This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json) Hash identifier: lio9fzUTidRckGhN7gECIKkwJebsts3lofMkU5SPyek= Subject key identifier: 0D:DC:7B:96:90:C6:FE:D3:61:D9:F0:9A:41:68:62:09:A3:92:45:F2 Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft Manifest number: 01B2 Signing time: Fri 19 Dec 2025 02:30:09 +0000 Manifest this update: Fri 19 Dec 2025 02:30:09 +0000 Manifest next update: Fri 26 Dec 2025 02:30:09 +0000 Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: H1sGBloEa+o93FmbA64LV7sOeqFzoS2Z21QWqBalt14=) 2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 5TSYl4K6oaHO9/sYuo4sA5dPP5a+BBwemJeXP7ycDF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Validity Not Before: Dec 19 02:30:09 2025 GMT Not After : Dec 26 02:30:09 2025 GMT Subject: CN=6944b8b1-9b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:e9:6e:f8:1f:0c:01:d1:2d:2b:9b:80:c9: 13:fe:f0:43:f0:f0:67:59:58:6c:47:f9:50:f0:e5: 78:4c:32:bc:f0:2e:f4:a6:4e:6d:94:2d:58:63:8e: 81:9a:4f:e8:7b:3c:fb:7f:7d:55:74:3f:67:bd:6a: d4:30:be:cf:01:51:5b:f4:e7:8c:cf:ee:43:ca:71: 69:57:8f:aa:5f:9c:27:1d:10:97:df:ef:e5:b7:b0: 55:ac:7a:89:18:91:01:c8:f6:6f:cb:45:60:b0:95: 5a:c3:d7:7a:5a:84:95:9e:c6:7b:e2:1f:b0:25:0a: 78:b9:2a:71:dc:1a:70:71:b4:3f:54:2b:d1:1d:c9: a7:40:9d:e3:bc:30:e1:b4:9a:65:45:d8:81:51:41: 5f:9d:c7:9b:35:00:f4:80:a2:1c:e1:27:80:6e:25: 11:3c:ce:58:ef:da:f2:e3:b9:a4:0e:8b:39:f8:62: 20:1f:5e:72:64:1a:33:f6:17:e3:c0:8c:aa:4d:d2: 67:34:18:80:2a:70:21:19:03:a0:9c:1b:86:94:05: a2:8a:81:b4:cc:f7:8e:b4:da:17:fc:7a:76:f5:20: ab:b5:bd:5b:b8:75:c3:44:f4:68:10:13:5d:1a:b3: b1:f3:7e:51:d1:5f:4d:8d:41:7a:37:6c:3b:25:62: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DC:7B:96:90:C6:FE:D3:61:D9:F0:9A:41:68:62:09:A3:92:45:F2 X509v3 Authority Key Identifier: keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:86:9b:8f:ad:47:11:5a:6f:b8:39:fb:c4:d6:10:23:c4:bf: b7:88:0a:3f:d5:b2:2c:a9:c2:1a:b4:df:fa:12:d4:14:17:60: 22:47:31:03:d5:ee:99:eb:d2:8b:34:b3:5c:27:cb:95:21:1d: ba:77:97:48:98:c9:eb:db:8f:2c:ba:ea:5c:fc:a7:c7:9e:01: 33:b9:94:47:7c:46:5e:e6:bb:59:8c:16:6f:f4:ad:c0:a1:63: f3:a6:b8:f7:76:62:b8:eb:52:a2:b0:18:6a:40:87:cc:9a:ee: f7:06:19:85:f6:6b:50:2a:33:62:2d:9a:91:1f:84:ed:96:1e: 6c:dc:5a:b7:a0:a6:ff:7d:9b:2d:f9:d4:f5:38:a1:04:7c:1d: 94:67:19:33:24:3c:b5:4d:d5:d8:85:a1:d7:8d:8d:25:74:b9: 0a:26:95:4f:66:aa:e9:fd:70:8d:77:e3:8c:be:7f:3f:cf:f0: 37:64:98:a0:50:81:0c:a3:b0:03:58:4c:9d:2a:aa:ff:e2:61: f5:01:c8:32:6d:2e:33:28:d9:17:e4:8e:83:e5:1c:44:a2:e7: 79:cb:d4:4d:be:8d:73:da:5a:3b:f2:88:bf:7a:07:69:9c:ff: eb:71:9f:cd:12:31:2d:93:e3:6c:11:b9:02:f1:28:c8:b9:7b: e6:3a:ee:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE Mzg3MjYzQjgwHhcNMjUxMjE5MDIzMDA5WhcNMjUxMjI2MDIzMDA5WjAYMRYwFAYD VQQDDA02OTQ0YjhiMS05Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9npbvgfDAHRLSubgMkT/vBD8PBnWVhsR/lQ8OV4TDK88C70pk5tlC1YY46B mk/oezz7f31VdD9nvWrUML7PAVFb9OeMz+5DynFpV4+qX5wnHRCX3+/lt7BVrHqJ GJEByPZvy0VgsJVaw9d6WoSVnsZ74h+wJQp4uSpx3BpwcbQ/VCvRHcmnQJ3jvDDh tJplRdiBUUFfncebNQD0gKIc4SeAbiURPM5Y79ry47mkDos5+GIgH15yZBoz9hfj wIyqTdJnNBiAKnAhGQOgnBuGlAWiioG0zPeOtNoX/Hp29SCrtb1buHXDRPRoEBNd GrOx835R0V9NjUF6N2w7JWJBAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3ce5aQ xv7TYdnwmkFoYgmjkkXyMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2 NjFIYXJvbFgyNW5UaHlZN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhhpuPrUcRWm+4OfvE1hAjxL+3iAo/1bIsqcIatN/6EtQUF2AiRzED 1e6Z69KLNLNcJ8uVIR26d5dImMnr248suupc/KfHngEzuZRHfEZe5rtZjBZv9K3A oWPzprj3dmK461KisBhqQIfMmu73BhmF9mtQKjNiLZqRH4Ttlh5s3Fq3oKb/fZst +dT1OKEEfB2UZxkzJDy1TdXYhaHXjY0ldLkKJpVPZqrp/XCNd+OMvn8/z/A3ZJig UIEMo7ADWEydKqr/4mH1AcgybS4zKNkX5I6D5RxEoud5y9RNvo1z2lo78oi/egdp nP/rcZ/NEjEtk+NsEbkC8SjIuXvmOu5h -----END CERTIFICATE-----Generated at Sat Dec 20 10:06:28 2025 by rpki-client