This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: ywRM1GnixXe6Cej+LUAx84D73tbYPhhxZN7uynVSs+E= Subject key identifier: 6D:F9:23:65:01:69:77:E6:DB:54:03:91:A0:D7:A4:D3:1C:D2:3A:F9 Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 020E Signing time: Thu 18 Dec 2025 17:22:14 +0000 Manifest this update: Thu 18 Dec 2025 17:22:13 +0000 Manifest next update: Thu 25 Dec 2025 17:22:13 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: ru8xiNjc1XPInAQfoageyD5ePFfBYUSqZ8MWHn5PyYs=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: q0rXM4IeMQ5E14ifbbIFw0Hb35LtVVQvwt/UFqTmRYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Dec 18 17:22:13 2025 GMT Not After : Dec 25 17:22:13 2025 GMT Subject: CN=69443846-6773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:2a:89:41:15:f0:20:28:d5:5c:1a:7e:26: bf:68:85:4a:80:54:de:a0:d9:b2:c7:cc:7a:9e:ef: 43:cd:3b:16:83:3f:bd:a0:7c:50:9b:3b:2e:be:97: 23:e5:dd:9e:6b:47:2f:18:8c:be:d2:4a:20:db:6a: b0:e1:26:9b:09:7f:73:07:16:e4:4c:32:83:8f:ae: 3e:0b:5c:35:b3:4c:30:6d:4e:ef:46:dc:15:be:45: 08:af:4f:5c:4c:a4:33:b5:2f:b9:56:2e:e8:6d:76: bc:fd:50:ca:4b:8f:97:ef:85:e8:74:a6:af:be:6b: c4:e8:b7:8a:43:2e:20:d4:a1:5f:35:eb:e2:17:8b: c2:cf:95:84:d7:1f:6b:16:f2:e4:fa:1b:e0:fc:4d: ea:69:e3:9e:a1:f8:9d:a5:94:26:a9:c5:1c:8b:37: 33:d3:66:b3:e2:c9:ed:a9:1d:c8:50:90:2d:ff:06: 86:0e:9c:2f:ad:ee:b1:09:6d:dd:12:f7:b4:9a:c7: 9c:9b:fc:31:04:a6:ec:53:08:d6:69:8a:7c:be:16: 1a:04:64:76:e5:ce:29:0c:e8:7d:c6:7a:66:0f:45: a2:25:68:c9:7b:44:ea:9d:ba:84:41:c7:12:a0:d1: 74:b8:09:f0:04:85:a7:a0:ab:fb:dd:3f:11:77:71: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F9:23:65:01:69:77:E6:DB:54:03:91:A0:D7:A4:D3:1C:D2:3A:F9 X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c9:ed:82:8f:8e:8a:09:8f:a7:51:ed:01:f5:dd:48:0f:4a: 70:64:93:be:39:99:69:67:97:b2:49:07:59:f2:0e:aa:9b:a3: ae:3b:13:5d:ac:df:00:d9:44:9d:81:e5:84:47:0e:b3:98:74: ce:70:7e:59:55:b0:ba:92:c9:58:3c:51:6f:51:39:0b:02:07: ee:12:a9:d6:8f:84:d2:fe:d5:de:79:9a:b4:bf:9f:b6:69:d9: e9:13:7e:e1:58:ae:5b:72:19:59:37:f9:38:f2:1b:05:9a:f3: 03:52:77:f9:a0:63:1d:04:20:67:5b:d6:42:65:17:01:0b:22: 46:a0:17:17:d8:6e:6f:34:82:49:94:9c:87:d7:de:ad:b4:b9: cf:28:46:3b:10:63:67:9b:52:e9:cb:0a:27:e3:f6:1b:51:06: 01:6a:d0:42:cc:e9:3f:f2:dd:31:e8:d6:e6:3a:71:3e:15:83: 18:2c:b1:b8:f5:51:e6:2e:93:dc:77:6d:41:59:78:f0:e9:58: 78:46:64:f9:97:dc:ad:a0:1e:56:1b:32:63:78:00:bc:4a:03: 95:c2:dd:3e:d6:59:20:4d:4f:2a:d7:1b:86:51:19:ac:3f:3b: 37:06:62:12:68:05:b3:f4:d1:48:45:24:33:5b:2d:72:a9:df: 75:2d:32:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUxMjE4MTcyMjEzWhcNMjUxMjI1MTcyMjEzWjAYMRYwFAYD VQQDDA02OTQ0Mzg0Ni02NzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1gqiUEV8CAo1Vwafia/aIVKgFTeoNmyx8x6nu9DzTsWgz+9oHxQmzsuvpcj 5d2ea0cvGIy+0kog22qw4SabCX9zBxbkTDKDj64+C1w1s0wwbU7vRtwVvkUIr09c TKQztS+5Vi7obXa8/VDKS4+X74XodKavvmvE6LeKQy4g1KFfNeviF4vCz5WE1x9r FvLk+hvg/E3qaeOeofidpZQmqcUcizcz02az4sntqR3IUJAt/waGDpwvre6xCW3d Eve0msecm/wxBKbsUwjWaYp8vhYaBGR25c4pDOh9xnpmD0WiJWjJe0TqnbqEQccS oNF0uAnwBIWnoKv73T8Rd3E+pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG35I2UB aXfm21QDkaDXpNMc0jr5MB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqye2Cj46KCY+nUe0B9d1ID0pwZJO+OZlpZ5eySQdZ8g6qm6OuOxNd rN8A2USdgeWERw6zmHTOcH5ZVbC6kslYPFFvUTkLAgfuEqnWj4TS/tXeeZq0v5+2 adnpE37hWK5bchlZN/k48hsFmvMDUnf5oGMdBCBnW9ZCZRcBCyJGoBcX2G5vNIJJ lJyH196ttLnPKEY7EGNnm1Lpywon4/YbUQYBatBCzOk/8t0x6NbmOnE+FYMYLLG4 9VHmLpPcd21BWXjw6Vh4RmT5l9ytoB5WGzJjeAC8SgOVwt0+1lkgTU8q1xuGURms Pzs3BmISaAWz9NFIRSQzWy1yqd91LTIe -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:32 2025 by rpki-client