This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: B3ZpT2eVrSGhT/lyDwGpnqlnZCx6E1q8b7ivVrg/W4M= Subject key identifier: 04:B4:55:2E:52:E4:29:D0:F1:14:9E:EB:E3:D5:DA:20:C7:5A:2A:96 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A8F Signing time: Sat 06 Dec 2025 18:49:40 +0000 Manifest this update: Sat 06 Dec 2025 18:49:39 +0000 Manifest next update: Sat 13 Dec 2025 18:49:39 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: 1e2ljukM4WxRkVKF7ASBIKx5XRDjo633UIQ7UUtqcu0=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2712 (0xa98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Dec 6 18:49:39 2025 GMT Not After : Dec 13 18:49:39 2025 GMT Subject: CN=69347ac4-1e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:b5:6d:8f:d6:2c:de:ee:39:6f:bf:1e:70: f6:f2:99:90:e9:af:68:32:5b:1f:30:70:98:82:bd: 28:ad:e0:41:01:87:26:14:36:63:cb:5f:31:a3:67: 57:6e:a8:42:2d:74:ed:9b:e2:36:34:64:13:bb:fc: 25:41:0d:df:7d:43:77:64:bd:1f:fc:e6:36:a9:c8: c6:04:24:4c:4f:bd:53:35:1e:47:96:2c:37:29:6d: f8:74:5e:81:bf:f1:d2:37:19:b2:f7:ed:08:c4:d2: 81:a9:f0:a4:6c:14:bc:61:19:1a:ce:3f:6f:53:a4: 31:fe:68:79:ad:43:bc:de:3b:6d:74:21:31:33:fa: db:1b:88:3f:b7:ae:e0:e9:b1:1e:04:50:24:4f:f1: 5a:24:9d:20:0c:9d:05:83:19:c2:58:4c:2b:f9:b4: bc:5b:04:f8:03:1e:a9:c4:28:21:9b:8a:41:e3:a7: e2:e1:2d:96:60:86:0d:ac:9e:7e:b9:33:66:0a:6d: 64:24:7e:07:fe:d8:31:fc:af:bc:c4:60:08:20:01: 77:24:ed:f3:3a:3f:8a:5a:d4:05:b1:cd:c2:88:1e: 1c:b5:42:56:c4:cc:ab:77:61:97:cc:68:60:e6:8f: 9f:e8:50:14:20:c1:c1:9a:1f:54:94:63:54:eb:5c: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B4:55:2E:52:E4:29:D0:F1:14:9E:EB:E3:D5:DA:20:C7:5A:2A:96 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c5:15:bb:cb:8f:e6:55:68:8e:f7:95:d4:f8:7e:09:99:c1: 30:3c:68:55:98:ef:d2:c2:2b:7d:df:b1:fb:0f:c6:3a:6e:1c: 5e:52:43:02:c3:39:d4:2e:3e:d9:10:05:91:a3:e8:ff:be:40: f4:3c:d6:df:51:d1:36:2a:db:b8:8d:22:40:31:b1:78:21:82: c6:3e:4b:a7:66:85:ce:7e:69:7d:68:a1:c6:57:b3:74:38:32: 2f:a9:55:e8:23:e3:5b:f2:89:de:ab:9f:e8:ee:17:85:83:6c: 61:70:46:d7:bb:08:9e:90:24:02:67:01:e6:40:96:90:cb:3d: e6:71:00:50:08:8e:33:7e:31:2e:aa:50:d0:63:75:dc:cd:60: 07:52:fe:42:f2:69:c1:fa:1f:c3:7e:f5:51:3e:cb:69:d5:3a: 34:c4:fa:87:25:1f:e8:03:4d:33:f6:45:00:21:99:71:07:07: 89:fd:9d:e9:85:9e:6b:02:1b:b4:37:60:6d:5b:09:0e:4e:1d: c1:08:a9:2d:1e:e3:d0:41:b2:a0:a3:e7:af:98:3f:db:93:a7: 65:fa:6b:f4:36:0d:c2:2a:81:be:e1:05:08:c0:30:39:23:d2: e6:c4:13:8e:14:83:3f:f9:2a:86:9c:d4:d6:1d:b0:27:4c:2b: be:28:09:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUxMjA2MTg0OTM5WhcNMjUxMjEzMTg0OTM5WjAYMRYwFAYD VQQDEw02OTM0N2FjNC0xZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/21bY/WLN7uOW+/HnD28pmQ6a9oMlsfMHCYgr0oreBBAYcmFDZjy18xo2dX bqhCLXTtm+I2NGQTu/wlQQ3ffUN3ZL0f/OY2qcjGBCRMT71TNR5Hliw3KW34dF6B v/HSNxmy9+0IxNKBqfCkbBS8YRkazj9vU6Qx/mh5rUO83jttdCExM/rbG4g/t67g 6bEeBFAkT/FaJJ0gDJ0FgxnCWEwr+bS8WwT4Ax6pxCghm4pB46fi4S2WYIYNrJ5+ uTNmCm1kJH4H/tgx/K+8xGAIIAF3JO3zOj+KWtQFsc3CiB4ctUJWxMyrd2GXzGhg 5o+f6FAUIMHBmh9UlGNU61wnJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAS0VS5S 5CnQ8RSe6+PV2iDHWiqWMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSxRW7y4/mVWiO95XU+H4JmcEwPGhVmO/Swit937H7D8Y6bhxeUkMC wznULj7ZEAWRo+j/vkD0PNbfUdE2Ktu4jSJAMbF4IYLGPkunZoXOfml9aKHGV7N0 ODIvqVXoI+Nb8oneq5/o7heFg2xhcEbXuwiekCQCZwHmQJaQyz3mcQBQCI4zfjEu qlDQY3XczWAHUv5C8mnB+h/DfvVRPstp1To0xPqHJR/oA00z9kUAIZlxBweJ/Z3p hZ5rAhu0N2BtWwkOTh3BCKktHuPQQbKgo+evmD/bk6dl+mv0Ng3CKoG+4QUIwDA5 I9LmxBOOFIM/+SqGnNTWHbAnTCu+KAk2 -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:04 2025 by rpki-client