4:88:b3:11:eb:ff: 1e:22:1c:7f:d5:e3:15:0d:e1:63:ca:be:57:a3:16: 3f:c9:4f:d0:dc:29:96:86:74:f5:75:fe:3a:7c:b5: 33:51:34:2b:d2:05:f3:68:24:ed:14:eb:a9:ac:bf: 18:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:AA:D2:1B:EC:4A:A4:BD:8F:1D:ED:2F:83:FA:5E:2A:9F:96:1F X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b2:7d:85:65:4a:d7:5a:38:f4:17:db:8e:ea:62:47:c8:a9: 14:76:d9:37:47:08:56:eb:37:96:9a:b6:11:03:c3:5d:38:a1: 9b:6a:45:bf:28:9f:c1:2b:44:a3:f2:df:29:83:66:9f:d2:d9: 66:b1:cd:1d:be:84:db:e5:62:37:8f:52:94:61:1d:62:43:eb: 40:6d:a3:98:5e:5d:f5:ee:f1:86:81:1e:20:a1:90:cc:0c:13: ad:f8:4e:db:44:23:9d:aa:98:4a:17:32:bf:49:85:fa:ca:4c: 4f:52:16:bb:b0:4f:89:3b:cf:b5:e3:fd:9a:c0:4c:83:ed:8c: f6:cc:00:1c:23:0e:8b:88:28:25:a0:25:77:c9:e1:53:fa:c5: 70:38:00:99:70:0b:b6:32:fa:06:81:17:b2:d1:f9:f6:fb:03: 3b:dd:43:84:01:b0:f8:e1:b0:a0:70:4a:7a:40:e9:01:e1:a7: 30:fe:ec:8b:1f:42:5b:22:1a:bd:fb:0d:8d:de:ef:7a:23:e7: bd:5a:77:e3:60:1e:8c:cd:b7:f0:2c:0d:15:0e:96:db:09:e4: 33:4f:66:cc:57:77:8e:0a:75:a1:32:2e:ae:10:7c:a4:41:f3: 73:4b:18:d5:b7:00:1b:a0:60:49:2d:48:12:2b:5e:9d:6d:c2: 3f:1e:1f:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy NDIyRUI2NkYwHhcNMjUxMjA1MDM0NDM0WhcNMjUxMjEyMDM0NDM0WjAYMRYwFAYD VQQDEw02OTMyNTUyMi03Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRpnJq6wXkXk6OhSNR8ElQx0NZQGotGJJ6A5prhV2/DThN/hQuHMDjuqEvbQ c+zfLl+PvKy6ftu1NFmjWIF+A+T/LOlLhDUJK8ndVYnAO3JDV0WaCBnf8Hyn3G+C uriusIYdWE58DJo5Mg/67ffy76mw2/waA/PacPGAg+OpahPJPPhbTQ3gboDei/Fz Wq/YFj4TMr/Cd1vxPILBVJI5O6dN58qG9hY1DfjqA6m6MfZwFfi4tv/blAfSG9P0 47pR1JbwmnzP4ZparGzEiLMR6/8eIhx/1eMVDeFjyr5XoxY/yU/Q3CmWhnT1df46 fLUzUTQr0gXzaCTtFOuprL8Y5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfjqtIb 7EqkvY8d7S+D+l4qn5YfMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0 bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51 VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6sn2FZUrXWjj0F9uO6mJHyKkUdtk3RwhW6zeWmrYRA8NdOKGbakW/ KJ/BK0Sj8t8pg2af0tlmsc0dvoTb5WI3j1KUYR1iQ+tAbaOYXl317vGGgR4goZDM DBOt+E7bRCOdqphKFzK/SYX6ykxPUha7sE+JO8+14/2awEyD7Yz2zAAcIw6LiCgl oCV3yeFT+sVwOACZcAu2MvoGgRey0fn2+wM73UOEAbD44bCgcEp6QOkB4acw/uyL H0JbIhq9+w2N3u96I+e9WnfjYB6MzbfwLA0VDpbbCeQzT2bMV3eOCnWhMi6uEHyk QfNzSxjVtwAboGBJLUgSK16dbcI/Hh/i -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:37 2025 by rpki-client