This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: VzxomUIPzkMn+u51NA+0nF1cjEhIQDSZzHWgLTuT4vI= Subject key identifier: BE:29:83:4E:98:F8:69:6B:E0:47:69:F0:0D:57:AD:99:DF:9C:BD:4C Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 0553 Signing time: Thu 18 Dec 2025 22:45:52 +0000 Manifest this update: Thu 18 Dec 2025 22:45:51 +0000 Manifest next update: Thu 25 Dec 2025 22:45:51 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: dlKO3TlLnF+0z/nPdR4hkOwIfuvlsZEKVSuVeFZz2c0=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: V9gxitcASEhBtZ5mFM0D3uOUUMEJz8JM7gRGecF35Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Dec 18 22:45:51 2025 GMT Not After : Dec 25 22:45:51 2025 GMT Subject: CN=69448420-5fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:bf:6a:85:e3:57:48:7f:b6:00:42:be:27: a2:86:71:21:7e:ff:36:48:fe:07:c1:f4:c0:73:23: 2c:be:18:2b:ca:3c:11:97:61:e1:bf:11:d2:4d:a0: c2:67:23:f2:b0:71:a1:c3:a0:ef:fb:98:a3:a3:0e: 0d:cc:63:4c:85:ec:7a:65:5a:f3:c1:44:5d:a6:7c: 20:60:77:cd:6d:64:94:04:79:4b:a9:16:20:99:fb: 5e:22:93:e3:bb:c3:16:ad:e2:61:5a:2b:aa:f5:59: 3f:66:de:51:33:3c:19:22:ee:1e:8d:4f:6c:60:e1: 29:b9:cb:11:55:0b:75:68:34:50:9c:1f:cb:e5:0f: c3:6e:ff:0e:86:16:a4:43:e3:f1:79:50:e4:2b:55: 61:bb:08:26:66:14:3e:1b:1d:6d:0a:4f:6d:6b:69: 92:75:20:8d:9a:18:10:43:7f:75:0a:7e:e9:02:46: df:49:97:0e:bf:d3:69:a8:54:a6:3b:92:58:56:9e: 6b:b6:02:5f:7a:15:d8:62:93:97:32:f7:11:a4:f7: b0:11:b2:c4:3e:25:82:61:31:0a:84:36:6b:2a:b9: fd:73:20:66:e4:5b:55:3d:46:70:f8:27:54:00:c6: f1:46:c4:fa:04:32:a0:3e:d7:65:1e:16:93:9f:cf: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:83:4E:98:F8:69:6B:E0:47:69:F0:0D:57:AD:99:DF:9C:BD:4C X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:95:ef:2b:23:5c:1a:23:a6:a5:d7:3c:9b:58:2b:70:02:5f: 5a:cc:36:df:29:bb:a2:7c:2f:35:93:43:6b:d2:9f:89:f2:e6: ca:d7:da:82:86:1d:48:6c:6d:ce:f8:2e:11:fb:af:49:8a:a9: 50:3b:32:5e:ed:e1:a4:c4:3d:1e:7f:20:03:01:20:0c:34:6a: a5:2c:3f:5c:e1:e5:a2:47:d7:8c:c4:00:e8:cf:92:b5:3d:5d: 35:9a:a1:04:c4:80:4d:4e:e7:0a:3e:c2:28:ce:7d:16:8d:e2: 4f:78:7b:e2:49:e5:39:b9:8f:e5:2b:de:26:69:6b:7c:89:37: 65:43:ad:43:e3:d9:f8:90:b7:9b:af:5a:83:09:80:da:09:ff: ae:b5:13:4f:4f:8a:5d:2c:7e:15:82:3b:46:b0:1f:0a:fa:92: 53:6c:bd:65:55:c6:34:76:5e:5d:9c:e6:52:a6:b8:cf:23:17: ef:db:29:84:a4:2c:bb:31:38:83:99:86:33:b1:6e:ae:0c:c9: a2:e2:8d:57:01:fb:e0:42:ec:58:4b:ef:e6:b5:09:0a:c2:b0: 97:f4:d1:6b:b0:9a:7c:ef:a8:22:64:2d:5b:99:d1:d4:7a:02: e6:9f:e1:d7:56:09:68:38:70:11:70:6b:05:4f:a2:94:a3:21: eb:b2:2c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUxMjE4MjI0NTUxWhcNMjUxMjI1MjI0NTUxWjAYMRYwFAYD VQQDDA02OTQ0ODQyMC01ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZe/aoXjV0h/tgBCvieihnEhfv82SP4HwfTAcyMsvhgryjwRl2HhvxHSTaDC ZyPysHGhw6Dv+5ijow4NzGNMhex6ZVrzwURdpnwgYHfNbWSUBHlLqRYgmfteIpPj u8MWreJhWiuq9Vk/Zt5RMzwZIu4ejU9sYOEpucsRVQt1aDRQnB/L5Q/Dbv8Ohhak Q+PxeVDkK1VhuwgmZhQ+Gx1tCk9ta2mSdSCNmhgQQ391Cn7pAkbfSZcOv9NpqFSm O5JYVp5rtgJfehXYYpOXMvcRpPewEbLEPiWCYTEKhDZrKrn9cyBm5FtVPUZw+CdU AMbxRsT6BDKgPtdlHhaTn8/hBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4pg06Y +Glr4Edp8A1XrZnfnL1MMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJle8rI1waI6al1zybWCtwAl9azDbfKbuifC81k0Nr0p+J8ubK19qC hh1IbG3O+C4R+69JiqlQOzJe7eGkxD0efyADASAMNGqlLD9c4eWiR9eMxADoz5K1 PV01mqEExIBNTucKPsIozn0WjeJPeHviSeU5uY/lK94maWt8iTdlQ61D49n4kLeb r1qDCYDaCf+utRNPT4pdLH4VgjtGsB8K+pJTbL1lVcY0dl5dnOZSprjPIxfv2ymE pCy7MTiDmYYzsW6uDMmi4o1XAfvgQuxYS+/mtQkKwrCX9NFrsJp876giZC1bmdHU egLmn+HXVgloOHARcGsFT6KUoyHrsizY -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:04 2025 by rpki-client