This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: iYdtNzGOMT9iPCa8RSuPS46ZSYzvwcMAVxPCQxYH53E= Subject key identifier: A4:F4:DB:DD:84:68:FA:F5:A4:09:4D:50:12:5E:0F:73:40:02:50:AC Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 0A0B Signing time: Wed 24 Dec 2025 19:20:22 +0000 Manifest this update: Wed 24 Dec 2025 19:20:22 +0000 Manifest next update: Wed 31 Dec 2025 19:20:22 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: IKgGrGwPwLyMXNp08irtFDW7L++X4q+4mDoxu1fdJwM=) 2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: MTPFNjVRIFfamyxT5rxM+L/QRwsJoQt0tdhl/bAA/SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 19:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Dec 24 19:20:22 2025 GMT Not After : Dec 31 19:20:22 2025 GMT Subject: CN=694c3cf6-4d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:4b:86:08:72:e0:12:bb:ca:82:b1:86:5a: 13:88:34:53:82:e1:4f:1e:45:04:63:19:a1:b5:8f: 10:7d:98:79:02:2e:6e:26:2a:a9:3b:78:f9:b1:b2: 0f:67:74:8f:86:fd:f4:f9:50:ca:8d:16:ce:91:4d: a0:c6:bf:56:14:4a:fa:56:e9:cd:a1:dd:e7:72:c5: 5a:ed:e3:e9:21:f6:72:d5:93:14:19:01:a9:22:9b: 8e:3d:7d:bc:63:c4:53:fe:12:de:d1:4f:a6:6c:d2: 5d:71:fa:19:3b:74:ac:b9:cc:e4:9c:f5:b1:91:e2: c9:c6:a4:95:fa:9d:24:ab:cc:ec:e6:b6:37:33:5b: 8e:2e:b7:ea:45:09:57:14:1f:9f:20:51:3d:dc:ec: 4c:c5:04:7b:a9:f7:10:e7:cb:9f:87:85:c2:45:c1: 06:27:b2:6d:fe:e0:97:68:68:75:df:11:65:6f:84: 9b:2b:4b:7d:72:7e:b2:60:27:79:15:a6:92:e7:88: 9a:71:d8:3d:da:42:92:0a:56:41:49:1d:ca:05:1a: 79:f4:ff:2f:30:05:33:15:92:7f:90:f6:d0:f6:6e: ce:f7:ac:0d:6a:5a:54:8c:7c:0a:8a:95:9e:52:8d: 99:9d:f9:9e:2c:21:78:0a:fc:3c:36:2b:05:a6:0d: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F4:DB:DD:84:68:FA:F5:A4:09:4D:50:12:5E:0F:73:40:02:50:AC X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:38:b7:d1:82:22:25:5d:3c:7e:e3:66:ca:10:d3:8b:3d:c7: 6c:6e:82:12:28:c2:2a:11:82:a2:73:d4:70:d6:12:d3:40:c4: 13:5a:79:7f:da:4b:9b:8f:ff:e3:69:17:ae:dd:32:78:75:d4: bc:17:67:fb:7c:25:f4:36:c4:bb:8c:54:8f:85:dd:a2:08:0b: ce:e6:b6:8e:64:16:c9:5b:a9:04:c1:84:1d:60:fc:2f:51:ed: 5c:f5:88:36:f5:0b:5d:6a:25:7b:af:41:b0:c5:e6:9e:cc:b2: 34:97:df:d9:42:d5:c2:30:f0:aa:f7:8e:17:ae:40:3f:ca:fb: 75:bc:39:03:16:1d:a7:c6:eb:ab:52:9c:a4:05:93:de:9c:7d: f5:34:cf:8e:96:41:cf:4e:a9:39:1c:49:ba:53:0a:36:fc:f9: ac:02:c1:2d:0d:40:d7:a4:c2:1d:f6:89:dc:e5:43:d7:cf:87: fe:53:57:7d:e9:f6:a2:f3:79:d6:bb:79:d8:12:8e:04:c0:e7: bc:1d:6a:d3:fe:ff:82:13:df:f9:15:21:0c:73:f4:e2:bb:d9: 0b:61:fa:cf:04:f6:2e:4c:32:32:38:91:46:7e:fa:d4:21:9c: b6:7a:79:fc:52:c3:e7:5a:c3:55:77:47:ee:78:30:50:0f:de: c0:89:b7:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUxMjI0MTkyMDIyWhcNMjUxMjMxMTkyMDIyWjAYMRYwFAYD VQQDDA02OTRjM2NmNi00ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkhLhghy4BK7yoKxhloTiDRTguFPHkUEYxmhtY8QfZh5Ai5uJiqpO3j5sbIP Z3SPhv30+VDKjRbOkU2gxr9WFEr6VunNod3ncsVa7ePpIfZy1ZMUGQGpIpuOPX28 Y8RT/hLe0U+mbNJdcfoZO3SsuczknPWxkeLJxqSV+p0kq8zs5rY3M1uOLrfqRQlX FB+fIFE93OxMxQR7qfcQ58ufh4XCRcEGJ7Jt/uCXaGh13xFlb4SbK0t9cn6yYCd5 FaaS54iacdg92kKSClZBSR3KBRp59P8vMAUzFZJ/kPbQ9m7O96wNalpUjHwKipWe Uo2ZnfmeLCF4Cvw8NisFpg1q/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKT0292E aPr1pAlNUBJeD3NAAlCsMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxOLfRgiIlXTx+42bKENOLPcdsboISKMIqEYKic9Rw1hLTQMQTWnl/ 2kubj//jaReu3TJ4ddS8F2f7fCX0NsS7jFSPhd2iCAvO5raOZBbJW6kEwYQdYPwv Ue1c9Yg29QtdaiV7r0GwxeaezLI0l9/ZQtXCMPCq944XrkA/yvt1vDkDFh2nxuur UpykBZPenH31NM+OlkHPTqk5HEm6Uwo2/PmsAsEtDUDXpMId9onc5UPXz4f+U1d9 6fai83nWu3nYEo4EwOe8HWrT/v+CE9/5FSEMc/Tiu9kLYfrPBPYuTDIyOJFGfvrU IZy2enn8UsPnWsNVd0fueDBQD97Aibd3 -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:48 2025 by rpki-client