This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: FtKo9Mnpw+fBJhPqEFhp3zsrAIJEf6A7wlCb3mEJTRs= Subject key identifier: F7:E6:7C:6F:4D:F4:9E:2B:15:73:B5:0A:A3:52:F9:F3:C1:A0:03:ED Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: 0113 Signing time: Fri 19 Dec 2025 04:03:11 +0000 Manifest this update: Fri 19 Dec 2025 04:03:10 +0000 Manifest next update: Fri 26 Dec 2025 04:03:10 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: sawm0bdH3uLNIiv3Rdmh6aOYthEvmWH69MQ1F5+0fbs=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Dec 19 04:03:10 2025 GMT Not After : Dec 26 04:03:10 2025 GMT Subject: CN=6944ce7e-e0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9c:06:8d:fd:7d:b0:d4:25:d5:ae:f5:9e:82: 89:8d:28:0e:a5:4c:a5:ca:21:8a:33:9a:00:4a:6c: 87:88:a5:25:7a:16:e0:b5:6f:1b:75:c8:11:9a:64: bd:2f:ad:44:e9:8b:3e:0a:e0:3d:14:7d:37:06:2c: 3d:f7:67:07:68:48:c2:fa:fb:74:fa:66:5a:d4:3e: 1e:cf:78:83:21:e4:40:d1:05:76:99:3d:14:76:a4: b4:34:80:f0:a2:c4:18:61:09:24:fb:60:0e:af:c7: bb:99:70:88:22:9a:9f:a3:60:6c:69:e6:06:23:81: ed:ea:db:c4:66:c9:f7:23:08:8e:98:3b:98:33:cd: 7b:af:ef:f0:2f:b5:4c:47:b8:dc:e0:a9:bc:cc:ce: 40:2d:14:74:e4:ce:34:df:34:cc:cd:5b:c9:24:ee: 33:6f:a9:71:ff:66:43:44:06:57:8a:77:06:87:35: a7:9a:bd:9c:e4:4b:6b:2d:15:3a:58:a8:78:f2:1f: 88:7c:b0:54:5b:46:4e:e9:8b:1c:6e:13:98:92:cf: 75:eb:9e:fb:95:ee:f4:2a:8c:d2:77:89:ee:e7:51: 01:be:aa:5d:e0:6f:c4:9c:80:ea:c1:d9:a2:46:1d: 30:6c:e9:4b:69:5c:d9:f8:54:e7:6c:eb:3e:bc:9d: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E6:7C:6F:4D:F4:9E:2B:15:73:B5:0A:A3:52:F9:F3:C1:A0:03:ED X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ff:d1:ca:4f:3b:35:42:c9:d2:02:d1:56:a3:ce:22:88:d3: 9b:14:23:3f:34:21:16:24:2e:99:bc:dc:39:da:ea:db:8b:77: 27:6d:fc:63:7d:94:da:9c:cc:0e:ab:48:ab:fd:66:80:b3:13: 6d:8d:17:6f:ea:9d:83:b9:94:c3:10:3e:db:f1:2c:38:ff:61: 26:f0:4b:07:34:0c:46:b9:8a:c2:4a:c1:77:b5:c7:cf:e6:8f: eb:91:57:2b:ca:1d:c6:8f:7d:8a:37:d8:0c:bb:bc:f2:00:18: f2:34:79:63:6e:8c:ba:d8:b8:cc:7c:03:73:5d:77:7a:aa:a7: 9e:2d:98:14:a8:c9:dc:93:89:3c:96:43:b5:66:69:65:2b:b3: 36:45:d2:12:cc:cc:b9:34:98:41:a5:05:e8:85:31:55:4b:83: c2:d1:f9:58:5d:7d:68:d5:b9:a9:3b:1f:3a:86:27:3c:97:bc: a1:2e:14:2e:e7:2b:7e:12:77:66:90:4f:94:15:50:02:20:a1: e2:3e:9f:00:97:56:e2:18:8e:7e:56:6e:e8:9a:68:a1:43:66: c9:6c:19:8c:fb:88:92:0d:a3:5f:26:7b:46:61:e6:b1:f0:2a: 98:05:22:32:00:bc:43:09:dd:5a:f1:b9:79:df:b8:cd:85:75: de:45:c3:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUxMjE5MDQwMzEwWhcNMjUxMjI2MDQwMzEwWjAYMRYwFAYD VQQDDA02OTQ0Y2U3ZS1lMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JwGjf19sNQl1a71noKJjSgOpUylyiGKM5oASmyHiKUlehbgtW8bdcgRmmS9 L61E6Ys+CuA9FH03Biw992cHaEjC+vt0+mZa1D4ez3iDIeRA0QV2mT0UdqS0NIDw osQYYQkk+2AOr8e7mXCIIpqfo2BsaeYGI4Ht6tvEZsn3IwiOmDuYM817r+/wL7VM R7jc4Km8zM5ALRR05M403zTMzVvJJO4zb6lx/2ZDRAZXincGhzWnmr2c5EtrLRU6 WKh48h+IfLBUW0ZO6YscbhOYks916577le70KozSd4nu51EBvqpd4G/EnIDqwdmi Rh0wbOlLaVzZ+FTnbOs+vJ3QKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfmfG9N 9J4rFXO1CqNS+fPBoAPtMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn WXpYQXRGNW1VWHRRaTROUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr/9HKTzs1QsnSAtFWo84iiNObFCM/NCEWJC6ZvNw52urbi3cnbfxj fZTanMwOq0ir/WaAsxNtjRdv6p2DuZTDED7b8Sw4/2Em8EsHNAxGuYrCSsF3tcfP 5o/rkVcryh3Gj32KN9gMu7zyABjyNHljboy62LjMfANzXXd6qqeeLZgUqMnck4k8 lkO1ZmllK7M2RdISzMy5NJhBpQXohTFVS4PC0flYXX1o1bmpOx86hic8l7yhLhQu 5yt+EndmkE+UFVACIKHiPp8Al1biGI5+Vm7ommihQ2bJbBmM+4iSDaNfJntGYeax 8CqYBSIyALxDCd1a8bl537jNhXXeRcMm -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:46 2025 by rpki-client