This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft File: Gb2CLT62_26TcCRe6HS-qeuL7lU.mft (raw, json) Hash identifier: wH6MCWhD7exvHgBhqgZyfYUQ37ImWmx868r7pogyzWA= Subject key identifier: 5D:F6:A7:E2:62:C6:68:A1:1D:35:3A:EF:0C:D5:27:9C:EB:81:7A:6B Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft Manifest number: 31 Signing time: Tue 23 Dec 2025 06:28:48 +0000 Manifest this update: Tue 23 Dec 2025 06:28:47 +0000 Manifest next update: Tue 30 Dec 2025 06:28:47 +0000 Files and hashes: 1: Gb2CLT62_26TcCRe6HS-qeuL7lU.crl (hash: jfBEOuAe7aVEomXzTd+s3qPGr6ZbjMmeByV1qg8Lu+A=) 2: 1F8F98EEA2F811F0ACA39B18C4F9AE02.roa (hash: /KNy5MCRgQfgCQnLITh3QQ/nwilhQ6gGRg8j3dhXM+U=) 3: 208EBFD6A2F811F0ACA39B18C4F9AE02.roa (hash: eFEue/RfyteO6Qa9ns27FA3e4ja3uTb1hbjiGbGNmwg=) 4: 1E0F8E02A2F811F0ACA39B18C4F9AE02.roa (hash: a9ce5XpTdFJn+nuz0UuFLj9iqDPeMhg24PniTTaMiuI=) 5: 1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (hash: OPNRGLnOYn0FnL/Q0g2b6h1BOq6mkXKBmGsTnzds7jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Validity Not Before: Dec 23 06:28:47 2025 GMT Not After : Dec 30 06:28:47 2025 GMT Subject: CN=694a36a0-04d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:fe:c0:4a:a1:f0:58:09:04:73:55:ee:91: dd:fd:00:3d:28:0e:75:34:6c:cd:ff:4c:79:9a:6e: d8:1b:bf:2b:43:33:81:d5:39:89:20:38:8b:8d:63: 12:53:78:b2:b4:3d:1a:26:dc:26:0c:14:0c:e9:9d: 6e:42:4f:f8:b0:c4:e6:11:07:5a:10:69:3f:82:ce: 2d:6f:7a:12:0b:1b:b9:d4:0e:7e:7a:ae:73:77:3f: a9:0d:9d:51:75:fc:9e:c0:e8:36:ff:e9:ea:b7:50: db:68:07:84:66:76:6e:49:24:20:6f:86:c9:66:1f: 5d:27:e5:23:85:4e:ec:41:f4:62:84:c3:b5:53:a1: c8:34:d5:5e:d3:f8:f1:a0:f8:aa:83:55:70:1c:3e: 53:72:72:4d:31:45:5e:3b:48:05:f4:9f:d4:13:90: e5:12:30:df:d7:a6:29:df:2d:8c:58:f5:db:97:d1: 74:b7:fa:6f:2c:18:90:98:cc:40:4b:0f:ab:0b:aa: ad:6b:92:20:de:64:65:7d:ef:0a:67:2e:26:3a:e1: bd:e5:84:68:45:f5:99:53:e5:f5:3d:1b:c5:63:d3: ec:0f:27:dd:fb:27:63:ef:e9:9f:9f:1e:d3:c5:dd: 71:5d:cd:27:df:9e:e2:18:0b:17:b3:a1:55:1d:fa: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F6:A7:E2:62:C6:68:A1:1D:35:3A:EF:0C:D5:27:9C:EB:81:7A:6B X509v3 Authority Key Identifier: keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:75:a8:f6:c4:53:cf:20:16:86:5e:a4:aa:ba:ab:2c:2e:52: 99:96:b6:84:75:b3:6b:e9:71:47:25:b2:ba:2b:3e:17:41:8e: 