This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: 9KP4agBZSzkRQjzuYN4jvQaeHC0rsmSspksjPo3NKPo= Subject key identifier: 6A:5F:91:8C:70:C9:E4:59:8F:84:C9:84:D2:84:FB:AD:42:0F:66:FE Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 3D Signing time: Fri 05 Dec 2025 05:19:12 +0000 Manifest this update: Fri 05 Dec 2025 05:19:12 +0000 Manifest next update: Fri 12 Dec 2025 05:19:12 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: 3+SLOC2PmMV1vL7yp26wmkQlVcYwKT5fgPZb8riLg1Q=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Dec 5 05:19:12 2025 GMT Not After : Dec 12 05:19:12 2025 GMT Subject: CN=69326b50-5e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:2b:02:a6:71:5d:1e:2b:f9:8e:56:62:77: 43:47:c7:1f:c8:df:2d:24:f5:74:dc:32:21:11:46: e6:09:24:06:e8:6a:ea:a9:dc:12:b8:41:25:d6:78: 4f:db:2d:fe:26:6b:27:ab:e1:ab:27:21:30:48:46: 54:b4:82:af:3a:95:59:f0:a9:78:76:23:85:e4:4c: ed:ca:c0:7e:27:57:67:4b:36:84:dc:48:2b:7b:2d: 9c:ac:7c:e9:cb:11:2a:23:49:fc:b4:22:a5:8f:f2: 16:25:36:ca:83:96:4c:99:fe:78:71:47:09:07:b5: 6e:43:ef:a6:7a:d5:cc:12:05:ca:27:dd:20:3d:c5: df:9e:a1:a5:af:90:53:02:a2:7a:cf:a9:aa:43:28: c8:00:ed:26:27:aa:d4:12:6a:d8:cf:3b:8f:7d:fc: 4a:64:f8:ec:a6:ac:e9:85:cf:37:22:c2:0d:7e:53: e2:4a:9f:61:ce:f7:a4:ba:c0:5b:da:89:67:00:0d: 84:98:9a:d0:b1:e3:80:a0:59:f7:92:23:f4:66:59: 8f:df:34:66:ba:63:66:46:2a:11:32:33:7c:11:0a: a5:c9:80:e9:71:78:d9:00:0c:52:18:22:61:da:3d: a2:c9:df:19:f2:79:53:79:45:c7:e1:27:a6:8c:0a: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5F:91:8C:70:C9:E4:59:8F:84:C9:84:D2:84:FB:AD:42:0F:66:FE X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:60:da:82:b8:f1:be:7b:60:4d:0b:32:5c:3c:f8:dc:09:43: 34:df:a9:ef:6f:50:f9:43:61:a3:c2:cc:15:ae:eb:56:72:ce: 6b:88:ac:d7:1a:fd:72:0f:81:d7:5b:08:6a:ea:e3:ce:1c:65: 3d:ec:b0:0c:56:ca:6c:fe:06:c4:77:4d:b5:8d:a1:39:c7:55: b2:86:9b:6a:c3:52:b6:13:7a:44:28:9f:2a:9e:1b:f4:58:4a: 87:d8:3a:5e:b5:46:7b:99:67:bf:60:0f:34:b0:96:a3:7a:83: 53:4c:12:88:71:96:02:eb:53:06:55:32:16:81:07:3a:7f:e2: c5:93:4b:34:92:80:33:58:cf:e4:39:b1:cf:8c:c4:25:5e:0b: 83:47:e1:8a:53:1c:ac:0d:38:fd:fc:53:15:00:c4:db:a2:95: dc:69:8c:f9:7d:9c:c5:ae:d7:04:69:4f:4b:51:43:b6:39:13: 23:11:7f:29:81:f4:b8:3e:4f:05:1a:73:60:1b:a2:52:2d:3e: 5f:f3:b6:e3:35:e9:80:ee:2a:95:3d:3f:26:6d:23:a1:69:dd: c7:9f:8a:2f:4f:e2:83:45:25:32:2a:e4:3c:d3:86:36:65:a2: c2:2f:53:4c:9f:e9:57:cf:46:68:d8:0f:db:8d:94:b7:1c:79: dc:1e:50:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNTEyMDUwNTE5MTJaFw0yNTEyMTIwNTE5MTJaMBgxFjAUBgNV BAMTDTY5MzI2YjUwLTVlNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHQisCpnFdHiv5jlZid0NHxx/I3y0k9XTcMiERRuYJJAboauqp3BK4QSXWeE/b Lf4mayer4asnITBIRlS0gq86lVnwqXh2I4XkTO3KwH4nV2dLNoTcSCt7LZysfOnL ESojSfy0IqWP8hYlNsqDlkyZ/nhxRwkHtW5D76Z61cwSBcon3SA9xd+eoaWvkFMC onrPqapDKMgA7SYnqtQSatjPO499/Epk+OymrOmFzzciwg1+U+JKn2HO96S6wFva iWcADYSYmtCx44CgWfeSI/RmWY/fNGa6Y2ZGKhEyM3wRCqXJgOlxeNkADFIYImHa PaLJ3xnyeVN5RcfhJ6aMCnmjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUal+RjHDJ 5FmPhMmE0oT7rUIPZv4wHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpg2oK48b57YE0LMlw8+NwJQzTfqe9vUPlDYaPCzBWu61ZyzmuIrNca /XIPgddbCGrq484cZT3ssAxWymz+BsR3TbWNoTnHVbKGm2rDUrYTekQonyqeG/RY SofYOl61RnuZZ79gDzSwlqN6g1NMEohxlgLrUwZVMhaBBzp/4sWTSzSSgDNYz+Q5 sc+MxCVeC4NH4YpTHKwNOP38UxUAxNuildxpjPl9nMWu1wRpT0tRQ7Y5EyMRfymB 9Lg+TwUac2AbolItPl/ztuM16YDuKpU9PyZtI6Fp3cefii9P4oNFJTIq5DzThjZl osIvU0yf6VfPRmjYD9uNlLccedweUOg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:13 2025 by rpki-client