This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: 1hrjudxAw1Nuzl2btZvSH8MHjiXk1Vj8klAFOZFUbvw= Subject key identifier: 26:DB:03:24:3D:5A:C2:A0:50:89:AD:24:AC:3F:D0:B8:88:8C:9A:92 Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: 2A Signing time: Fri 05 Dec 2025 05:30:13 +0000 Manifest this update: Fri 05 Dec 2025 05:30:13 +0000 Manifest next update: Fri 12 Dec 2025 05:30:13 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: IhhVjZg8pOm1rRU1oJTRWWIpKLg72ve1MvX3Fa3LbTw=) 2: B226671A93CF11F0AFB6CD40C4F9AE02.roa (hash: ngks6JND6Z6i0nLhplVqWNOwGOFboijRbjaCtOqBPMU=) 3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: apbntEW54Z7A4caHXTIqLm5PS8fFH3F9o/xC7IDPABM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Dec 5 05:30:13 2025 GMT Not After : Dec 12 05:30:13 2025 GMT Subject: CN=69326de5-315d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:0e:fa:60:bf:f0:a5:1e:72:4b:c7:f0:c7: d4:f5:e5:81:96:5a:6d:bd:7b:54:45:2d:22:2f:0d: d5:d9:82:70:da:4d:2b:9a:87:4e:c1:49:5a:c7:31: 38:83:1b:9e:cc:0a:63:07:9f:22:15:ee:5f:ac:e1: 38:34:07:4d:ad:d2:5f:eb:f1:0b:64:02:a4:9e:bf: 0c:77:2c:fa:2c:4a:92:84:bc:9e:f4:4c:15:0c:f6: 4f:49:c7:b9:39:1d:50:f6:a9:d7:ed:71:5c:b8:26: db:14:e8:2d:46:e6:38:4a:a6:29:8a:ce:36:8d:3d: 56:8b:a2:16:f1:7d:9b:d6:8d:77:a2:bf:ad:f9:2b: fa:8e:27:1b:cb:37:5e:c9:59:b4:21:dc:4b:30:6b: 45:fe:5c:47:c5:8e:bd:5f:ee:6f:7c:8d:66:30:37: 68:25:f9:3e:df:d2:e7:42:c4:68:32:21:7d:bc:f8: 74:57:1b:df:34:81:75:8f:39:8a:c5:07:97:36:cf: 58:87:66:e9:92:59:b1:ca:7c:c4:a0:a4:55:d3:11: 5e:ba:d4:ea:80:eb:ae:42:44:33:40:14:6f:a6:58: 89:92:aa:78:b6:3e:79:f3:44:28:7b:51:1b:61:28: db:b8:92:f0:6a:6c:5e:f7:ef:75:95:c3:21:e1:dc: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DB:03:24:3D:5A:C2:A0:50:89:AD:24:AC:3F:D0:B8:88:8C:9A:92 X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b0:22:dd:47:c7:0d:54:98:27:87:d3:fe:7a:ad:15:a9:1e: cd:ab:a7:50:df:50:37:fd:92:0b:12:2d:06:03:7c:cb:3a:b3: e5:37:f3:66:48:0a:e1:d5:73:8b:7c:52:e5:26:e1:0c:6f:09: 5f:d6:a3:41:05:f2:6a:77:ac:91:6c:cf:22:ec:36:ac:ca:f9: 2f:e7:0b:f4:74:fd:46:ea:0d:94:54:f3:b7:a3:a1:b3:7f:9e: 84:c8:51:2e:53:3c:0c:c6:f4:3a:ac:e6:e9:87:68:f6:6b:8d: c9:b0:63:a1:41:b4:13:37:9f:da:e1:3a:37:ce:9e:96:87:c9: 98:22:2d:3b:89:23:a7:99:b5:6f:58:51:6f:82:de:4a:4f:43: 02:a8:d2:22:22:bd:94:d1:12:2e:bb:7d:af:b3:08:43:76:7f: 37:76:a8:50:42:94:df:ac:3a:96:d6:67:4f:1d:96:04:63:77: 0d:b6:e0:a2:f6:cc:27:d2:30:b9:c0:67:71:67:25:13:93:06: 67:ba:59:47:59:b4:d5:9d:de:86:8b:af:7d:48:70:62:2e:d9: 3c:7b:7e:dd:92:51:96:a6:c0:82:ad:f2:7a:97:bf:8e:10:c1: ad:e7:45:36:4f:e9:91:5f:36:e1:73:9b:81:d7:5f:de:83:4f: 75:62:54:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoMThFOTI5N0ExRjFBMThDQjg3OUE3RTEyNEI1MTA3QzQ0 MDU3M0M2MzAeFw0yNTEyMDUwNTMwMTNaFw0yNTEyMTIwNTMwMTNaMBgxFjAUBgNV BAMTDTY5MzI2ZGU1LTMxNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsPA76YL/wpR5yS8fwx9T15YGWWm29e1RFLSIvDdXZgnDaTSuah07BSVrHMTiD G57MCmMHnyIV7l+s4Tg0B02t0l/r8QtkAqSevwx3LPosSpKEvJ70TBUM9k9Jx7k5 HVD2qdftcVy4JtsU6C1G5jhKpimKzjaNPVaLohbxfZvWjXeiv635K/qOJxvLN17J WbQh3Eswa0X+XEfFjr1f7m98jWYwN2gl+T7f0udCxGgyIX28+HRXG980gXWPOYrF B5c2z1iHZumSWbHKfMSgpFXTEV661OqA665CRDNAFG+mWImSqni2PnnzRCh7URth KNu4kvBqbF7373WVwyHh3ATlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJtsDJD1a wqBQia0krD/QuIiMmpIwHwYDVR0jBBgwFoAUGOkpeh8aGMuHmn4SS1EHxEBXPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1LzZCNjY2OTBBOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR09rcGVoOGFHTXVIbW40U1MxRUh4RUJYUEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1LzZCNjY2OTBBOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011 SG1uNFNTMUVIeEVCWFBHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqwIt1Hxw1UmCeH0/56rRWpHs2rp1DfUDf9kgsSLQYDfMs6s+U382ZI CuHVc4t8UuUm4QxvCV/Wo0EF8mp3rJFszyLsNqzK+S/nC/R0/UbqDZRU87ejobN/ noTIUS5TPAzG9Dqs5umHaPZrjcmwY6FBtBM3n9rhOjfOnpaHyZgiLTuJI6eZtW9Y UW+C3kpPQwKo0iIivZTREi67fa+zCEN2fzd2qFBClN+sOpbWZ08dlgRjdw224KL2 zCfSMLnAZ3FnJROTBme6WUdZtNWd3oaLr31IcGIu2Tx7ft2SUZamwIKt8nqXv44Q wa3nRTZP6ZFfNuFzm4HXX96DT3ViVPM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:15 2025 by rpki-client