This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: 0yhKeeqYqqWo6UeWbjlJ7t8APJXlLanKVQrxIwFQjbs= Subject key identifier: E3:D1:52:4B:5B:22:51:CF:D0:1C:AE:A8:CE:0D:32:E1:9F:08:42:92 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 09A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 09A0 Signing time: Sat 20 Dec 2025 19:28:32 +0000 Manifest this update: Sat 20 Dec 2025 19:28:32 +0000 Manifest next update: Sat 27 Dec 2025 19:28:32 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: pE0GxNzNV2E5Xbjm5qVRj+8M8IQLgAquLysNQVhBGIA=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Dec 20 19:28:32 2025 GMT Not After : Dec 27 19:28:32 2025 GMT Subject: CN=6946f8e0-ba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:1a:bb:5e:2c:1c:f2:34:43:1f:01:16:2e: 1a:36:cb:c6:26:ea:21:0b:5f:8f:60:44:35:65:42: fd:0a:06:a6:77:33:ca:60:30:9d:04:61:44:db:15: ca:d0:42:ef:71:8b:28:42:30:a8:2e:51:e8:5e:26: 73:23:97:bf:73:19:37:73:bc:6a:4a:aa:78:cd:e0: 53:44:29:93:3e:37:8e:a7:ff:ef:b9:1b:0e:11:f9: d5:a2:c9:46:ad:a6:0f:a7:7c:2d:1d:7d:e0:e1:6c: dc:19:6e:fd:85:4a:04:90:b3:ee:d5:2f:71:61:6d: 9e:ac:a0:48:d9:79:6f:cc:d5:fe:e6:4c:94:6c:e0: b4:db:67:0d:3b:a4:c7:d5:3d:b1:91:fa:55:6d:8b: 70:b1:f3:68:35:75:28:95:20:6f:91:de:6f:1a:96: f6:7b:ab:65:70:c5:61:21:39:1f:a0:ec:89:73:a8: af:aa:c4:cb:86:e4:cd:d2:4b:6a:17:07:b3:4d:d2: 5b:9a:c5:f7:59:cf:56:9d:70:6c:e4:75:88:b9:65: d4:b3:91:50:fe:89:15:91:9f:19:ce:d8:48:71:13: 8f:ca:8d:fb:e8:be:8d:00:8a:e3:c7:cb:2e:ad:dd: bb:49:29:7d:aa:85:a9:9c:38:6e:52:a1:3a:47:57: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D1:52:4B:5B:22:51:CF:D0:1C:AE:A8:CE:0D:32:E1:9F:08:42:92 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7c:fe:e3:79:11:bc:4f:e2:ba:86:02:99:1b:d3:0b:64:78: 9f:c8:79:b8:2c:f2:ce:47:8f:13:66:5a:22:61:95:c5:a9:36: d9:e7:18:5b:95:61:5d:5c:17:cd:9a:30:f9:9e:58:a1:ec:4c: 22:65:90:37:d6:2b:71:c8:bb:1d:41:50:34:00:bf:86:e8:0b: 3d:fd:ee:c6:99:15:14:a6:8b:04:79:3e:5d:c9:e1:95:13:a6: 26:8c:4c:20:bd:b0:66:45:ad:a6:4a:4e:94:4f:8f:4e:84:4d: 22:e8:f3:46:af:64:01:df:4a:66:d3:8f:5c:c8:8c:54:2d:6f: 1a:24:61:fe:db:d3:7a:ca:17:ad:a6:fc:b7:64:19:a4:15:af: 4c:4a:ce:e0:4b:b5:3a:44:3a:2e:4c:eb:54:b1:51:99:89:41: 17:92:fa:41:fd:3c:4d:8c:9b:1e:3c:3f:7c:8e:30:34:f6:ef: 0e:d4:01:94:79:c8:da:1c:64:57:8b:e9:16:de:86:d0:e2:8f: d5:ed:30:1c:63:39:27:71:5b:6b:7f:13:08:ac:81:50:0f:af: 22:d3:44:4e:17:62:0b:f3:89:c8:af:07:14:8f:1e:4f:13:97: da:9e:b6:4a:c1:fd:52:89:39:15:b5:36:8f:03:c3:bd:38:d2: 92:bf:1f:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUxMjIwMTkyODMyWhcNMjUxMjI3MTkyODMyWjAYMRYwFAYD VQQDDA02OTQ2ZjhlMC1iYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuskau14sHPI0Qx8BFi4aNsvGJuohC1+PYEQ1ZUL9CgamdzPKYDCdBGFE2xXK 0ELvcYsoQjCoLlHoXiZzI5e/cxk3c7xqSqp4zeBTRCmTPjeOp//vuRsOEfnVoslG raYPp3wtHX3g4WzcGW79hUoEkLPu1S9xYW2erKBI2XlvzNX+5kyUbOC022cNO6TH 1T2xkfpVbYtwsfNoNXUolSBvkd5vGpb2e6tlcMVhITkfoOyJc6ivqsTLhuTN0ktq FwezTdJbmsX3Wc9WnXBs5HWIuWXUs5FQ/okVkZ8ZzthIcROPyo376L6NAIrjx8su rd27SSl9qoWpnDhuUqE6R1cIDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPRUktb IlHP0ByuqM4NMuGfCEKSMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/fP7jeRG8T+K6hgKZG9MLZHifyHm4LPLOR48TZloiYZXFqTbZ5xhb lWFdXBfNmjD5nlih7EwiZZA31itxyLsdQVA0AL+G6As9/e7GmRUUposEeT5dyeGV E6YmjEwgvbBmRa2mSk6UT49OhE0i6PNGr2QB30pm049cyIxULW8aJGH+29N6yhet pvy3ZBmkFa9MSs7gS7U6RDouTOtUsVGZiUEXkvpB/TxNjJsePD98jjA09u8O1AGU ecjaHGRXi+kW3obQ4o/V7TAcYzkncVtrfxMIrIFQD68i00ROF2IL84nIrwcUjx5P E5fanrZKwf1SiTkVtTaPA8O9ONKSvx8I -----END CERTIFICATE-----Generated at Mon Dec 22 17:24:36 2025 by rpki-client