This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft File: GOzmKe7ztqJpbrqzSz-wLviouIc.mft (raw, json) Hash identifier: 46QXnDwq4da4iqxWJGiQXt2mo+ndqAdsfn9H6knr6iU= Subject key identifier: 64:1F:61:10:D7:AD:CD:64:CA:F3:D7:72:18:FB:19:1B:05:30:FB:08 Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87 Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft Manifest number: 32 Signing time: Tue 23 Dec 2025 06:25:11 +0000 Manifest this update: Tue 23 Dec 2025 06:25:11 +0000 Manifest next update: Tue 30 Dec 2025 06:25:11 +0000 Files and hashes: 1: GOzmKe7ztqJpbrqzSz-wLviouIc.crl (hash: Y1JXO1ewms0sIi04Z7NvqDHKGPiy6Kp9nXl71HQC6EM=) 2: 9F82952895C511F0B89BD26BC4F9AE02.roa (hash: +1Bt6gAyfoUFpig1US0y9IYf8gqxESp603kTB9cS2LI=) 3: 0A2469F095E011F0B2B5CE77C4F9AE02.roa (hash: 2TUs1YZ2Eqxk5relT6yIF5miILYOJS8mbAVh6fsYe7A=) 4: 8201D598AD9B11F080BD6B82C4F9AE02.roa (hash: XnkbG03fdUQKsnLMxvWnS0QGXcRDDBgD4VhVjpHPreg=) 5: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (hash: 9TR+7jMSEj42WP2HgrvlmxnuqGeYCxwav28DarkHDK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887 Validity Not Before: Dec 23 06:25:11 2025 GMT Not After : Dec 30 06:25:11 2025 GMT Subject: CN=694a35c7-13ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:4a:14:73:e9:83:b5:12:41:f7:f7:7c:e1: 85:db:60:91:fe:8e:96:66:23:0f:2f:bf:7f:3a:2a: 9d:fc:a9:f6:f9:27:65:c3:74:1e:4e:b7:1d:da:ee: 0a:82:09:54:b4:a0:09:13:71:b2:65:06:39:78:1f: 0b:a1:8e:83:48:3e:93:0a:a1:e1:12:1a:3e:54:4f: 5d:06:2e:29:d2:7f:1b:2e:fd:8e:12:2f:8d:de:04: 5c:b3:40:45:c3:07:91:89:97:62:15:b9:a4:52:64: 4d:b2:cd:07:1c:34:44:73:53:41:db:c1:c4:5e:51: 7c:14:82:16:98:9c:5b:34:7c:5e:49:3f:1d:e5:27: 07:bf:6b:c2:e1:df:49:41:bf:64:9d:69:03:74:61: cf:c5:d7:b4:b0:33:eb:87:f5:fe:10:60:bd:9c:b3: 0e:8d:61:a5:dd:bf:21:b6:b6:dd:42:0f:66:a2:0c: 2c:a4:89:33:bc:fe:58:4f:ba:a1:f2:11:18:67:dc: 9b:d3:4d:b3:af:21:fd:b6:eb:51:04:49:ac:43:52: 4d:14:e7:c0:c8:72:1e:4b:7f:3d:82:e9:7c:0e:d9: 2a:66:f9:c7:9c:aa:f5:53:bc:e6:87:fe:07:5c:4c: 1b:5b:83:a5:4b:23:e7:bd:7e:d3:ff:f1:ec:7d:79: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1F:61:10:D7:AD:CD:64:CA:F3:D7:72:18:FB:19:1B:05:30:FB:08 X509v3 Authority Key Identifier: keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:dd:e2:52:5c:c2:6e:b2:80:b3:61:6d:91:c0:bf:d1:a5:1c: