This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: V61UU6UX4auYoLvRm7KHz5b9LKkjJRvRO8Tnu2fOhTI= Subject key identifier: FD:18:4B:2D:33:3B:3F:C4:D6:7B:84:79:3F:16:6D:4D:51:74:35:6B Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 022A Signing time: Sun 21 Dec 2025 01:17:40 +0000 Manifest this update: Sun 21 Dec 2025 01:17:40 +0000 Manifest next update: Sun 28 Dec 2025 01:17:40 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: n7yLdpiqVQ36NnzmvZl1BB/V38pyA/oPC5Xh3NHa7Uo=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: Dec 21 01:17:40 2025 GMT Not After : Dec 28 01:17:40 2025 GMT Subject: CN=69474ab4-c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:aa:75:7f:dc:c5:2f:58:c1:83:35:b5:95: fe:0c:cd:6f:67:0b:00:76:26:4f:2f:5b:e0:63:4c: e2:11:2f:02:b6:4b:96:56:29:e7:b8:0a:49:2e:4e: ae:48:31:13:3f:24:39:8c:60:bd:8b:fa:f1:fd:1a: bc:f6:70:c7:46:05:7c:9f:a0:e3:77:09:ad:63:2a: dc:5f:14:66:c2:eb:7c:be:9a:b7:59:e5:e2:a0:85: 6a:01:bb:52:b9:8c:89:27:d6:2e:cf:1f:24:a6:9c: cd:74:93:6c:30:51:f2:f2:f3:86:f7:5c:93:bb:f1: 2d:2f:d9:77:90:7b:b4:b0:ce:ea:38:e9:e3:a1:ae: 9f:37:a4:5e:87:5f:d1:66:29:ac:c7:2b:34:1f:eb: 57:b0:8c:8d:bd:c7:91:72:24:9b:01:18:38:d7:af: e0:40:2e:0d:c1:15:ea:1a:dc:bb:e4:a1:fc:f0:af: 16:f4:2b:c8:20:b3:52:3e:96:ea:d8:a5:bc:bc:50: f7:ff:3d:7d:41:5c:b9:ef:23:a2:63:86:e9:27:f4: 8d:3f:9e:d1:01:a8:73:d5:0e:36:86:a3:1a:04:ff: 63:c4:c4:6b:30:d5:83:99:e4:59:43:00:27:ea:0a: 35:9e:b7:d5:74:ee:8f:d0:90:02:03:18:bd:23:1a: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:18:4B:2D:33:3B:3F:C4:D6:7B:84:79:3F:16:6D:4D:51:74:35:6B X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3e:cd:4f:9e:0c:a8:36:e9:fe:dc:ac:e0:db:93:1e:7c:0b: b9:d2:87:ba:4a:a6:d0:d8:28:1b:5a:42:ed:81:c7:34:9f:35: d3:08:b5:47:b6:f0:8c:c8:a9:cb:05:df:46:07:f6:a1:f0:02: 3c:74:0f:cb:9c:f3:b9:a0:ec:07:a0:03:48:cb:eb:f4:da:07: ef:36:a8:3d:6c:7d:2d:17:3d:c9:d0:0e:ee:c4:bb:e6:3c:43: 3a:9d:0a:d9:35:4d:8b:60:fa:f6:23:d6:9f:91:11:f0:f5:03: 7c:6a:03:3c:5b:27:81:1a:ff:38:86:fb:25:be:df:a0:0b:e4: 42:b6:8b:d8:1f:96:a7:3e:a6:2a:df:84:2c:02:a4:c8:14:86: e7:5f:40:4c:6b:14:36:bf:87:61:85:43:84:57:50:14:19:9b: 00:db:41:11:13:60:af:1b:4b:61:15:b7:02:f1:93:c2:ad:14: 82:49:bf:22:80:c8:c7:90:62:13:ab:42:14:b4:e7:c1:e2:66: 24:d3:97:a7:f7:bc:97:72:56:8e:af:ea:df:84:ee:b1:52:70: ce:00:19:3b:7a:98:af:ce:bf:91:5e:94:bd:bf:15:9e:bd:b9: f3:29:3f:d4:f1:b3:e2:1d:b1:73:ee:66:4c:b2:34:18:59:15: a9:c9:66:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUxMjIxMDExNzQwWhcNMjUxMjI4MDExNzQwWjAYMRYwFAYD VQQDDA02OTQ3NGFiNC1jMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IaqdX/cxS9YwYM1tZX+DM1vZwsAdiZPL1vgY0ziES8CtkuWVinnuApJLk6u SDETPyQ5jGC9i/rx/Rq89nDHRgV8n6DjdwmtYyrcXxRmwut8vpq3WeXioIVqAbtS uYyJJ9Yuzx8kppzNdJNsMFHy8vOG91yTu/EtL9l3kHu0sM7qOOnjoa6fN6Reh1/R Zimsxys0H+tXsIyNvceRciSbARg416/gQC4NwRXqGty75KH88K8W9CvIILNSPpbq 2KW8vFD3/z19QVy57yOiY4bpJ/SNP57RAahz1Q42hqMaBP9jxMRrMNWDmeRZQwAn 6go1nrfVdO6P0JACAxi9IxrZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0YSy0z Oz/E1nuEeT8WbU1RdDVrMB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPPs1PngyoNun+3Kzg25MefAu50oe6SqbQ2CgbWkLtgcc0nzXTCLVH tvCMyKnLBd9GB/ah8AI8dA/LnPO5oOwHoANIy+v02gfvNqg9bH0tFz3J0A7uxLvm PEM6nQrZNU2LYPr2I9afkRHw9QN8agM8WyeBGv84hvslvt+gC+RCtovYH5anPqYq 34QsAqTIFIbnX0BMaxQ2v4dhhUOEV1AUGZsA20ERE2CvG0thFbcC8ZPCrRSCSb8i gMjHkGITq0IUtOfB4mYk05en97yXclaOr+rfhO6xUnDOABk7epivzr+RXpS9vxWe vbnzKT/U8bPiHbFz7mZMsjQYWRWpyWbx -----END CERTIFICATE-----Generated at Sun Dec 21 22:06:47 2025 by rpki-client