This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: peqMupEyB0X6sM1UAGjGKkoJF4lJfyf65OlJqoylgG4= Subject key identifier: 56:6F:BF:83:C7:51:B9:D1:55:6C:0E:B0:70:7C:9C:E5:5F:CC:5D:82 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 083C Signing time: Thu 04 Dec 2025 19:29:45 +0000 Manifest this update: Thu 04 Dec 2025 19:29:45 +0000 Manifest next update: Thu 11 Dec 2025 19:29:45 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: gkmkYJxQNv7hwPIOTasu6ZLBe2QlJg4GKoUsxr8lOsE=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Dec 4 19:29:45 2025 GMT Not After : Dec 11 19:29:45 2025 GMT Subject: CN=6931e129-65f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:29:19:8b:81:f7:33:09:14:fc:30:9f:03: b3:6c:ab:1e:8c:54:ef:77:67:55:bc:4b:43:b1:17: b7:91:ac:ff:c7:9c:f2:ba:f2:1b:ac:ae:2d:79:4c: 65:31:3e:ac:16:5e:76:f1:11:36:4f:59:f7:46:8c: 88:94:a0:ed:97:27:5e:d9:a1:8d:51:fb:ea:10:0b: 98:70:c9:a1:09:31:73:4f:80:95:d6:2b:54:c4:03: ad:d5:20:94:10:0a:de:be:0b:a5:ae:78:81:3e:fa: 95:e7:ab:42:01:ab:2f:f5:9e:81:54:7c:76:40:aa: e5:39:d3:0a:8d:2b:0e:a3:4a:d9:29:e6:ee:d3:86: 21:e8:0b:2e:70:1c:0d:78:53:80:f4:81:58:ae:99: 20:c7:61:85:f5:68:46:3d:da:7c:43:13:68:05:ab: 13:75:f9:d6:e7:f0:a7:88:4a:db:8c:bd:93:1d:59: 3a:06:9f:b3:ad:44:6c:5a:d1:69:b2:af:04:12:28: 5a:13:a0:e8:e3:3b:e4:a5:e9:ce:74:ba:14:c0:ce: 8c:53:ab:e4:12:40:e2:18:20:48:c5:29:8f:81:42: 51:87:13:1c:58:81:8f:68:75:3a:6b:45:6f:41:d4: 24:a8:7b:e3:db:90:58:52:dd:62:2d:22:b2:83:1c: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6F:BF:83:C7:51:B9:D1:55:6C:0E:B0:70:7C:9C:E5:5F:CC:5D:82 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b2:e5:e6:72:17:76:ef:5c:a7:65:96:cd:9b:fd:2a:c7:be: 91:82:4b:d3:1f:31:97:6e:00:d2:b1:e8:c2:25:55:fb:48:d5: 73:a0:92:3d:e6:69:ce:d1:82:ed:9f:fe:0a:a4:ff:41:80:24: f6:79:39:87:5a:c6:8b:27:5a:86:aa:15:3a:c9:5a:26:68:5a: b3:a4:4c:2b:5e:14:7d:e9:44:60:2c:06:90:f3:f1:5a:3c:e5: ca:d3:ac:56:57:16:49:0f:7c:e8:8c:3a:f1:90:37:fc:01:b9: 9f:73:08:16:e7:29:61:44:6a:a2:e2:19:13:6b:b9:37:46:19: f4:5e:28:96:a4:a5:67:c1:23:6a:c7:65:7e:ef:c2:0f:ab:d3: 7c:ed:ef:89:08:cb:45:03:65:6e:f4:b1:f0:77:bf:a6:7c:39: 35:ce:c3:f2:f5:bb:bf:ff:da:96:53:a4:c4:e4:4e:0c:66:a8: bc:65:c1:30:d9:90:a5:77:5d:af:e4:f1:ee:9b:3f:c8:31:fc: fb:bc:64:3b:f9:30:66:35:c4:46:3f:5f:9e:42:a2:f9:ac:79: ea:36:f0:83:c3:83:73:21:0f:46:ac:50:2a:30:fc:c9:ca:cb: d4:77:8a:c3:19:9b:98:cf:0a:44:c6:9d:d3:6b:d4:9e:6a:36: d9:7d:e6:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUxMjA0MTkyOTQ1WhcNMjUxMjExMTkyOTQ1WjAYMRYwFAYD VQQDEw02OTMxZTEyOS02NWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozspGYuB9zMJFPwwnwOzbKsejFTvd2dVvEtDsRe3kaz/x5zyuvIbrK4teUxl MT6sFl528RE2T1n3RoyIlKDtlyde2aGNUfvqEAuYcMmhCTFzT4CV1itUxAOt1SCU EArevgulrniBPvqV56tCAasv9Z6BVHx2QKrlOdMKjSsOo0rZKebu04Yh6AsucBwN eFOA9IFYrpkgx2GF9WhGPdp8QxNoBasTdfnW5/CniErbjL2THVk6Bp+zrURsWtFp sq8EEihaE6Do4zvkpenOdLoUwM6MU6vkEkDiGCBIxSmPgUJRhxMcWIGPaHU6a0Vv QdQkqHvj25BYUt1iLSKygxwdiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZvv4PH UbnRVWwOsHB8nOVfzF2CMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnsuXmchd271ynZZbNm/0qx76RgkvTHzGXbgDSsejCJVX7SNVzoJI9 5mnO0YLtn/4KpP9BgCT2eTmHWsaLJ1qGqhU6yVomaFqzpEwrXhR96URgLAaQ8/Fa POXK06xWVxZJD3zojDrxkDf8AbmfcwgW5ylhRGqi4hkTa7k3Rhn0XiiWpKVnwSNq x2V+78IPq9N87e+JCMtFA2Vu9LHwd7+mfDk1zsPy9bu//9qWU6TE5E4MZqi8ZcEw 2ZCld12v5PHumz/IMfz7vGQ7+TBmNcRGP1+eQqL5rHnqNvCDw4NzIQ9GrFAqMPzJ ysvUd4rDGZuYzwpExp3Ta9SeajbZfeb5 -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:19 2025 by rpki-client