This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: yYO/5FyuEb0wSfHlKwljcyjBkFfNZFwKGDqAMSU5kWE= Subject key identifier: 1C:44:CE:F0:98:10:1C:BF:99:DA:4A:00:EA:7F:0C:41:C4:17:15:CF Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 11C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 1199 Signing time: Sat 06 Dec 2025 16:43:37 +0000 Manifest this update: Sat 06 Dec 2025 16:43:37 +0000 Manifest next update: Sat 13 Dec 2025 16:43:37 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: GjPHefwLKnWs/38qh2v8s+qInJz16rsFPHG8GrKiZsk=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: BfQkKYmX6MeIpfh0HN7jI9hAwDBK1E/bNdrXupiROjk=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: DRyXCT+IZvVI03eU0XrQdHjg9ZW57MmLUtw9YMkQ7hc=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: wfm1VTy6LW5xxId5H8xuWlZG10UcCf+IbSwW9NUdgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4547 (0x11c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Dec 6 16:43:37 2025 GMT Not After : Dec 13 16:43:37 2025 GMT Subject: CN=69345d39-be26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:65:c3:ef:53:53:8b:c6:61:80:fc:43:1a: e1:d0:f8:7f:e5:e2:0d:53:5c:d1:f6:a4:35:bd:ac: f1:c3:e2:ed:a6:21:88:bb:22:aa:9e:d4:c3:41:5a: 96:fc:4a:6f:b6:e7:95:a3:7c:42:6b:19:5c:2d:9a: c8:18:c6:4a:bb:dd:34:7e:fe:b5:56:30:e1:37:59: a8:22:2d:44:ae:56:e5:4b:b8:2b:b4:ac:45:2c:fc: 95:46:a1:b2:d8:80:3e:d0:7f:c2:cf:2e:f6:38:e9: 6e:ac:46:55:56:17:33:b5:c9:f3:e7:2b:28:fc:f2: 60:d2:32:b9:37:2b:f9:20:9c:86:7c:d8:85:e7:a2: f8:60:3d:d8:a9:1e:7a:d4:b6:c8:76:f5:9b:02:be: 4d:00:72:3d:26:d2:df:7c:3a:0e:f3:22:11:01:dd: 5b:35:65:29:f6:e2:6d:56:0d:ff:ed:18:5d:47:4f: aa:1c:2e:95:4d:7f:f5:00:74:d2:a9:c6:51:20:8a: d8:66:2e:0e:d6:36:32:33:2e:19:96:32:d6:ca:90: d2:df:02:9b:43:fb:05:4d:c5:cf:0b:cd:90:67:05: 29:e5:a5:e5:0d:78:34:a9:d2:64:14:26:fd:54:c9: ed:cc:f0:b4:90:cb:53:59:29:07:32:27:3c:8e:42: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:CE:F0:98:10:1C:BF:99:DA:4A:00:EA:7F:0C:41:C4:17:15:CF X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a6:ae:c4:3e:57:d6:db:90:42:24:d0:cd:cd:ed:50:38:d1: 4f:1a:ab:02:8f:c4:45:e3:5e:c0:88:45:e1:7e:1e:c3:89:9f: 89:16:d4:fc:92:b8:6b:fb:f9:0a:a8:b2:e5:48:88:e2:ab:be: 43:4a:25:06:0e:4f:47:e3:de:c4:5b:56:36:61:9f:aa:ca:0f: 90:b3:86:1f:d8:0a:e4:ae:a5:41:8b:fe:11:aa:76:9b:4d:22: 93:74:5c:88:67:eb:bf:84:70:f8:44:9c:a5:4a:b7:b5:9f:a8: 98:4f:45:7e:d7:18:fe:de:ac:c1:20:39:ff:4f:94:0f:b6:5f: 65:84:42:f0:ab:99:43:60:11:15:0c:8a:8b:04:f4:ed:f3:b8: b9:17:5e:8c:7f:ee:13:70:b7:26:d9:a5:8f:64:34:86:c1:9f: e8:77:97:28:21:42:fc:68:88:c2:80:63:9b:9f:06:b1:4d:87: 46:38:72:74:29:31:6a:e4:36:92:5a:8e:63:51:c9:aa:1f:d7: 0b:7b:69:2a:63:e0:46:02:d3:ba:2a:7e:65:f2:90:87:41:33: 45:7f:8d:65:20:f0:96:fe:ec:1a:95:f6:d5:a6:54:0e:b5:83: 6d:bf:54:64:b3:4f:c2:27:f3:09:98:9d:31:80:ce:5b:de:21: 0b:9c:13:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUxMjA2MTY0MzM3WhcNMjUxMjEzMTY0MzM3WjAYMRYwFAYD VQQDEw02OTM0NWQzOS1iZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgplw+9TU4vGYYD8Qxrh0Ph/5eINU1zR9qQ1vazxw+LtpiGIuyKqntTDQVqW /EpvtueVo3xCaxlcLZrIGMZKu900fv61VjDhN1moIi1ErlblS7grtKxFLPyVRqGy 2IA+0H/Czy72OOlurEZVVhcztcnz5yso/PJg0jK5Nyv5IJyGfNiF56L4YD3YqR56 1LbIdvWbAr5NAHI9JtLffDoO8yIRAd1bNWUp9uJtVg3/7RhdR0+qHC6VTX/1AHTS qcZRIIrYZi4O1jYyMy4ZljLWypDS3wKbQ/sFTcXPC82QZwUp5aXlDXg0qdJkFCb9 VMntzPC0kMtTWSkHMic8jkLdfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxEzvCY EBy/mdpKAOp/DEHEFxXPMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVpq7EPlfW25BCJNDNze1QONFPGqsCj8RF417AiEXhfh7DiZ+JFtT8 krhr+/kKqLLlSIjiq75DSiUGDk9H497EW1Y2YZ+qyg+Qs4Yf2ArkrqVBi/4Rqnab TSKTdFyIZ+u/hHD4RJylSre1n6iYT0V+1xj+3qzBIDn/T5QPtl9lhELwq5lDYBEV DIqLBPTt87i5F16Mf+4TcLcm2aWPZDSGwZ/od5coIUL8aIjCgGObnwaxTYdGOHJ0 KTFq5DaSWo5jUcmqH9cLe2kqY+BGAtO6Kn5l8pCHQTNFf41lIPCW/uwalfbVplQO tYNtv1Rks0/CJ/MJmJ0xgM5b3iELnBO5 -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:12 2025 by rpki-client