This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json) Hash identifier: N3dhvDF5P8YhsraJ9RfsXFfzb6X7r+xDh4b6oYzNCzI= Subject key identifier: 0E:C6:9C:2E:EC:9D:0A:B3:77:15:9F:CE:C4:7F:9C:DF:97:02:8B:9C Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft Manifest number: 0677 Signing time: Tue 16 Dec 2025 22:00:26 +0000 Manifest this update: Tue 16 Dec 2025 22:00:26 +0000 Manifest next update: Tue 23 Dec 2025 22:00:26 +0000 Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: lmQt+AoXyZBmHUhVqP/lqXXh2RENutUXdhSB42jmMKw=) 2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: xXHY7bwGXSIeSyRjTBvDjww0CmRh6iG7/BTMHshpS7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Validity Not Before: Dec 16 22:00:26 2025 GMT Not After : Dec 23 22:00:26 2025 GMT Subject: CN=6941d67a-fce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:53:3a:43:cd:13:a0:e7:29:f4:ee:3b:44: 11:d7:8b:ec:0f:48:98:97:fe:98:ab:ee:e8:8a:34: a6:bd:53:8d:e8:34:9b:b7:9f:8a:42:ed:ae:38:34: 94:63:88:06:4f:6c:77:80:ee:7c:96:9b:9c:aa:c7: 86:8d:af:e2:93:86:13:22:02:bd:ce:a1:b4:af:e2: 3a:a8:3d:bc:e8:7b:bc:10:f9:32:73:00:0f:17:b4: da:b6:0e:9f:17:e1:72:25:81:f9:07:d1:b2:61:90: c2:27:e3:8d:c6:63:c9:8e:e2:0a:6a:7f:92:4e:2d: 45:c7:5d:4c:ad:40:b7:1a:c5:23:25:b9:ca:75:f2: e4:0b:0e:d0:13:ae:72:f7:5f:5d:5c:55:f6:31:53: 8e:c2:18:ec:44:61:b4:cc:6b:cd:66:07:f2:e2:93: 32:c3:47:4c:f0:51:52:63:cf:f4:50:52:75:a5:cd: 78:3c:b0:51:2a:1e:7f:0e:9f:33:28:00:bb:c6:4c: 96:79:1e:26:60:35:77:00:a2:c7:b5:fb:d1:95:8d: 0e:25:09:40:00:cf:30:e0:fd:0f:44:dc:a3:0d:c4: 63:b2:24:3c:3b:52:85:dc:7a:33:4c:c2:ee:77:18: 05:b7:2b:22:b5:df:a7:e4:22:30:10:0d:e0:3a:97: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:9C:2E:EC:9D:0A:B3:77:15:9F:CE:C4:7F:9C:DF:97:02:8B:9C X509v3 Authority Key Identifier: keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:32:4d:90:f5:3b:3d:6d:55:b1:5c:01:e1:3b:3b:2b:f9:b9: 4a:00:c1:54:e1:c9:b2:f4:aa:b8:1a:87:3b:50:3e:ec:b5:ba: f3:4d:da:99:60:23:39:f8:3e:42:b4:0c:e0:9a:60:9c:24:d2: 3a:d4:8e:59:04:65:a7:40:45:8e:45:34:ae:95:21:9d:2c:1b: 37:cd:93:39:d0:97:7f:3f:26:ca:2b:f7:1b:db:d5:78:ea:f5: 35:c3:a5:43:60:a9:e4:d1:ab:4f:76:66:f9:31:6b:ff:9c:b2: f7:d3:c5:23:e9:d4:42:de:b7:08:ee:02:91:10:c2:80:2e:2c: e8:bb:2b:0a:7a:80:5c:b6:78:99:91:07:96:ca:8b:06:e8:0c: e9:30:e2:e6:ea:89:c4:7b:b0:21:3b:1d:be:89:1e:fd:82:24: f3:8c:a7:46:97:e8:a3:81:da:f8:43:ff:6a:b9:99:6b:7c:35: ee:68:48:5d:89:00:b4:45:ad:18:8c:51:1c:8c:64:4b:35:5d: 9f:c8:0a:81:af:72:40:75:3f:cc:91:e3:1d:6d:a3:20:d4:03: 4b:d4:3f:01:b8:36:13:ec:8e:55:fb:9d:17:a1:e6:09:73:5e: 7d:e1:47:5a:17:bd:b4:bc:69:df:b5:df:a6:a3:e4:7e:fe:83: f8:14:73:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCQUQxMTAvBgNVBAUTKDgxRkZGMjE1MDA1REExQUZBQzVFMjRBQkJDQzAzQ0E3 MEY2NjRCNTYwHhcNMjUxMjE2MjIwMDI2WhcNMjUxMjIzMjIwMDI2WjAYMRYwFAYD VQQDDA02OTQxZDY3YS1mY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KBTOkPNE6DnKfTuO0QR14vsD0iYl/6Yq+7oijSmvVON6DSbt5+KQu2uODSU Y4gGT2x3gO58lpucqseGja/ik4YTIgK9zqG0r+I6qD286Hu8EPkycwAPF7Tatg6f F+FyJYH5B9GyYZDCJ+ONxmPJjuIKan+STi1Fx11MrUC3GsUjJbnKdfLkCw7QE65y 919dXFX2MVOOwhjsRGG0zGvNZgfy4pMyw0dM8FFSY8/0UFJ1pc14PLBRKh5/Dp8z KAC7xkyWeR4mYDV3AKLHtfvRlY0OJQlAAM8w4P0PRNyjDcRjsiQ8O1KF3HozTMLu dxgFtysitd+n5CIwEA3gOpetcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7GnC7s nQqzdxWfzsR/nN+XAoucMB8GA1UdIwQYMBaAFIH/8hUAXaGvrF4kq7zAPKcPZktW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUJBRC81MEQ5MUU2NkEz NDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9hLXNYaVNydk1BOHB3OW1T MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmX3lGUUJkb2Etc1hpU3J2TUE4cHc5bVMxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUJBRC81MEQ5MUU2NkEzNDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9h LXNYaVNydk1BOHB3OW1TMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBMk2Q9Ts9bVWxXAHhOzsr+blKAMFU4cmy9Kq4Goc7UD7stbrzTdqZ YCM5+D5CtAzgmmCcJNI61I5ZBGWnQEWORTSulSGdLBs3zZM50Jd/PybKK/cb29V4 6vU1w6VDYKnk0atPdmb5MWv/nLL308Uj6dRC3rcI7gKREMKALizouysKeoBctniZ kQeWyosG6AzpMOLm6onEe7AhOx2+iR79giTzjKdGl+ijgdr4Q/9quZlrfDXuaEhd iQC0Ra0YjFEcjGRLNV2fyAqBr3JAdT/MkeMdbaMg1ANL1D8BuDYT7I5V+50XoeYJ c1594UdaF720vGnftd+mo+R+/oP4FHML -----END CERTIFICATE-----Generated at Wed Dec 17 13:13:43 2025 by rpki-client