c0:4e:3d:27:95:50:01:63:2c:cf:31:c4:fa:3b:68:ad:10:5c: d3:b0:60:87:1e:d2:24:7a:81:fb:ba:0a:2b:99:1d:13:ea:88: cb:47:93:cb:85:40:a1:88:47:4e:2f:ad:a4:f4:c3:3a:3e:36: f4:c6:7c:a2:94:dd:73:99:74:36:2e:95:d1:80:7f:11:6f:1b: e2:e2:51:8a:6a:d1:b5:c7:be:c0:54:36:eb:bb:ec:09:31:14: 57:a1:0a:53:c7:d9:7d:e7:09:b7:2a:89:84:aa:c5:10:53:50: cd:1f:40:43:0f:0f:00:3e:c9:83:4e:d6:04:3d:63:41:bc:cd: ec:f6:2c:d9:f7:b1:42:bf:b1:7f:ab:b1:11:3d:41:03:0b:31: 8f:df:37:bc:44:95:d9:ff:da:b1:d2:02:e9:d3:23:1e:e9:f0: 06:8e:a2:f6:f9:4e:a2:10:80:dc:ec:14:87:28:a0:1f:82:9d: c6:eb:f7:48:16:20:02:2d:26:ae:21:8f:92:97:8a:a7:67:ba: 49:ee:3c:61:62:70:46:43:de:22:3c:48:3d:76:f9:d0:ff:ca: 5d:1e:b3:92:23:db:c2:be:9f:48:95:bd:9f:d7:31:19:36:0f: 1f:8e:e8:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFBRjExMC8GA1UEBRMoMThFQ0U2MjlFRUYzQjZBMjY5NkVCQUIzNEIzRkIwMkVG OEE4Qjg4NzAeFw0yNTEyMjMwNjI1MTFaFw0yNTEyMzAwNjI1MTFaMBgxFjAUBgNV BAMMDTY5NGEzNWM3LTEzZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCQEoUc+mDtRJB9/d84YXbYJH+jpZmIw8vv386Kp38qfb5J2XDdB5Otx3a7gqC CVS0oAkTcbJlBjl4HwuhjoNIPpMKoeESGj5UT10GLinSfxsu/Y4SL43eBFyzQEXD B5GJl2IVuaRSZE2yzQccNERzU0HbwcReUXwUghaYnFs0fF5JPx3lJwe/a8Lh30lB v2SdaQN0Yc/F17SwM+uH9f4QYL2csw6NYaXdvyG2tt1CD2aiDCykiTO8/lhPuqHy ERhn3JvTTbOvIf2261EESaxDUk0U58DIch5Lfz2C6XwO2Spm+cecqvVTvOaH/gdc TBtbg6VLI+e9ftP/8ex9eRwnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZB9hENet zWTK89dyGPsZGwUw+wgwHwYDVR0jBBgwFoAUGOzmKe7ztqJpbrqzSz+wLviouIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MUFGLzZCMjhCM0U0OTVD NDExRjA5NEU4NEUzNkM0RjlBRTAyL0dPem1LZTd6dHFKcGJycXpTei13THZpb3VJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR096bUtlN3p0cUpwYnJxelN6LXdMdmlvdUljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MUFGLzZCMjhCM0U0OTVDNDExRjA5NEU4NEUzNkM0RjlBRTAyL0dPem1LZTd6dHFK cGJycXpTei13THZpb3VJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTd4lJcwm6ygLNhbZHAv9GlHMBOPSeVUAFjLM8xxPo7aK0QXNOwYIce 0iR6gfu6CiuZHRPqiMtHk8uFQKGIR04vraT0wzo+NvTGfKKU3XOZdDYuldGAfxFv G+LiUYpq0bXHvsBUNuu77AkxFFehClPH2X3nCbcqiYSqxRBTUM0fQEMPDwA+yYNO 1gQ9Y0G8zez2LNn3sUK/sX+rsRE9QQMLMY/fN7xEldn/2rHSAunTIx7p8AaOovb5 TqIQgNzsFIcooB+Cncbr90gWIAItJq4hj5KXiqdnuknuPGFicEZD3iI8SD12+dD/ yl0es5Ij28K+n0iVvZ/XMRk2Dx+O6EU= -----END CERTIFICATE-----Generated at Tue Dec 23 18:57:15 2025 by rpki-client