This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: v2hA+o5kllAhtvj/1tON5shXyuc47rrbAyH7h/dpQ/I= Subject key identifier: 43:D6:EF:A5:89:9C:A2:28:E6:DE:1F:B7:72:C1:58:D4:2B:ED:31:AC Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: 0143 Signing time: Sat 27 Dec 2025 03:21:19 +0000 Manifest this update: Sat 27 Dec 2025 03:21:19 +0000 Manifest next update: Sat 03 Jan 2026 03:21:19 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: K8tNRK3o69n1D6u++VWhwdijcR9GAiwLW3JcfdG6u1E=) 2: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=) 3: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=) 4: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 03:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Dec 27 03:21:19 2025 GMT Not After : Jan 3 03:21:19 2026 GMT Subject: CN=694f50af-fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:a8:04:52:59:c1:63:f2:f5:46:a3:12:4c: 3b:d2:3f:f2:f7:25:d1:37:d7:46:eb:48:dc:c3:a6: 40:1b:b9:b3:ca:fd:5f:03:8c:05:c8:a4:2e:c3:e7: dd:6f:75:5c:75:d4:6b:c7:68:2f:2d:b8:1d:28:9b: 3c:ce:70:15:26:d3:52:6a:67:3e:54:e0:f2:23:15: c0:09:99:7e:d1:7f:50:39:15:23:4f:9e:3b:6f:cf: 49:aa:37:c0:c5:a3:d1:56:33:84:bd:95:3f:8e:7a: c3:42:f6:ca:67:69:4f:ac:eb:e9:d9:a4:c5:e4:d8: d1:5e:be:fe:56:1a:e0:91:05:f7:a3:c9:6d:1f:91: 04:37:97:34:2c:ca:d0:f1:f1:5c:44:02:8a:de:d0: aa:7e:9e:0d:00:95:0b:55:b7:01:02:a7:05:bb:d5: 35:3c:56:a6:49:79:a2:11:de:7c:eb:dd:38:70:12: 7b:6d:d2:53:d9:99:f1:bb:01:e5:33:14:c8:aa:cc: 29:84:53:ff:b3:ba:74:20:72:00:7b:f1:00:2f:23: ff:38:c0:0a:2a:49:db:66:70:7a:8d:db:94:d1:2c: 6c:f2:4f:57:4e:7a:85:6b:06:b9:50:56:05:b2:a9: 5e:cb:fc:65:9e:12:4c:c0:73:cd:42:95:17:6c:2f: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D6:EF:A5:89:9C:A2:28:E6:DE:1F:B7:72:C1:58:D4:2B:ED:31:AC X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:67:f7:91:e3:5e:c2:be:4e:00:59:12:c0:e7:9b:88:a2: ba:e9:c8:e9:fc:09:1f:b4:8b:74:48:34:57:6f:cd:b0:78:43: 4e:15:1f:b8:dc:84:bd:f9:38:0b:11:7b:87:25:90:20:b3:91: 74:ae:5a:3e:4b:e5:c5:d2:9d:e6:63:c5:92:31:df:77:d2:aa: 60:17:c0:3b:6b:9b:56:be:3c:5a:f4:34:49:20:03:96:76:d7: e7:0d:11:49:b0:d2:15:d0:07:b4:f3:80:d8:fd:a5:b8:3b:1c: 6c:90:15:ec:ac:03:a0:c8:5f:2d:2d:a9:23:4a:07:83:26:b2: 91:27:49:81:54:0e:16:85:04:45:dd:3f:c2:ea:8b:26:11:29: 63:5e:52:75:3c:2e:de:71:6a:92:07:08:59:84:3d:15:d3:c5: 39:65:8d:46:c3:2a:ca:32:fc:0d:82:dc:0b:cb:5b:c3:9f:a6: f5:2e:23:99:29:b5:d6:d5:c2:f7:e3:71:8b:90:b2:39:52:dc: 58:06:7d:38:67:7c:43:b2:5e:1a:6c:b6:9c:7f:eb:25:60:f0: 0a:43:35:ff:d7:03:4d:4c:41:1f:ac:94:c3:f5:97:31:f8:ac: c9:b7:03:c9:24:7b:e4:ec:48:89:f7:6b:05:34:2b:5a:62:de: 7a:03:35:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjUxMjI3MDMyMTE5WhcNMjYwMTAzMDMyMTE5WjAYMRYwFAYD VQQDDA02OTRmNTBhZi1mYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9GoBFJZwWPy9UajEkw70j/y9yXRN9dG60jcw6ZAG7mzyv1fA4wFyKQuw+fd b3VcddRrx2gvLbgdKJs8znAVJtNSamc+VODyIxXACZl+0X9QORUjT547b89JqjfA xaPRVjOEvZU/jnrDQvbKZ2lPrOvp2aTF5NjRXr7+VhrgkQX3o8ltH5EEN5c0LMrQ 8fFcRAKK3tCqfp4NAJULVbcBAqcFu9U1PFamSXmiEd586904cBJ7bdJT2ZnxuwHl MxTIqswphFP/s7p0IHIAe/EALyP/OMAKKknbZnB6jduU0Sxs8k9XTnqFawa5UFYF sqley/xlnhJMwHPNQpUXbC9tHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPW76WJ nKIo5t4ft3LBWNQr7TGsMB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1kWf3keNewr5OAFkSwOebiKK66cjp/AkftIt0SDRXb82weENOFR+4 3IS9+TgLEXuHJZAgs5F0rlo+S+XF0p3mY8WSMd930qpgF8A7a5tWvjxa9DRJIAOW dtfnDRFJsNIV0Ae084DY/aW4OxxskBXsrAOgyF8tLakjSgeDJrKRJ0mBVA4WhQRF 3T/C6osmESljXlJ1PC7ecWqSBwhZhD0V08U5ZY1GwyrKMvwNgtwLy1vDn6b1LiOZ KbXW1cL343GLkLI5UtxYBn04Z3xDsl4abLacf+slYPAKQzX/1wNNTEEfrJTD9Zcx +KzJtwPJJHvk7EiJ92sFNCtaYt56AzXh -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:05 2025 by rpki-client