This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: pWMyzyywlmYRhVLyLlAXwKcSCkRf+uD1z4AYdhhjlQY= Subject key identifier: F0:8C:D6:98:B0:F1:3D:39:C8:94:9D:C2:B1:60:5E:4F:1F:E7:BD:6F Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 0414 Signing time: Sat 06 Dec 2025 23:03:32 +0000 Manifest this update: Sat 06 Dec 2025 23:03:31 +0000 Manifest next update: Sat 13 Dec 2025 23:03:31 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: CRQ4EfngrIoGZeMT/befpAl1FH5IxNQgdt8Y0iT7pLI=) 2: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: oAqMSF81/AVYaU8nGd+cBMsrnw20XyD/T/zdIoEB4NE=) 3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: uVo2rPhsS7W1KbzxX340wlAGRoyErXUypsSK5B5R8HQ=) 4: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: CZf1VlKoEaqshjSK2lnVUILrCRzYZXt31OkqsPRaGqc=) 5: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: S2zfaKcticTwAxwJXdMxgXbdbp4SN51y6QSWO83OIuc=) 6: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: 7DU3GXxB2biRDfFfxqVKJQEvwzXZf1dP2MF5wRULxe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Dec 6 23:03:31 2025 GMT Not After : Dec 13 23:03:31 2025 GMT Subject: CN=6934b644-0524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:2d:3b:68:e7:c4:8e:2b:8e:07:fb:29:ff: a8:ba:89:77:6a:14:bc:6c:28:cf:fb:58:f1:a2:ee: 0b:47:15:8d:11:ee:3d:db:05:6c:60:03:26:cb:a3: 54:c3:61:52:84:4f:7e:e0:1c:4f:6e:be:14:13:a0: af:cf:f9:64:fc:fb:ea:ab:a2:c6:93:9b:dd:3d:0f: 1a:42:1f:e6:02:f7:03:5b:94:e6:33:d9:82:44:23: bd:27:47:88:08:24:1e:89:56:02:53:be:fe:94:28: 99:9c:0c:c9:c7:c3:01:ff:da:46:20:65:43:38:81: 1b:4a:78:5c:46:ea:ee:72:67:ae:79:7d:fa:0d:75: b0:27:25:87:d1:17:44:8c:a8:72:0d:01:f8:8f:4b: b4:05:f9:03:f9:5b:e5:cc:27:dc:0b:f1:87:92:9c: 7c:28:30:45:17:50:a1:7e:dc:95:8b:ac:12:c8:98: 11:61:5b:36:bf:83:58:ed:90:99:f0:df:d2:7a:54: 51:05:99:f9:b5:bc:37:d7:c4:71:d8:47:e0:c3:ee: 14:1e:0d:5c:7e:bb:c5:cd:24:2d:39:2f:2d:94:59: 12:a5:63:96:93:f1:bd:da:58:50:4f:80:5c:3c:1c: 10:ac:79:d7:96:a1:77:39:5f:2f:7d:35:40:d6:97: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8C:D6:98:B0:F1:3D:39:C8:94:9D:C2:B1:60:5E:4F:1F:E7:BD:6F X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7a:e2:f4:4c:7b:c2:f8:65:7b:c7:d6:a9:75:7e:f2:9c:00: 7e:79:c4:21:a1:9f:3b:ef:38:df:e3:07:81:41:8d:01:02:ff: 09:12:da:a0:2f:ea:fb:2a:f2:fe:5d:22:49:1c:4f:4e:7d:6f: 7b:6f:4d:3c:59:e5:e9:14:50:fc:2d:be:06:69:91:fa:55:19: 26:dd:82:37:84:cb:3c:5f:8f:34:59:a2:cd:13:f3:44:ea:34: 14:19:71:69:38:51:11:bf:e1:d9:bc:19:39:c2:0b:ed:5b:67: 06:cf:56:fd:fe:c5:cb:39:ab:e0:80:55:d7:fa:7c:e4:d0:d4: 01:b9:8a:e3:5f:d0:19:fb:98:a7:e1:d9:ea:9c:49:8d:77:36: 57:d7:d4:cd:03:00:38:cc:4d:c3:d1:44:5c:85:c5:f2:05:2e: 27:6e:48:a1:bc:32:82:81:49:e5:da:60:c2:22:ae:dc:8e:7f: 20:e4:18:33:3c:bb:84:9c:e0:20:a6:9f:12:70:30:d8:e7:72: 57:ce:2b:0e:74:7c:85:21:17:d4:62:d2:d8:82:6b:0e:3a:97: 52:02:9c:db:a1:55:ec:10:44:28:40:99:ed:95:bb:d6:92:4a: e5:f8:b3:b2:27:fe:0b:a1:f6:06:95:fa:21:af:e8:a9:f6:63: 14:90:b6:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUxMjA2MjMwMzMxWhcNMjUxMjEzMjMwMzMxWjAYMRYwFAYD VQQDEw02OTM0YjY0NC0wNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukktO2jnxI4rjgf7Kf+ouol3ahS8bCjP+1jxou4LRxWNEe492wVsYAMmy6NU w2FShE9+4BxPbr4UE6Cvz/lk/Pvqq6LGk5vdPQ8aQh/mAvcDW5TmM9mCRCO9J0eI CCQeiVYCU77+lCiZnAzJx8MB/9pGIGVDOIEbSnhcRurucmeueX36DXWwJyWH0RdE jKhyDQH4j0u0BfkD+VvlzCfcC/GHkpx8KDBFF1ChftyVi6wSyJgRYVs2v4NY7ZCZ 8N/SelRRBZn5tbw318Rx2Efgw+4UHg1cfrvFzSQtOS8tlFkSpWOWk/G92lhQT4Bc PBwQrHnXlqF3OV8vfTVA1pcYywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCM1piw 8T05yJSdwrFgXk8f571vMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBneuL0THvC+GV7x9apdX7ynAB+ecQhoZ877zjf4weBQY0BAv8JEtqg L+r7KvL+XSJJHE9OfW97b008WeXpFFD8Lb4GaZH6VRkm3YI3hMs8X480WaLNE/NE 6jQUGXFpOFERv+HZvBk5wgvtW2cGz1b9/sXLOavggFXX+nzk0NQBuYrjX9AZ+5in 4dnqnEmNdzZX19TNAwA4zE3D0URchcXyBS4nbkihvDKCgUnl2mDCIq7cjn8g5Bgz PLuEnOAgpp8ScDDY53JXzisOdHyFIRfUYtLYgmsOOpdSApzboVXsEEQoQJntlbvW kkrl+LOyJ/4LofYGlfohr+ip9mMUkLYw -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:19 2025 by rpki-client