This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: wM/xIkF62SUEqV/fckNhwv3vPotU4NbpMNiouOHw/dw= Subject key identifier: BE:2E:07:34:51:4B:03:E7:D2:C5:6B:19:39:F4:18:DF:41:41:F0:AD Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2366 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 2316 Signing time: Sat 20 Dec 2025 15:41:47 +0000 Manifest this update: Sat 20 Dec 2025 15:41:47 +0000 Manifest next update: Sat 27 Dec 2025 15:41:47 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: 4M5D4kJJQo2q/GRBDigvagZ1bo8TdjrUkTUO/xquR3w=) 2: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (hash: EqPoHokWPSQ1L2lcAAXRF+UXl8dKiWjU9iYk2iUWo3s=) 3: ECB36EBCA54211F08D0FD466C4F9AE02.roa (hash: SuKYaB6T0tGfEKvGlTa0CLqgp2xb848WliNxbdmfrSw=) 4: 05596FAEBA1811F080138957C4F9AE02.roa (hash: h0JWy7ziGkjmOsJL8dHAJhvnalo12yE0dGnYrcqdH2A=) 5: 55D95690A13811F0BF53567FC4F9AE02.roa (hash: wfIg4YQ25Mg9FB53wM9axrO11ggNzJyyDGc+cl9NhDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9062 (0x2366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Dec 20 15:41:47 2025 GMT Not After : Dec 27 15:41:47 2025 GMT Subject: CN=6946c3bb-d4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:ba:60:ae:98:72:17:e8:5b:46:78:c0:ce: 57:c1:12:6d:be:65:74:de:a3:ad:dd:04:de:19:74: 12:5f:0a:c2:be:90:59:28:f8:30:05:05:5d:53:df: e5:b2:3e:5b:8b:09:08:30:85:73:e1:21:b4:ce:38: aa:98:e3:b7:25:c6:a9:b2:b8:cc:ef:78:10:2d:9e: 23:bb:d3:42:b2:d8:f4:f1:c8:58:4c:c8:4d:19:75: 02:48:d8:4f:21:d1:11:6c:f1:65:01:4f:c7:98:3a: 9d:32:04:b9:1b:5a:89:e4:0a:ba:c2:90:d5:2a:4c: 0e:e3:bc:ac:b1:37:41:be:92:c2:8a:44:b0:e6:1a: d4:dc:16:ee:8a:35:46:d6:99:73:44:32:57:0e:e4: 2d:c1:f0:4f:fe:60:7d:04:88:9e:5d:cc:27:3a:dc: ea:4f:85:b1:68:48:16:7d:73:37:24:9a:ed:dc:73: e8:96:7d:ec:3c:ae:7c:8f:fa:ae:0a:da:7b:92:5a: 9a:3f:61:2a:ea:f5:ee:bc:e0:57:7a:66:c0:3a:71: 7c:18:04:70:b8:2d:49:37:dd:2c:d1:b3:df:1d:79: 15:2a:72:5c:da:d3:f4:7e:ac:49:bb:27:f2:57:5a: ee:f9:3c:ff:6a:5b:7c:09:46:d7:b5:43:80:ac:4b: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2E:07:34:51:4B:03:E7:D2:C5:6B:19:39:F4:18:DF:41:41:F0:AD X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:64:4f:c9:58:54:ef:42:d4:19:1e:fb:56:18:b4:42:03:b0: 6b:27:b8:ab:ea:5d:e5:c6:9d:13:9e:d4:2f:78:96:a4:12:1a: 42:48:be:4c:a7:f8:a8:1e:3c:c9:e8:7e:83:ed:37:26:8e:d8: e3:5f:63:be:63:7a:c0:bd:a4:3f:ba:4b:93:73:c2:21:f0:4b: e1:28:8f:24:3e:38:94:9e:68:58:77:20:8c:b8:98:79:f2:cf: be:61:ca:11:2c:08:8b:7a:49:83:e9:b0:c8:5e:fc:22:5c:9c: 1a:b1:4e:ad:57:bd:53:78:ac:51:96:55:5e:85:49:05:75:d4: 01:e5:da:97:97:76:d3:c2:11:01:57:67:dc:01:6d:11:25:70: e1:a1:06:88:f5:5e:2c:c1:90:f9:61:5e:65:ee:9b:30:12:d8: 6d:40:4a:c9:f0:da:a2:e4:3f:d5:ff:13:2d:e0:37:20:c4:af: 52:82:db:6d:70:54:13:67:ce:63:66:21:4f:ef:78:13:31:59: 5c:e9:10:3f:57:cc:13:02:a4:1e:bd:17:c2:69:1b:90:56:71: bf:ec:c8:01:30:bb:99:d7:32:cb:70:ab:31:9c:c9:7d:85:b5: c3:42:cc:a9:9c:03:05:09:0a:94:4e:37:57:54:45:19:eb:92: 8d:fb:c1:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUxMjIwMTU0MTQ3WhcNMjUxMjI3MTU0MTQ3WjAYMRYwFAYD VQQDDA02OTQ2YzNiYi1kNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWa6YK6YchfoW0Z4wM5XwRJtvmV03qOt3QTeGXQSXwrCvpBZKPgwBQVdU9/l sj5biwkIMIVz4SG0zjiqmOO3JcapsrjM73gQLZ4ju9NCstj08chYTMhNGXUCSNhP IdERbPFlAU/HmDqdMgS5G1qJ5Aq6wpDVKkwO47yssTdBvpLCikSw5hrU3BbuijVG 1plzRDJXDuQtwfBP/mB9BIieXcwnOtzqT4WxaEgWfXM3JJrt3HPoln3sPK58j/qu Ctp7klqaP2Eq6vXuvOBXembAOnF8GARwuC1JN90s0bPfHXkVKnJc2tP0fqxJuyfy V1ru+Tz/alt8CUbXtUOArEtDVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4uBzRR SwPn0sVrGTn0GN9BQfCtMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYZE/JWFTvQtQZHvtWGLRCA7BrJ7ir6l3lxp0TntQveJakEhpCSL5M p/ioHjzJ6H6D7TcmjtjjX2O+Y3rAvaQ/ukuTc8Ih8EvhKI8kPjiUnmhYdyCMuJh5 8s++YcoRLAiLekmD6bDIXvwiXJwasU6tV71TeKxRllVehUkFddQB5dqXl3bTwhEB V2fcAW0RJXDhoQaI9V4swZD5YV5l7pswEthtQErJ8Nqi5D/V/xMt4DcgxK9Sgttt cFQTZ85jZiFP73gTMVlc6RA/V8wTAqQevRfCaRuQVnG/7MgBMLuZ1zLLcKsxnMl9 hbXDQsypnAMFCQqUTjdXVEUZ65KN+8GX -----END CERTIFICATE-----Generated at Sun Dec 21 19:22:59 2025 by rpki-client