This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: U11ezB56yMY0PjrWRoyyUiXwLxMrtvRhf+xTl/Dxhpk= Subject key identifier: 68:93:52:05:EF:8A:37:2E:41:0C:63:3C:8E:C6:69:FA:77:04:93:22 Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 0249 Signing time: Sun 21 Dec 2025 01:01:13 +0000 Manifest this update: Sun 21 Dec 2025 01:01:12 +0000 Manifest next update: Sun 28 Dec 2025 01:01:12 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: Up9oezeynOTnKokMx/Hgct5reIs8DTyRCLGDopjBx5w=) 2: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: PGJbQnjc1bTQtRJhtYYqM6Jzz/Z0WeIug83GlsZ1DPI=) 3: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: guoDsfCdlPfgkYSScjR/9hRsT4QBuvGrmx7XsTxsYOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: Dec 21 01:01:12 2025 GMT Not After : Dec 28 01:01:12 2025 GMT Subject: CN=694746d8-bb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fe:46:7c:2f:d6:07:b3:81:f0:75:ad:f4:ba: 47:9b:06:47:d6:b0:d3:20:b9:9d:26:11:94:45:da: ef:83:73:99:5f:b5:04:3b:5f:62:74:9e:43:d0:b3: c8:b9:62:2d:dc:1e:97:63:7c:66:08:5e:0b:3e:a7: 89:0c:41:a6:ac:a6:12:7c:ac:f5:6a:30:11:e5:2a: a0:5a:0c:3d:8e:8c:67:c2:8a:22:8c:ba:ad:88:55: ed:60:2e:3d:b4:2c:bb:01:a6:8a:27:30:cf:a6:c5: ae:95:61:c1:48:0e:63:09:e5:1e:c2:0c:e5:39:64: 08:18:88:8c:72:e2:ff:a9:b7:df:2e:37:b0:41:63: 26:b4:56:10:e8:45:a2:47:16:33:20:54:e3:ab:3e: 6a:e8:71:09:82:ad:86:7b:0e:1b:f8:a1:78:d9:66: 27:bb:17:73:78:f5:9e:c7:3d:1d:04:e1:05:f6:43: d4:b8:05:c2:e9:d7:7e:f3:57:cd:fb:0c:56:21:0e: d4:42:5e:dd:76:a6:a4:5e:97:98:f8:84:a1:9a:91: 84:65:73:a5:0e:97:5f:fc:6c:49:87:64:2c:b8:e6: 59:7e:fb:68:83:62:e1:2d:d4:70:b7:3e:c9:e7:91: ce:d4:69:59:af:b3:af:b0:3a:98:99:8a:dd:34:f0: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:93:52:05:EF:8A:37:2E:41:0C:63:3C:8E:C6:69:FA:77:04:93:22 X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a4:14:8d:17:87:23:49:a9:81:11:44:b3:13:12:e8:51:10: 6f:4c:c2:84:ac:27:ba:8c:2b:02:d0:27:dd:a8:10:4f:29:10: 07:85:46:61:e6:db:88:5e:d5:cb:86:48:38:9a:58:82:94:4f: 5a:6e:da:79:24:bf:f1:04:bc:f4:d4:b6:8b:4b:15:e8:d4:0a: 40:cb:68:60:b3:fa:f2:22:e7:5e:73:78:02:1d:2b:be:e5:16: 12:d8:84:f0:53:56:7b:7a:a9:00:97:07:5d:bb:c6:f9:a5:38: 0e:70:ee:b6:28:9a:26:e6:80:a9:83:69:d2:9e:af:0c:aa:1b: 95:d4:b8:46:e7:1e:ca:11:82:c5:bc:c3:71:3d:39:46:51:e2: 67:7b:a3:e5:34:bf:a0:d7:c6:de:a2:f0:f1:89:69:c8:0d:be: 65:42:d8:1c:44:7a:14:51:cc:2f:32:72:6c:6b:6e:e9:db:1c: fd:32:24:89:f1:9f:57:a0:fd:4f:70:37:54:f6:72:95:bd:45: 62:73:3a:ae:61:ec:2a:75:2d:e9:ba:a0:db:2c:73:af:e4:41: e2:35:b4:4c:1f:26:0b:04:c9:b7:1e:11:dd:31:71:31:03:38: 61:e7:03:4e:56:8a:1d:00:c9:e8:7d:77:5d:21:ee:ce:08:de: f3:0f:d2:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjUxMjIxMDEwMTEyWhcNMjUxMjI4MDEwMTEyWjAYMRYwFAYD VQQDDA02OTQ3NDZkOC1iYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6f5GfC/WB7OB8HWt9LpHmwZH1rDTILmdJhGURdrvg3OZX7UEO19idJ5D0LPI uWIt3B6XY3xmCF4LPqeJDEGmrKYSfKz1ajAR5SqgWgw9joxnwooijLqtiFXtYC49 tCy7AaaKJzDPpsWulWHBSA5jCeUewgzlOWQIGIiMcuL/qbffLjewQWMmtFYQ6EWi RxYzIFTjqz5q6HEJgq2Gew4b+KF42WYnuxdzePWexz0dBOEF9kPUuAXC6dd+81fN +wxWIQ7UQl7ddqakXpeY+IShmpGEZXOlDpdf/GxJh2QsuOZZfvtog2LhLdRwtz7J 55HO1GlZr7OvsDqYmYrdNPCMAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiTUgXv ijcuQQxjPI7Gafp3BJMiMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPpBSNF4cjSamBEUSzExLoURBvTMKErCe6jCsC0CfdqBBPKRAHhUZh 5tuIXtXLhkg4mliClE9abtp5JL/xBLz01LaLSxXo1ApAy2hgs/ryIudec3gCHSu+ 5RYS2ITwU1Z7eqkAlwddu8b5pTgOcO62KJom5oCpg2nSnq8MqhuV1LhG5x7KEYLF vMNxPTlGUeJne6PlNL+g18beovDxiWnIDb5lQtgcRHoUUcwvMnJsa27p2xz9MiSJ 8Z9XoP1PcDdU9nKVvUViczquYewqdS3puqDbLHOv5EHiNbRMHyYLBMm3HhHdMXEx Azhh5wNOVoodAMnofXddIe7OCN7zD9IJ -----END CERTIFICATE-----Generated at Mon Dec 22 11:00:35 2025 by rpki-client