This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json) Hash identifier: zHq1c2BHbvCo+NVWMLqkft5ABDZfA1WurbQ5NTu9XtY= Subject key identifier: 7A:EF:57:01:32:A1:49:FA:CE:91:84:33:F7:15:49:7B:5B:49:32:6D Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft Manifest number: 1C5C Signing time: Sat 06 Dec 2025 15:51:39 +0000 Manifest this update: Sat 06 Dec 2025 15:51:39 +0000 Manifest next update: Sat 13 Dec 2025 15:51:39 +0000 Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: KUde/7QeNUwhoSCe0a/lP5GeG6bws+n+f7SDiI1i4uA=) 2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: 87Eagj9nbEvxROvw6iIl3FH0KdIVxp+aZzvllNFI0J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7271 (0x1c67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Dec 6 15:51:39 2025 GMT Not After : Dec 13 15:51:39 2025 GMT Subject: CN=6934510b-5217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:ee:04:0b:48:de:7e:64:c6:4d:0d:36:60: 36:6e:76:56:b7:e1:41:2c:f6:48:79:73:3c:f1:e1: a7:37:50:60:d8:07:e2:3d:d7:96:2f:c7:d8:fe:a8: 22:ba:6a:0c:6e:cb:1d:83:a7:e9:f4:d7:1e:b2:84: d3:ff:e0:9f:61:f3:81:84:b5:eb:cc:30:9a:9e:4f: a1:52:54:7e:f4:c5:a7:d4:fd:ba:12:0b:9a:3b:15: 45:cf:de:44:c5:3e:2f:f7:8b:dc:35:5d:97:df:ec: dd:a3:60:d4:4a:ab:61:77:0b:cd:be:80:cb:b0:36: 75:f5:3a:19:71:d0:3a:fe:5f:15:dd:c3:6a:38:fa: 63:84:e8:1c:1b:d0:27:cd:cc:db:8f:0c:f2:87:1c: 3a:9a:96:f6:67:ad:4c:2d:40:83:7d:f6:16:8c:e6: ef:cd:fb:00:63:7f:e7:c9:32:42:03:58:f0:7d:7a: ee:7c:1c:95:5c:32:97:f6:fa:7c:d9:0b:7a:f7:a7: c4:13:83:18:64:52:40:e5:4f:e0:11:5d:57:63:a2: e3:80:14:64:9f:64:2b:36:33:92:8d:cd:19:65:fd: 7d:e0:9f:78:70:c9:30:47:8e:b7:66:9b:24:76:ec: 17:dc:58:b8:87:e7:24:ec:7c:35:b3:85:c9:52:21: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EF:57:01:32:A1:49:FA:CE:91:84:33:F7:15:49:7B:5B:49:32:6D X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:81:87:0e:8c:71:8d:82:a6:27:1d:a7:ac:f9:80:82:4e:b0: cd:6a:66:1a:9c:cb:80:3a:db:7e:82:32:18:c6:bd:c6:66:54: c7:61:67:f6:58:41:d7:ab:d5:6d:a2:ef:aa:0e:3a:5d:c2:9b: 7c:3c:ab:dd:b7:47:1f:c5:aa:84:f7:76:06:ea:80:fe:68:88: ce:c3:5f:49:4d:15:a2:68:93:ad:38:bc:b5:ff:c8:f7:94:d8: 9a:9d:40:d9:ed:a3:80:29:e1:70:55:c8:8c:1d:d6:d5:5b:42: d4:ce:4a:eb:87:96:e7:1b:29:b0:42:e0:19:09:5b:09:99:6e: 2b:ea:46:4d:b1:2d:74:31:44:3c:78:99:af:a3:50:d0:cf:b0: e8:28:8f:5d:23:1b:c0:28:03:81:c1:8c:95:e1:36:c8:ca:da: 32:5b:86:ca:d3:af:87:e1:76:19:40:16:5f:9f:dd:18:f2:fa: b6:f7:d3:e4:80:cb:e8:bb:ae:f3:c3:6e:4b:e8:60:4a:84:75: 2d:58:79:0e:8d:7e:9f:82:78:39:4e:3c:98:22:26:95:89:b2: f8:17:39:dd:06:00:48:d2:cf:57:c3:4e:cd:ff:59:89:b2:c8: 34:3c:a8:e5:d9:fd:5a:30:6b:33:3f:c1:3e:69:51:52:51:17: 8e:6b:0c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjUxMjA2MTU1MTM5WhcNMjUxMjEzMTU1MTM5WjAYMRYwFAYD VQQDEw02OTM0NTEwYi01MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMvuBAtI3n5kxk0NNmA2bnZWt+FBLPZIeXM88eGnN1Bg2AfiPdeWL8fY/qgi umoMbssdg6fp9NcesoTT/+CfYfOBhLXrzDCank+hUlR+9MWn1P26EguaOxVFz95E xT4v94vcNV2X3+zdo2DUSqthdwvNvoDLsDZ19ToZcdA6/l8V3cNqOPpjhOgcG9An zczbjwzyhxw6mpb2Z61MLUCDffYWjObvzfsAY3/nyTJCA1jwfXrufByVXDKX9vp8 2Qt696fEE4MYZFJA5U/gEV1XY6LjgBRkn2QrNjOSjc0ZZf194J94cMkwR463Zpsk duwX3Fi4h+ck7Hw1s4XJUiFcjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrvVwEy oUn6zpGEM/cVSXtbSTJtMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq d2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMgYcOjHGNgqYnHaes+YCCTrDNamYanMuAOtt+gjIYxr3GZlTHYWf2 WEHXq9Vtou+qDjpdwpt8PKvdt0cfxaqE93YG6oD+aIjOw19JTRWiaJOtOLy1/8j3 lNianUDZ7aOAKeFwVciMHdbVW0LUzkrrh5bnGymwQuAZCVsJmW4r6kZNsS10MUQ8 eJmvo1DQz7DoKI9dIxvAKAOBwYyV4TbIytoyW4bK06+H4XYZQBZfn90Y8vq299Pk gMvou67zw25L6GBKhHUtWHkOjX6fgng5TjyYIiaVibL4FzndBgBI0s9Xw07N/1mJ ssg0PKjl2f1aMGszP8E+aVFSUReOawyE -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:20 2025 by rpki-client