70:00:e3:f9:ea:e7:e3:4a:52:6a:74:ac:4c:a7:a7:00:b4:10: 16:63:d2:b9:e5:c5:9a:72:02:c5:15:03:b4:0a:df:3d:a0:ed: cc:51:91:fe:ef:bf:21:b8:86:2a:45:4b:cd:bc:73:fb:29:a6: a8:fe:8e:54:55:9d:8c:ce:a7:a9:e2:91:86:37:a1:d9:08:fe: 09:3b:b3:e7:59:e6:70:8a:34:d8:53:eb:d4:b5:4e:a4:cf:02: 45:be:5f:85:d2:95:1f:f9:b2:b5:8f:ad:68:c2:57:90:70:27: 82:a9:20:a9:24:ec:e9:f0:ce:d3:d2:f9:92:be:e7:a1:dd:1a: 88:65:42:e8:1f:61:71:97:6a:1c:50:7c:b8:04:58:ba:cf:f3: 7f:2d:ff:1b:29:1c:17:0f:67:3c:b0:9b:f0:92:37:23:2d:51: 0b:5c:b2:ad:f8:99:b5:31:04:7f:45:31:21:6f:c7:af:4e:19: 54:20:5a:06:07:f5:09:74:49:61:3b:3c:a6:0e:56:a7:ca:5f: cd:b6:12:e4:77:bf:65:d0:dc:ab:07:bb:18:a5:75:ea:86:64: 03:5d:a6:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoMTlCRDgyMkQzRUI2RkY2RTkzNzAyNDVFRTg3NEJFQTlF QjhCRUU1NTAeFw0yNTEyMjMwNjI4NDdaFw0yNTEyMzAwNjI4NDdaMBgxFjAUBgNV BAMMDTY5NGEzNmEwLTA0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7J/7ASqHwWAkEc1Xukd39AD0oDnU0bM3/THmabtgbvytDM4HVOYkgOIuNYxJT eLK0PRom3CYMFAzpnW5CT/iwxOYRB1oQaT+Czi1vehILG7nUDn56rnN3P6kNnVF1 /J7A6Db/6eq3UNtoB4Rmdm5JJCBvhslmH10n5SOFTuxB9GKEw7VTocg01V7T+PGg +KqDVXAcPlNyck0xRV47SAX0n9QTkOUSMN/XpinfLYxY9duX0XS3+m8sGJCYzEBL D6sLqq1rkiDeZGV97wpnLiY64b3lhGhF9ZlT5fU9G8Vj0+wPJ937J2Pv6Z+fHtPF 3XFdzSffnuIYCxezoVUd+tf/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXfan4mLG aKEdNTrvDNUnnOuBemswHwYDVR0jBBgwFoAUGb2CLT62/26TcCRe6HS+qeuL7lUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0JEQzA5QTJBOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL0diMkNMVDYyXzI2VGNDUmU2SFMtcWV1TDds VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2IyQ0xUNjJfMjZUY0NSZTZIUy1xZXVMN2xVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0JEQzA5QTJBOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL0diMkNMVDYyXzI2 VGNDUmU2SFMtcWV1TDdsVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACR1qPbEU88gFoZepKq6qywuUpmWtoR1s2vpcUclsrorPhdBjnAA4/nq 5+NKUmp0rEynpwC0EBZj0rnlxZpyAsUVA7QK3z2g7cxRkf7vvyG4hipFS828c/sp pqj+jlRVnYzOp6nikYY3odkI/gk7s+dZ5nCKNNhT69S1TqTPAkW+X4XSlR/5srWP rWjCV5BwJ4KpIKkk7OnwztPS+ZK+56HdGohlQugfYXGXahxQfLgEWLrP838t/xsp HBcPZzywm/CSNyMtUQtcsq34mbUxBH9FMSFvx69OGVQgWgYH9Ql0SWE7PKYOVqfK X822EuR3v2XQ3KsHuxildeqGZANdpn4= -----END CERTIFICATE-----Generated at Thu Dec 25 04:52:02 2025 by rpki-client