This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: QbDeP94PY1ZjTXFk2RD6SujBkPIZFHUXOMU7Sz+cJZQ= Subject key identifier: 1F:44:C7:2E:9C:97:89:A7:E4:E1:99:34:14:30:3E:17:EA:A6:2E:AA Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: 0108 Signing time: Fri 19 Dec 2025 04:07:55 +0000 Manifest this update: Fri 19 Dec 2025 04:07:55 +0000 Manifest next update: Fri 26 Dec 2025 04:07:55 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: BpotA7x/MtXCOm9dBT+PlH/uAVXB8a6YdeI5K8DE7U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Dec 19 04:07:55 2025 GMT Not After : Dec 26 04:07:55 2025 GMT Subject: CN=6944cf9b-38dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:6c:ef:6e:b7:c2:5b:c8:92:b6:ad:97:b5: 31:1e:56:75:ce:06:b2:7f:fa:08:d7:da:4d:42:ac: 9d:e5:ba:61:d1:80:d6:9d:34:84:37:45:28:98:a9: b7:f3:c7:58:21:1f:5c:4f:55:e4:38:46:c7:61:ec: 39:0c:c4:4d:d3:5e:8b:7a:87:c8:72:ec:5a:5d:09: a9:3b:31:3d:10:bb:ef:27:11:96:fa:59:5f:04:6d: 90:06:ab:88:6c:44:e0:78:a9:40:09:ef:c2:2f:52: a4:70:f6:e2:5a:aa:46:b8:62:e7:32:c0:80:9d:8f: a3:2a:e6:b2:11:47:56:18:f5:ad:c2:b5:51:26:74: 3f:37:04:5a:76:8e:78:d1:62:4e:4b:05:cf:f7:a1: a1:b8:e0:24:50:81:d5:4b:34:bb:07:9d:ed:7f:c8: d3:8a:2b:cb:75:01:e2:67:22:b4:b9:3a:e4:56:6f: 25:d7:19:b9:fa:ac:23:ba:d2:ae:2c:6b:6d:c9:f4: 2d:28:8c:45:86:86:41:5c:3f:11:a7:24:27:bd:c2: 33:35:e4:41:85:04:ef:69:15:dc:82:29:20:18:fe: 2c:f4:51:72:31:90:64:53:1d:c1:21:51:e6:3f:bf: 4d:dd:a5:ae:75:10:1d:03:09:48:a9:7e:11:47:f6: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:44:C7:2E:9C:97:89:A7:E4:E1:99:34:14:30:3E:17:EA:A6:2E:AA X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:01:15:27:ff:4e:8e:fa:11:1b:23:75:4e:62:e0:d1:db:29: 41:4e:10:2d:71:02:c9:78:1e:8c:44:cb:17:63:95:83:95:33: 21:e6:d5:8a:0b:91:f2:8e:83:0a:ff:a1:ae:d4:9f:46:ce:ab: ed:41:21:1c:69:8f:06:84:e5:8c:e0:4d:2b:ec:44:b7:4a:c3: 9d:df:c9:0c:2e:78:0d:6c:e7:09:d9:f8:38:87:2b:e7:13:58: ea:b2:c7:26:fd:5c:b8:19:a8:31:03:4e:1e:8f:54:6b:70:46: 54:76:ec:a7:07:3c:54:5f:a1:94:65:36:8a:18:a5:eb:51:fb: 78:f7:f1:99:ef:90:0d:17:e9:65:a5:5d:7c:eb:33:01:6a:58: fb:94:6c:1c:0c:38:b7:34:b2:e3:98:54:a0:bb:16:92:44:a2: 7b:a1:bd:9d:c0:e2:24:04:18:5f:51:f3:59:c5:5c:74:07:5b: 90:16:4e:f3:5c:97:cb:71:65:d9:4a:6d:cf:b0:5a:df:5f:3e: 75:72:26:7e:a4:32:5d:40:07:a2:f0:e2:b9:c9:47:a3:c8:b6: 88:64:ce:c3:9a:2d:4b:48:c5:1a:05:5e:3f:1e:fa:dd:e8:ff: f0:c1:ff:6a:da:5f:7b:9e:e2:fb:06:d6:a1:66:af:1d:64:eb: 87:78:2a:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjUxMjE5MDQwNzU1WhcNMjUxMjI2MDQwNzU1WjAYMRYwFAYD VQQDDA02OTQ0Y2Y5Yi0zOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1hs7263wlvIkratl7UxHlZ1zgayf/oI19pNQqyd5bph0YDWnTSEN0UomKm3 88dYIR9cT1XkOEbHYew5DMRN016LeofIcuxaXQmpOzE9ELvvJxGW+llfBG2QBquI bETgeKlACe/CL1KkcPbiWqpGuGLnMsCAnY+jKuayEUdWGPWtwrVRJnQ/NwRado54 0WJOSwXP96GhuOAkUIHVSzS7B53tf8jTiivLdQHiZyK0uTrkVm8l1xm5+qwjutKu LGttyfQtKIxFhoZBXD8RpyQnvcIzNeRBhQTvaRXcgikgGP4s9FFyMZBkUx3BIVHm P79N3aWudRAdAwlIqX4RR/a6fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9Exy6c l4mn5OGZNBQwPhfqpi6qMB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ARUn/06O+hEbI3VOYuDR2ylBThAtcQLJeB6MRMsXY5WDlTMh5tWK C5HyjoMK/6Gu1J9GzqvtQSEcaY8GhOWM4E0r7ES3SsOd38kMLngNbOcJ2fg4hyvn E1jqsscm/Vy4GagxA04ej1RrcEZUduynBzxUX6GUZTaKGKXrUft49/GZ75ANF+ll pV186zMBalj7lGwcDDi3NLLjmFSguxaSRKJ7ob2dwOIkBBhfUfNZxVx0B1uQFk7z XJfLcWXZSm3PsFrfXz51ciZ+pDJdQAei8OK5yUejyLaIZM7Dmi1LSMUaBV4/Hvrd 6P/wwf9q2l97nuL7BtahZq8dZOuHeCr3 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:05 2025 by rpki-client