This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json) Hash identifier: hy9gi8JNzoENaT5rj4vBKXI2osKare/icA7YD8Sltpg= Subject key identifier: 91:45:37:08:96:09:D6:6C:C4:5B:D0:32:66:6C:61:58:AA:8C:DF:C9 Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft Manifest number: 04B0 Signing time: Wed 31 Dec 2025 23:25:22 +0000 Manifest this update: Wed 31 Dec 2025 23:25:21 +0000 Manifest next update: Wed 07 Jan 2026 23:25:21 +0000 Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: ufEC3XAoPpMPBRRddQfuHxuS7cDdspnk0s+RH88+9aE=) 2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: xFL3ypsjaivEwLZovLg7QH0r6iiczksBr1MYMN2w3rQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 23:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Validity Not Before: Dec 31 23:25:21 2025 GMT Not After : Jan 7 23:25:21 2026 GMT Subject: CN=6955b0e2-4f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:a1:80:c7:c5:9c:a9:b8:03:34:9e:3e:d6: 51:88:08:9d:96:21:8b:6f:96:e6:74:41:99:2b:c3: 7d:41:31:97:47:4b:8d:bc:e5:5a:83:95:e4:71:70: 96:81:58:3f:39:20:dd:30:03:bb:92:34:b9:cd:ec: 69:cd:2d:3d:34:fd:a5:37:23:9f:48:35:2d:02:b5: 65:71:e7:70:be:b2:13:7e:ce:9a:2c:f8:c0:8a:d5: 92:7d:ff:22:9a:f0:66:4d:72:03:05:5e:55:da:37: 48:89:02:3c:ff:28:cd:cb:47:ee:34:11:00:1f:8f: d5:b0:45:af:bb:be:f3:1d:91:fa:5a:3b:eb:cc:5b: 6d:db:e1:46:93:81:e4:02:37:9b:2b:fd:c9:5f:c4: da:1a:ef:6d:89:7b:d4:be:db:8b:52:b0:81:15:24: 7c:4f:dc:59:72:9c:0f:3e:93:22:eb:4d:a1:7d:33: 00:1b:58:f8:97:81:88:e5:6d:bf:17:5e:8a:79:2e: c8:08:25:a0:09:18:6e:d2:d2:71:d2:0d:a9:0b:00: 64:0a:23:0c:ce:74:c2:c1:37:e5:25:e3:76:74:7f: 6c:53:2d:22:0c:04:55:05:3a:20:41:db:b8:eb:ed: bc:95:33:d1:cc:08:f9:db:50:3e:65:bc:15:24:14: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:37:08:96:09:D6:6C:C4:5B:D0:32:66:6C:61:58:AA:8C:DF:C9 X509v3 Authority Key Identifier: keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:cc:a6:3b:60:7a:4f:a2:ee:7b:80:53:d7:86:1c:e4:a4: db:0a:d4:75:50:e7:a0:f6:e2:0d:9c:59:29:4f:ab:ad:aa:a6: c6:54:a9:ac:13:20:ad:ac:2e:d8:f6:d2:e6:5b:68:1f:33:c6: 52:8c:c0:2f:6d:44:0d:ac:72:c7:cb:63:3a:b5:2c:6e:cd:5f: c8:ac:7c:be:7f:55:9e:e2:fd:0d:44:7d:5d:cf:9d:1f:81:a5: f6:c6:69:78:0a:34:eb:c4:6a:d3:21:a0:9d:54:02:0b:95:8b: ba:69:6d:a4:63:62:61:b9:4e:ea:9b:48:b9:76:44:1e:92:3a: 28:9f:30:c6:c2:bf:af:5c:ce:67:0b:d0:49:dd:b0:ee:bc:b3: f6:c3:f8:97:df:9e:b7:46:a6:d5:0c:bc:65:b4:86:a8:28:4d: 67:03:dc:c0:f3:65:e7:84:1b:d9:d1:24:59:28:3c:73:26:49: e1:ec:03:47:11:d4:8c:fa:84:19:4f:c6:6a:07:63:9a:d8:17: 9b:8c:59:b2:10:18:6c:da:03:60:d2:e1:18:93:5f:bb:4d:b5: b9:3b:f9:c6:08:d1:e4:1f:24:16:26:4a:11:84:d6:95:70:51: e9:c8:8d:a6:cd:26:ff:6f:87:d6:87:a1:ed:9b:dc:bf:e7:7a: 8d:c7:66:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx MjU2MTQxM0MwHhcNMjUxMjMxMjMyNTIxWhcNMjYwMTA3MjMyNTIxWjAYMRYwFAYD VQQDDA02OTU1YjBlMi00Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokuhgMfFnKm4AzSePtZRiAidliGLb5bmdEGZK8N9QTGXR0uNvOVag5XkcXCW gVg/OSDdMAO7kjS5zexpzS09NP2lNyOfSDUtArVlcedwvrITfs6aLPjAitWSff8i mvBmTXIDBV5V2jdIiQI8/yjNy0fuNBEAH4/VsEWvu77zHZH6WjvrzFtt2+FGk4Hk AjebK/3JX8TaGu9tiXvUvtuLUrCBFSR8T9xZcpwPPpMi602hfTMAG1j4l4GI5W2/ F16KeS7ICCWgCRhu0tJx0g2pCwBkCiMMznTCwTflJeN2dH9sUy0iDARVBTogQdu4 6+28lTPRzAj521A+ZbwVJBSBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFFNwiW CdZsxFvQMmZsYViqjN/JMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5 N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i dUJFVjZDdjl5VlFTVmhRVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb8cymO2B6T6Lue4BT14Yc5KTbCtR1UOeg9uINnFkpT6utqqbGVKms EyCtrC7Y9tLmW2gfM8ZSjMAvbUQNrHLHy2M6tSxuzV/IrHy+f1We4v0NRH1dz50f gaX2xml4CjTrxGrTIaCdVAILlYu6aW2kY2JhuU7qm0i5dkQekjoonzDGwr+vXM5n C9BJ3bDuvLP2w/iX3563RqbVDLxltIaoKE1nA9zA82XnhBvZ0SRZKDxzJknh7ANH EdSM+oQZT8ZqB2Oa2BebjFmyEBhs2gNg0uEYk1+7TbW5O/nGCNHkHyQWJkoRhNaV cFHpyI2mzSb/b4fWh6Htm9y/53qNx2YJ -----END CERTIFICATE-----Generated at Thu Jan 1 06:24:23 2026 by rpki-client