This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: XMw/ZXt+hgz2slZDI0o89RC7NLQPhpP3+9jBk8No4cU= Subject key identifier: 35:BA:42:1F:C6:BA:4A:A9:C6:EA:92:F5:32:52:97:79:7C:38:21:A8 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A69 Signing time: Thu 18 Dec 2025 16:14:24 +0000 Manifest this update: Thu 18 Dec 2025 16:14:23 +0000 Manifest next update: Thu 25 Dec 2025 16:14:23 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: 8Z6wHbM9XSx1Mc9d3L4otjEYHmgy+5eL31wEcNdABM0=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: GKqNBD5V71h0LJHoO121osmAczldGj86vre7flmyl/s=) 3: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: eoxU71y8QTEqx+M0m1aW0+InRIR2E5b4rwucrZ2tLw0=) 4: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: byvxwIxUmbdh0bP7R33Ns0I16OD6QTEmSRLJ7M5XZ6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6798 (0x1a8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Dec 18 16:14:23 2025 GMT Not After : Dec 25 16:14:23 2025 GMT Subject: CN=6944285f-9dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d2:82:db:8a:c3:e6:05:05:d3:75:3e:1c:3e: 49:04:3a:98:fa:30:f1:b2:ec:e5:a3:3a:74:68:e0: 69:af:ed:cc:82:b4:ee:ab:66:4c:cf:66:c8:8a:7f: be:c6:aa:ce:04:4f:44:1b:d4:05:b4:71:b1:74:b5: 46:5d:bc:2c:c4:56:c1:18:98:b7:1c:1a:6d:66:2b: 5f:3c:a2:b6:5d:b6:88:2b:69:ec:04:02:a6:23:c1: 7e:4d:f8:65:fb:95:60:d2:1a:20:18:47:d6:ed:ec: bf:e9:da:fa:1a:a9:31:44:e9:e5:c7:43:45:25:31: 82:dd:d7:74:74:21:1a:c1:31:b9:dd:8d:06:8f:80: 03:15:ee:ec:a2:2d:1a:a9:25:01:6e:8d:a4:aa:3a: f6:53:eb:47:b3:3c:be:00:d8:be:9a:f5:39:4e:61: 71:91:23:93:c6:2d:02:66:2c:50:90:8d:9a:72:bb: f2:cd:57:6c:3a:26:03:2d:4b:70:30:54:97:c7:1c: 94:ef:9b:6c:e6:2b:47:69:a4:f7:46:97:23:31:c4: 83:b4:c3:ec:44:10:35:6e:50:0d:1a:8d:85:31:bb: c7:06:1d:63:3d:d4:9e:84:e2:e2:76:95:c0:f8:98: ed:08:59:bd:a3:f4:92:57:7d:53:13:38:16:4e:69: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BA:42:1F:C6:BA:4A:A9:C6:EA:92:F5:32:52:97:79:7C:38:21:A8 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:31:8e:7a:f0:4a:6c:e6:d4:21:03:b0:30:a3:0b:cc:4b:83: 23:ee:81:61:09:99:08:0f:17:82:8f:cd:41:87:32:8a:ce:89: 6a:8d:6a:d6:f6:a4:f5:03:76:13:03:36:2d:03:90:39:3e:b1: da:53:2d:5a:7b:ca:e2:84:f9:9d:e6:35:ad:57:8e:35:f8:37: 03:10:09:8c:8d:92:02:62:ae:35:4c:4c:f3:29:f4:ee:e6:49: 35:5d:cb:fd:1a:a7:5e:49:38:18:3d:65:c9:c9:44:7f:c4:c7: 83:87:85:48:fc:07:68:ba:8c:9b:ed:42:d8:c8:69:48:25:9d: cd:ed:d3:b0:a9:41:95:a2:0d:ca:1a:55:32:3f:c4:66:8b:14: a9:b2:9a:c1:eb:ed:e6:f1:a6:95:45:74:43:f8:48:f3:ec:d7: 9e:76:7b:bb:f7:2b:61:d3:6c:2e:e2:0c:c8:ea:2c:43:27:a1: 3a:23:91:89:2c:d7:28:11:c5:6d:6f:87:df:98:ae:81:42:1b: 05:39:29:3c:2f:29:b3:4f:5f:4f:cb:a5:09:22:05:c4:8c:0c: 0f:c8:98:62:eb:fe:8e:4f:ce:25:c9:f3:85:a3:d6:ab:a8:e3: 9d:c8:64:c4:38:b7:df:70:e1:78:71:1c:8d:b4:02:60:96:94: 80:5e:76:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUxMjE4MTYxNDIzWhcNMjUxMjI1MTYxNDIzWjAYMRYwFAYD VQQDDA02OTQ0Mjg1Zi05ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tKC24rD5gUF03U+HD5JBDqY+jDxsuzlozp0aOBpr+3MgrTuq2ZMz2bIin++ xqrOBE9EG9QFtHGxdLVGXbwsxFbBGJi3HBptZitfPKK2XbaIK2nsBAKmI8F+Tfhl +5Vg0hogGEfW7ey/6dr6GqkxROnlx0NFJTGC3dd0dCEawTG53Y0Gj4ADFe7soi0a qSUBbo2kqjr2U+tHszy+ANi+mvU5TmFxkSOTxi0CZixQkI2acrvyzVdsOiYDLUtw MFSXxxyU75ts5itHaaT3RpcjMcSDtMPsRBA1blANGo2FMbvHBh1jPdSehOLidpXA +JjtCFm9o/SSV31TEzgWTmmZGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDW6Qh/G ukqpxuqS9TJSl3l8OCGoMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtMY568Eps5tQhA7AwowvMS4Mj7oFhCZkIDxeCj81BhzKKzolqjWrW 9qT1A3YTAzYtA5A5PrHaUy1ae8rihPmd5jWtV441+DcDEAmMjZICYq41TEzzKfTu 5kk1Xcv9GqdeSTgYPWXJyUR/xMeDh4VI/Adouoyb7ULYyGlIJZ3N7dOwqUGVog3K GlUyP8RmixSpsprB6+3m8aaVRXRD+Ejz7Neednu79yth02wu4gzI6ixDJ6E6I5GJ LNcoEcVtb4ffmK6BQhsFOSk8LymzT19Py6UJIgXEjAwPyJhi6/6OT84lyfOFo9ar qOOdyGTEOLffcOF4cRyNtAJglpSAXnZH -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:39 2025 by rpki-client