This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: ynPHUIvVwJI0zvZu8+iYiE0m9Dvo2pxMMIoc2zHNqnE= Subject key identifier: 5F:76:DB:39:3D:10:14:16:16:89:03:00:49:BE:F2:03:73:8B:ED:3D Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 01A7 Signing time: Fri 05 Dec 2025 01:34:00 +0000 Manifest this update: Fri 05 Dec 2025 01:33:59 +0000 Manifest next update: Fri 12 Dec 2025 01:33:59 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: W5MTy7Do9HWl/aorKg1P5bJR0EoXmNDtUF2a+BPOiyg=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: 2nukhqdNU6Euo+43iQiPgLSUJQocXAJN3vnaW4r7bwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Dec 5 01:33:59 2025 GMT Not After : Dec 12 01:33:59 2025 GMT Subject: CN=69323687-2c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:82:81:1d:5a:51:93:17:b6:82:71:83:b1: f9:3b:32:a8:95:ac:ee:27:bc:6c:26:74:e3:df:d4: c1:8f:3a:f0:c4:2e:d0:11:2e:8c:90:ef:a5:62:ca: 2e:bb:b4:42:cc:de:f8:f1:4b:76:47:d7:16:5e:30: 0d:e4:ff:fb:33:3c:e1:a2:ce:82:b3:45:4b:08:e9: 00:84:2b:9f:5c:75:85:1d:23:c3:47:31:df:29:16: 5c:82:b9:83:67:bb:60:b0:d7:89:3f:71:17:bb:a1: 5f:1f:71:df:41:b4:10:67:37:f4:22:c5:40:9d:04: ce:bd:0c:af:9d:ff:47:a7:98:27:48:c6:22:4a:df: 99:7e:11:f4:18:10:0a:38:51:df:50:00:a7:f2:40: 52:54:66:9d:be:93:c0:11:aa:15:7b:0a:55:fe:91: 29:e8:2f:d0:b1:18:a0:86:71:2a:67:8f:b8:9d:b4: 80:30:be:05:eb:a8:1d:13:e3:64:45:a7:1b:1f:8d: d0:65:33:3d:65:7b:50:5b:7d:3f:e0:fd:0e:a2:5d: 4c:66:f0:1f:4f:11:69:97:2d:e4:4a:ad:b3:00:fb: 63:28:90:fd:14:73:cc:a2:21:f6:ac:28:3e:33:5f: 27:72:0a:84:80:c9:6b:f2:47:8d:b7:aa:b6:6a:31: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:DB:39:3D:10:14:16:16:89:03:00:49:BE:F2:03:73:8B:ED:3D X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:31:14:e6:b4:01:27:b0:23:fc:ad:97:48:f3:b1:2f:da:c2: 25:bc:a1:07:b8:23:e0:6e:35:e7:35:6e:e2:1a:6f:5e:8a:a6: 9b:9e:91:80:7c:67:cc:89:1b:c5:b3:fd:ec:24:a0:b2:1d:5f: 7f:6a:a9:99:34:5a:d8:5b:d0:13:6c:44:1e:84:9b:f6:b1:11: cb:10:82:1e:be:c1:60:03:92:f3:cf:24:f0:09:7d:ea:60:0a: 07:71:79:bd:1e:23:3f:8f:e5:ab:bb:a8:f1:8d:64:98:8a:92: ee:fe:0e:74:c1:f4:fc:19:b8:4c:4f:f4:9f:11:b9:6a:e1:e7: 72:5d:54:4c:21:74:f6:ea:12:ac:60:7e:c2:4d:21:4e:bb:53: 38:8e:a7:12:da:b6:5c:c4:90:78:9e:bf:c0:79:48:b6:f9:b9: 82:a8:12:d6:2e:1b:c6:15:65:06:6b:d8:0c:3c:9a:12:4c:98: ba:fb:0d:f9:12:c7:24:e6:4b:b0:59:ac:ec:d6:ad:dc:af:97: 4c:76:fd:f8:25:f5:39:94:25:1b:7f:44:1f:04:47:ed:f3:14: 78:99:d6:18:f4:06:7f:db:34:67:37:87:72:fb:93:88:ce:31: 4b:27:7f:8a:ab:b9:19:69:86:78:0e:a6:c0:a2:d6:35:b7:96: 51:40:f0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjUxMjA1MDEzMzU5WhcNMjUxMjEyMDEzMzU5WjAYMRYwFAYD VQQDEw02OTMyMzY4Ny0yYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx06CgR1aUZMXtoJxg7H5OzKolazuJ7xsJnTj39TBjzrwxC7QES6MkO+lYsou u7RCzN748Ut2R9cWXjAN5P/7Mzzhos6Cs0VLCOkAhCufXHWFHSPDRzHfKRZcgrmD Z7tgsNeJP3EXu6FfH3HfQbQQZzf0IsVAnQTOvQyvnf9Hp5gnSMYiSt+ZfhH0GBAK OFHfUACn8kBSVGadvpPAEaoVewpV/pEp6C/QsRighnEqZ4+4nbSAML4F66gdE+Nk RacbH43QZTM9ZXtQW30/4P0Ool1MZvAfTxFply3kSq2zAPtjKJD9FHPMoiH2rCg+ M18ncgqEgMlr8keNt6q2ajGcAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF922zk9 EBQWFokDAEm+8gNzi+09MB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqMRTmtAEnsCP8rZdI87Ev2sIlvKEHuCPgbjXnNW7iGm9eiqabnpGA fGfMiRvFs/3sJKCyHV9/aqmZNFrYW9ATbEQehJv2sRHLEIIevsFgA5LzzyTwCX3q YAoHcXm9HiM/j+Wru6jxjWSYipLu/g50wfT8GbhMT/SfEblq4edyXVRMIXT26hKs YH7CTSFOu1M4jqcS2rZcxJB4nr/AeUi2+bmCqBLWLhvGFWUGa9gMPJoSTJi6+w35 Esck5kuwWazs1q3cr5dMdv34JfU5lCUbf0QfBEft8xR4mdYY9AZ/2zRnN4dy+5OI zjFLJ3+Kq7kZaYZ4DqbAotY1t5ZRQPAP -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:02 2025 by rpki-client