This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: pSOr872ACc46RlaiwJEF1s2fP+MiljnIctmiAvR/Pqw= Subject key identifier: C4:E1:45:DC:99:07:BE:66:7F:4A:76:CA:50:E8:D0:3D:FF:59:82:4A Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 02EB Signing time: Thu 04 Dec 2025 23:39:14 +0000 Manifest this update: Thu 04 Dec 2025 23:39:14 +0000 Manifest next update: Thu 11 Dec 2025 23:39:14 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: MIbYpFroutHZ6t5lyvr0PQuXTay2h/4GSML3mCD9XPU=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: vDQoZAtho3Zfc3fEMkNHvcrZRkN5p0mTf80o1+Yo2ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Dec 4 23:39:14 2025 GMT Not After : Dec 11 23:39:14 2025 GMT Subject: CN=69321ba2-ae7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:31:da:0f:ae:2c:c9:8b:cf:c1:3a:76:8f: ba:fa:e0:c9:ef:4d:83:7c:f1:60:9a:1c:a9:ce:5d: de:1f:98:5c:ca:83:47:bb:8a:14:52:6f:70:2e:1a: 30:58:b8:75:bd:07:8d:1e:27:2f:46:6b:ce:af:eb: 06:03:fb:c8:01:86:7a:a1:68:06:39:c2:5c:13:6c: 28:52:61:63:e7:ac:0a:79:6c:6f:cf:00:a3:5e:66: b9:32:32:58:0f:ed:bb:64:35:98:25:13:cb:6f:b6: c1:ac:36:f5:a8:48:57:03:e6:ff:40:40:88:98:c5: 95:86:9d:34:fb:83:ea:4b:77:3c:5e:15:d1:97:6f: 96:f2:a9:f3:88:84:75:e6:a2:64:8d:20:28:12:96: 3e:ab:40:8e:8e:5e:49:b6:5b:87:75:f8:01:47:79: 19:3c:ab:b3:00:8e:70:fa:66:3a:75:37:2b:43:02: 57:ba:02:d8:43:42:5a:e3:94:21:1a:75:3a:1f:e1: c3:f3:94:50:f9:60:1f:0b:fa:54:79:70:10:da:d7: 26:ea:09:ea:5d:a7:c9:90:42:31:c4:dc:4a:15:82: ea:5a:c2:e2:e5:0f:ea:dd:a8:04:94:95:4e:37:52: bf:fe:e6:11:c1:27:dc:f9:fe:2e:fb:03:6a:f1:27: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:45:DC:99:07:BE:66:7F:4A:76:CA:50:E8:D0:3D:FF:59:82:4A X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:3f:76:d1:08:07:3a:c8:2a:e5:bb:66:cf:e8:80:f6:3d:55: 0c:d7:40:b4:47:ea:c2:ef:41:f5:5c:74:5a:b7:10:4e:c5:b7: 2e:29:9c:82:e6:09:4b:a9:fd:7f:e5:f8:24:25:a0:68:d5:2b: a5:0d:d8:fd:91:36:b1:5c:9a:72:da:35:3f:80:36:8d:6e:5a: ba:40:b0:bb:c9:d5:41:af:96:b9:3b:cc:28:98:bc:4e:cb:a1: f7:25:47:38:52:0f:e8:d5:79:dc:2a:de:49:0c:90:ae:cd:04: 04:e4:13:e5:01:6c:b4:f7:2d:00:4e:a3:55:d8:b0:3e:85:69: 14:ad:43:41:45:32:23:45:bb:14:35:aa:f9:bb:74:a9:e7:d3: ad:df:08:55:e4:36:2a:d5:c2:e6:90:da:99:20:00:14:3b:b2: 41:b6:04:72:cd:f0:ab:30:66:77:f3:e5:2f:ec:15:35:0b:39: 78:4f:de:6f:11:db:be:e6:0b:ad:d9:21:80:1f:f2:08:94:04: 89:bb:bb:7a:67:33:01:23:41:39:60:b0:56:45:64:f1:c3:d8: ca:a6:0f:8c:a3:55:73:a5:6e:25:aa:72:2c:87:e9:52:73:a9: cf:eb:5f:a7:61:e9:43:20:fa:75:46:2a:b6:b8:e7:fd:96:f1: cf:cb:a7:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUxMjA0MjMzOTE0WhcNMjUxMjExMjMzOTE0WjAYMRYwFAYD VQQDEw02OTMyMWJhMi1hZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgUx2g+uLMmLz8E6do+6+uDJ702DfPFgmhypzl3eH5hcyoNHu4oUUm9wLhow WLh1vQeNHicvRmvOr+sGA/vIAYZ6oWgGOcJcE2woUmFj56wKeWxvzwCjXma5MjJY D+27ZDWYJRPLb7bBrDb1qEhXA+b/QECImMWVhp00+4PqS3c8XhXRl2+W8qnziIR1 5qJkjSAoEpY+q0COjl5JtluHdfgBR3kZPKuzAI5w+mY6dTcrQwJXugLYQ0Ja45Qh GnU6H+HD85RQ+WAfC/pUeXAQ2tcm6gnqXafJkEIxxNxKFYLqWsLi5Q/q3agElJVO N1K//uYRwSfc+f4u+wNq8SeCaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMThRdyZ B75mf0p2ylDo0D3/WYJKMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4P3bRCAc6yCrlu2bP6ID2PVUM10C0R+rC70H1XHRatxBOxbcuKZyC 5glLqf1/5fgkJaBo1SulDdj9kTaxXJpy2jU/gDaNblq6QLC7ydVBr5a5O8womLxO y6H3JUc4Ug/o1XncKt5JDJCuzQQE5BPlAWy09y0ATqNV2LA+hWkUrUNBRTIjRbsU Nar5u3Sp59Ot3whV5DYq1cLmkNqZIAAUO7JBtgRyzfCrMGZ38+Uv7BU1Czl4T95v Edu+5gut2SGAH/IIlASJu7t6ZzMBI0E5YLBWRWTxw9jKpg+Mo1VzpW4lqnIsh+lS c6nP61+nYelDIPp1Riq2uOf9lvHPy6fr -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:39 2025 by rpki-client