This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: J8IzM5nPF1yKd5kmXqNOnBrW5vDIL9cvJ6+cim9Txfs= Subject key identifier: E4:3A:E8:DB:8B:B8:33:7D:E6:15:4D:39:5F:A2:4D:44:1D:10:EB:77 Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 0706 Signing time: Sat 20 Dec 2025 19:54:33 +0000 Manifest this update: Sat 20 Dec 2025 19:54:32 +0000 Manifest next update: Sat 27 Dec 2025 19:54:32 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: oEaFsAAEImv/V89hwNB4TCBqm2L04na4uiYJYRJyaRk=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: 8hBGvOyNwxB7qMibVDGpuRU5HevQ+Tcv9ZjJM79y8+w=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: s8i5IxWnvTImsz9H5D4MuEQAm14mPHlkRay9ZZj+Qsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Dec 20 19:54:32 2025 GMT Not After : Dec 27 19:54:32 2025 GMT Subject: CN=6946fef8-d20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:22:9f:88:6b:f5:85:b0:a5:54:f2:56:cf: 8e:4e:b5:a1:66:35:74:76:15:06:ed:39:8f:0c:d4: 7c:66:44:f7:9e:c9:04:64:f8:dd:34:eb:27:85:11: 22:80:b3:f3:79:a5:82:bf:61:f9:be:19:a9:06:b2: bf:53:02:05:8e:00:50:90:83:86:b6:01:50:d6:b1: e7:75:87:35:3d:a4:4e:2d:0b:00:a9:83:74:b0:64: 61:3f:36:3d:76:98:45:14:dc:02:25:9e:73:2b:2e: 62:da:f5:e2:11:4e:e9:35:3d:27:5d:87:4a:cb:ad: b2:96:a7:7d:2e:6c:aa:bb:dc:f5:88:a4:23:8a:76: e6:71:2f:48:b9:bb:f1:75:99:1d:50:ca:22:f4:14: 62:02:06:5e:fd:18:da:85:e0:33:f1:8f:ef:74:ac: 37:23:22:56:a3:66:a7:9d:48:e3:17:21:64:2f:6c: ff:e4:d1:ce:ac:76:eb:ce:1c:a5:26:05:cd:e6:7e: aa:f5:f8:c5:1c:4f:ec:7a:78:ac:dd:1f:02:9b:3c: f7:4d:7e:1a:7b:02:0e:de:88:c0:fb:76:2a:0d:0f: 22:2a:5c:fc:dd:57:ff:6d:5b:fc:70:0c:c1:6c:23: 26:7b:73:7c:bf:84:3d:bb:aa:e8:e1:91:54:85:b8: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3A:E8:DB:8B:B8:33:7D:E6:15:4D:39:5F:A2:4D:44:1D:10:EB:77 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9e:59:f2:a1:e7:92:e3:4d:ac:6f:4e:9d:d7:e7:24:6f:d5: 85:93:a0:15:5a:1b:89:58:8d:31:b9:be:b2:87:7a:c9:19:91: c0:df:bd:3a:4e:23:21:ba:ed:1a:26:51:59:33:b3:95:2f:ff: b4:2d:a6:5a:15:3d:4e:ee:c4:b0:16:06:8f:83:41:60:a6:e5: f1:2b:f9:a8:46:e4:14:86:37:ec:dc:fb:85:a7:54:d2:d4:6d: ab:91:45:1a:c4:7a:1a:cf:5e:58:38:8c:70:28:4d:85:d2:e6: 9f:8a:15:0b:fa:8e:7f:86:cb:01:47:dc:1e:70:a8:17:a2:60: 50:11:30:49:81:a7:2d:54:00:d4:ed:38:d7:3f:9e:40:c0:5a: ce:90:36:33:f0:c6:c6:95:86:3d:7d:50:ce:e8:2c:10:06:92: ed:6c:fd:e3:81:53:4a:72:97:58:37:84:29:ef:5b:9b:98:c9: da:ca:33:bb:d3:ed:d3:0c:3e:1f:80:10:6b:c5:47:78:e9:30: 7b:73:1c:68:ec:a9:9f:67:69:7a:4a:2d:4b:17:a7:97:71:15: ea:4a:c8:2d:19:7f:79:6e:e2:bf:b8:a2:a0:a2:1a:8e:d9:25: 46:b2:66:80:35:f6:48:d2:23:f4:05:57:62:f5:ab:25:a1:63: 09:44:d1:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUxMjIwMTk1NDMyWhcNMjUxMjI3MTk1NDMyWjAYMRYwFAYD VQQDDA02OTQ2ZmVmOC1kMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApL4in4hr9YWwpVTyVs+OTrWhZjV0dhUG7TmPDNR8ZkT3nskEZPjdNOsnhREi gLPzeaWCv2H5vhmpBrK/UwIFjgBQkIOGtgFQ1rHndYc1PaROLQsAqYN0sGRhPzY9 dphFFNwCJZ5zKy5i2vXiEU7pNT0nXYdKy62ylqd9Lmyqu9z1iKQjinbmcS9Iubvx dZkdUMoi9BRiAgZe/RjaheAz8Y/vdKw3IyJWo2annUjjFyFkL2z/5NHOrHbrzhyl JgXN5n6q9fjFHE/senis3R8Cmzz3TX4aewIO3ojA+3YqDQ8iKlz83Vf/bVv8cAzB bCMme3N8v4Q9u6ro4ZFUhbh7WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ66NuL uDN95hVNOV+iTUQdEOt3MB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnnlnyoeeS402sb06d1+ckb9WFk6AVWhuJWI0xub6yh3rJGZHA3706 TiMhuu0aJlFZM7OVL/+0LaZaFT1O7sSwFgaPg0FgpuXxK/moRuQUhjfs3PuFp1TS 1G2rkUUaxHoaz15YOIxwKE2F0uafihUL+o5/hssBR9wecKgXomBQETBJgactVADU 7TjXP55AwFrOkDYz8MbGlYY9fVDO6CwQBpLtbP3jgVNKcpdYN4Qp71ubmMnayjO7 0+3TDD4fgBBrxUd46TB7cxxo7KmfZ2l6Si1LF6eXcRXqSsgtGX95buK/uKKgohqO 2SVGsmaANfZI0iP0BVdi9asloWMJRNEf -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:55 2025 by rpki-client