This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft File: A01GK1-vanw40CAcBdHfwtFikHU.mft (raw, json) Hash identifier: lpl1zEgjGCzO+tdQn0nLb9tPyaMuyfJQ7ZfmLPyBC0A= Subject key identifier: 0E:08:F9:DB:39:5C:18:84:03:72:B3:94:F1:F3:E0:C0:E7:EC:80:39 Authority key identifier: 03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 Certificate issuer: /CN=A91CDFF8/serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft Manifest number: 29 Signing time: Fri 05 Dec 2025 05:29:52 +0000 Manifest this update: Fri 05 Dec 2025 05:29:52 +0000 Manifest next update: Fri 12 Dec 2025 05:29:52 +0000 Files and hashes: 1: A01GK1-vanw40CAcBdHfwtFikHU.crl (hash: vpAJIY+YVjNO+EwtdFslYym4DUl2fbcVn7E+2IiQMI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFF8, serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Validity Not Before: Dec 5 05:29:52 2025 GMT Not After : Dec 12 05:29:52 2025 GMT Subject: CN=69326dd0-a117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:eb:95:36:7a:85:a0:ce:af:96:5b:18:55: 23:36:c5:8b:54:59:16:15:c6:be:10:0f:e6:07:b2: 67:17:c7:a7:a4:6c:aa:a3:5c:00:81:b2:f9:8a:f2: 4c:be:ba:a7:1e:77:f4:ff:9e:db:f5:e7:95:ba:ec: b1:3d:29:de:fe:ca:09:2a:cd:1f:fe:50:55:d1:12: 24:de:75:40:92:c7:19:2d:07:0e:ee:71:f9:c5:e5: 54:51:12:60:27:07:7a:eb:17:a4:9b:4b:bd:f2:a2: a1:5f:75:7c:15:b9:45:98:64:bf:c9:5a:c4:2b:e2: 9c:a0:e3:26:a8:78:f6:78:65:b8:74:f9:1d:ac:70: d9:aa:0b:77:29:db:82:f7:ec:9c:28:6c:9c:45:56: 31:a0:49:87:10:5b:05:6b:2a:9a:34:a9:c3:66:e9: bb:db:08:30:eb:49:7e:47:16:e9:f2:4d:c9:9d:ca: c0:9b:05:27:f6:b2:8d:7e:08:e8:94:e5:cf:b6:e8: 08:2d:48:c6:5c:50:4a:39:bb:20:42:55:a7:6e:13: b0:e9:82:94:8c:f2:0a:06:dd:58:38:cd:41:17:45: 83:b7:ec:6b:be:8e:12:1c:05:ee:69:a5:a8:41:9d: 18:dd:f2:92:b6:98:ce:4b:1a:60:a7:a6:f8:19:c7: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:08:F9:DB:39:5C:18:84:03:72:B3:94:F1:F3:E0:C0:E7:EC:80:39 X509v3 Authority Key Identifier: keyid:03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:68:d3:0a:3f:62:54:62:ed:56:62:9f:7d:98:58:01:00:c5: 98:d5:02:bf:a4:cb:bf:26:0f:19:3f:01:69:ae:c4:f8:a8:fd: 7c:9e:16:9b:8c:b4:fa:02:b2:87:c3:d7:f9:29:15:c1:78:1a: cd:b3:a7:fc:3a:50:04:5b:6b:78:8e:e2:e1:ed:90:2a:80:fc: 14:64:85:44:f6:93:87:81:17:7a:d9:ec:ea:90:d9:ee:6e:6d: ef:8e:d2:03:f0:08:a7:98:c9:0f:9c:22:0c:37:73:96:cb:53: 0b:f6:99:3f:99:8a:75:d6:47:cc:f7:6a:ad:72:f3:72:6f:aa: 70:cc:06:4d:7d:8d:ed:fd:07:53:fd:a6:8f:37:7a:22:10:f6: a3:15:f5:7e:b9:eb:8d:e7:f0:b3:70:93:1a:ce:72:e7:3f:74: c9:d6:99:eb:6b:e6:13:d1:8e:61:58:e3:4a:7a:6d:9c:30:71: 94:7f:08:84:e1:38:ea:44:59:4e:be:2d:d6:d3:06:ec:27:53: e9:d5:3d:0b:6e:4d:05:6f:ed:fc:7b:32:fa:85:f2:97:5f:cd: 85:c1:43:c2:5f:a7:be:22:cd:54:31:97:76:32:64:33:c7:89: 56:6f:09:03:a7:02:8b:4b:f9:7c:08:1a:9d:f2:df:17:40:3c: fc:29:e2:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REZGODExMC8GA1UEBRMoMDM0RDQ2MkI1RkFGNkE3QzM4RDAyMDFDMDVEMURGQzJE MTYyOTA3NTAeFw0yNTEyMDUwNTI5NTJaFw0yNTEyMTIwNTI5NTJaMBgxFjAUBgNV BAMTDTY5MzI2ZGQwLWExMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaJOuVNnqFoM6vllsYVSM2xYtUWRYVxr4QD+YHsmcXx6ekbKqjXACBsvmK8ky+ uqced/T/ntv155W67LE9Kd7+ygkqzR/+UFXREiTedUCSxxktBw7ucfnF5VRREmAn B3rrF6SbS73yoqFfdXwVuUWYZL/JWsQr4pyg4yaoePZ4Zbh0+R2scNmqC3cp24L3 7JwobJxFVjGgSYcQWwVrKpo0qcNm6bvbCDDrSX5HFunyTcmdysCbBSf2so1+COiU 5c+26AgtSMZcUEo5uyBCVaduE7DpgpSM8goG3Vg4zUEXRYO37Gu+jhIcBe5ppahB nRjd8pK2mM5LGmCnpvgZx6AnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDgj52zlc GIQDcrOU8fPgwOfsgDkwHwYDVR0jBBgwFoAUA01GK1+vanw40CAcBdHfwtFikHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERkY4L0QxMDgyMUQ2OTIw OTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53NDBDQWNCZEhmd3RGaWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTAxR0sxLXZhbnc0MENBY0JkSGZ3dEZpa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE RkY4L0QxMDgyMUQ2OTIwOTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53 NDBDQWNCZEhmd3RGaWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1o0wo/YlRi7VZin32YWAEAxZjVAr+ky78mDxk/AWmuxPio/XyeFpuM tPoCsofD1/kpFcF4Gs2zp/w6UARba3iO4uHtkCqA/BRkhUT2k4eBF3rZ7OqQ2e5u be+O0gPwCKeYyQ+cIgw3c5bLUwv2mT+ZinXWR8z3aq1y83JvqnDMBk19je39B1P9 po83eiIQ9qMV9X65643n8LNwkxrOcuc/dMnWmetr5hPRjmFY40p6bZwwcZR/CITh OOpEWU6+LdbTBuwnU+nVPQtuTQVv7fx7MvqF8pdfzYXBQ8Jfp74izVQxl3YyZDPH iVZvCQOnAotL+XwIGp3y3xdAPPwp4ts= -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:11 2025 by rpki-client