This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: qVSjAKmNe7sjp1ITNpLDLIOCVuB1V7Ly+pruZo9R2XU= Subject key identifier: EC:A3:18:CB:E0:CE:9E:5B:CE:6F:89:F3:81:BA:27:60:46:A4:85:E5 Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 0278 Signing time: Fri 19 Dec 2025 00:49:40 +0000 Manifest this update: Fri 19 Dec 2025 00:49:40 +0000 Manifest next update: Fri 26 Dec 2025 00:49:40 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: SYQkXKzQE36Q7HqWtUFT8PRn80GflRWF5zLCt8Ut9Mo=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: +md5I194ApAFzI9Vr3T+f9A2DpbYrH7HshUb/eOgpZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Dec 19 00:49:40 2025 GMT Not After : Dec 26 00:49:40 2025 GMT Subject: CN=6944a124-f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:0d:77:66:dd:c4:44:9d:58:d9:0c:5c:52: 5a:20:58:51:18:4e:f7:89:e6:68:f4:b4:4c:87:68: b4:5e:77:19:4c:fe:e4:17:2e:1f:ea:fd:a2:be:60: be:3c:09:7e:ce:e5:af:9b:2f:83:df:e5:2c:de:90: c0:b8:f1:aa:b9:ec:ba:1c:e7:46:a7:f1:e6:93:9c: 35:cb:56:47:9f:f9:50:89:5b:1b:6b:06:9a:9f:5b: 95:79:96:b1:fc:56:e3:fd:51:51:ad:95:b4:17:5b: c6:e0:57:d0:96:f0:a7:7f:2c:3d:cb:de:b6:6b:fc: 8c:92:41:f1:0a:0d:42:12:61:90:d3:64:e6:74:13: 99:f4:78:ed:96:fa:cd:d1:90:79:ba:c5:66:8d:47: 5f:ea:e3:29:33:e4:46:31:65:a7:8c:a5:8b:3e:a8: fe:a5:33:15:b1:17:09:81:8b:fa:e3:85:88:ed:39: 9f:a1:2b:5e:06:96:0a:eb:de:ba:d5:73:e4:53:a3: 93:2c:50:45:fc:b4:7b:44:5f:14:6a:ce:f6:2c:4f: fa:ee:08:b0:25:4c:b9:e0:a4:6a:e0:ca:76:f2:90: 07:5d:61:77:c5:e6:bd:b5:91:6d:66:b1:68:3b:b9: a4:54:d4:82:8a:33:32:dd:a4:29:e7:8c:6f:df:fd: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A3:18:CB:E0:CE:9E:5B:CE:6F:89:F3:81:BA:27:60:46:A4:85:E5 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b5:c7:ee:91:c6:e5:46:37:70:7f:55:b8:20:7d:b3:5c:06: 24:23:34:10:28:18:d9:0f:0e:fb:9e:cc:35:ee:61:62:91:3b: 53:05:20:2a:10:a5:ac:7c:43:e4:c3:3a:75:c9:8a:73:b6:af: d9:46:31:cb:4d:30:6b:43:41:3d:02:63:d3:75:b8:73:bf:0a: 44:8a:c9:2a:53:40:29:d6:5d:97:6f:48:4d:bb:45:e3:f7:4f: 2e:fc:e2:f3:e8:40:82:01:f9:36:89:c0:be:5f:39:37:f8:cb: 13:26:00:93:0b:aa:fc:a6:c5:15:c8:f5:ae:9e:dd:e6:b5:63: 10:5a:92:45:56:05:33:09:0b:48:9d:62:e0:ac:14:9c:32:bf: ca:ff:c4:ba:47:a5:78:ca:b0:5c:23:75:9d:66:37:02:9c:63: a6:82:c2:03:f1:dd:af:7d:ad:d9:5f:56:06:e9:17:76:73:ea: b8:85:85:5a:c4:60:bd:af:27:01:f8:39:cf:cd:3f:0c:d2:93: fd:df:73:35:d6:35:83:3f:7a:6b:ce:c5:c1:a6:55:9f:a9:9b: 1a:9d:10:00:c7:0c:35:d6:72:fc:29:51:d3:0f:e5:aa:cd:35: fa:75:35:18:52:3f:ff:42:cd:4f:fe:85:e1:e9:1a:b2:9f:23: 88:8d:1c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUxMjE5MDA0OTQwWhcNMjUxMjI2MDA0OTQwWjAYMRYwFAYD VQQDDA02OTQ0YTEyNC1mNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptENd2bdxESdWNkMXFJaIFhRGE73ieZo9LRMh2i0XncZTP7kFy4f6v2ivmC+ PAl+zuWvmy+D3+Us3pDAuPGquey6HOdGp/Hmk5w1y1ZHn/lQiVsbawaan1uVeZax /Fbj/VFRrZW0F1vG4FfQlvCnfyw9y962a/yMkkHxCg1CEmGQ02TmdBOZ9HjtlvrN 0ZB5usVmjUdf6uMpM+RGMWWnjKWLPqj+pTMVsRcJgYv644WI7TmfoSteBpYK6966 1XPkU6OTLFBF/LR7RF8Uas72LE/67giwJUy54KRq4Mp28pAHXWF3xea9tZFtZrFo O7mkVNSCijMy3aQp54xv3/0V9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyjGMvg zp5bzm+J84G6J2BGpIXlMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxtcfukcblRjdwf1W4IH2zXAYkIzQQKBjZDw77nsw17mFikTtTBSAq EKWsfEPkwzp1yYpztq/ZRjHLTTBrQ0E9AmPTdbhzvwpEiskqU0Ap1l2Xb0hNu0Xj 908u/OLz6ECCAfk2icC+Xzk3+MsTJgCTC6r8psUVyPWunt3mtWMQWpJFVgUzCQtI nWLgrBScMr/K/8S6R6V4yrBcI3WdZjcCnGOmgsID8d2vfa3ZX1YG6Rd2c+q4hYVa xGC9rycB+DnPzT8M0pP933M11jWDP3przsXBplWfqZsanRAAxww11nL8KVHTD+Wq zTX6dTUYUj//Qs1P/oXh6RqynyOIjRy1 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:03 2025 by rpki-client