This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: scYUfxUK79YgT0wyGA8Q/f2w8wsoxC3H4utDVp9KRMU= Subject key identifier: BA:60:13:83:4C:B3:6D:6C:63:70:D1:AD:87:7C:A3:93:49:34:82:2E Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 6D Signing time: Fri 19 Dec 2025 05:54:44 +0000 Manifest this update: Fri 19 Dec 2025 05:54:43 +0000 Manifest next update: Fri 26 Dec 2025 05:54:43 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: GILxXy2GIziK9zojg+YIWb33sNTyWOk8tL2iY7eucHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Dec 19 05:54:43 2025 GMT Not After : Dec 26 05:54:43 2025 GMT Subject: CN=6944e8a4-5018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:3f:a4:83:91:8b:53:be:a3:d0:3f:46:af: 30:ff:33:2c:e1:bc:7e:5d:35:19:54:fa:9e:eb:a5: 08:23:ed:ed:90:b4:01:9f:4d:a6:35:70:8d:11:84: 01:22:b0:b0:54:a2:33:91:c0:14:6c:8c:20:37:8a: bf:22:34:a1:f4:9e:9e:09:7c:20:17:da:b5:a4:2e: 95:23:2a:c8:1f:0f:85:18:2d:8c:46:41:52:64:ab: ff:52:4e:59:40:59:5a:30:db:65:ae:42:76:2b:66: 3b:d1:d8:fd:4d:1e:b1:ca:80:e8:e7:ef:1d:45:0d: 81:36:00:db:6e:ec:d8:44:0c:60:40:c2:d0:89:9c: a9:03:15:cd:1f:0e:85:1b:1f:b8:7f:69:76:aa:7c: 4b:73:f1:1e:71:da:97:15:9e:2b:f6:f5:f9:51:e3: 5e:6b:f5:d0:80:a0:04:5b:dc:2a:e4:b1:98:5f:81: 98:5c:9b:96:ff:ca:84:d8:2e:d8:dd:40:0f:a9:9c: d4:e2:67:34:58:b4:08:d3:4c:96:bb:cd:54:b4:2e: 84:f0:18:c1:fd:7e:5b:e7:c7:b7:eb:dd:a6:e9:53: 35:16:e4:38:a5:60:c2:21:51:1a:bd:4b:ce:93:78: b8:5d:44:da:3f:4b:ff:80:b7:b2:f0:87:d8:90:98: 07:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:60:13:83:4C:B3:6D:6C:63:70:D1:AD:87:7C:A3:93:49:34:82:2E X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:33:1e:ac:63:72:bb:59:e3:0f:94:02:28:3c:c2:bf:f2:9c: ca:ae:74:1b:a8:27:bc:c2:63:fd:c9:e0:72:81:31:80:16:6f: 99:8a:88:1c:4b:66:68:f3:26:53:4c:b4:51:4d:65:65:6a:da: 38:b7:6a:28:e1:91:dd:d8:86:22:75:f1:51:65:5f:50:37:84: 71:42:a3:02:b4:75:86:48:02:1a:2d:4e:05:67:c0:ae:e7:fe: 4d:59:c9:e1:be:e2:a1:98:c4:12:4d:84:17:ae:e0:86:5f:88: 26:53:c0:8a:8b:d0:1d:95:f4:fd:e0:ad:be:15:60:ff:0f:99: f9:25:0b:9b:26:3b:e3:0c:92:61:41:34:0d:05:d1:e2:66:c9: 1c:29:9c:09:7d:fd:c4:1c:b8:25:a6:47:e4:7f:15:da:cc:76: 34:5b:0b:7d:f6:06:98:d2:1c:83:b1:6c:96:ba:bb:41:50:9f: d2:5e:04:19:72:49:dc:d8:c3:f8:42:8a:2d:67:33:41:71:35: 3a:9f:8a:3b:fb:7b:80:66:0c:27:ba:43:6f:56:dc:f0:0c:96: 69:b0:c8:fd:2b:96:15:90:7d:71:71:af:94:e0:f7:fc:bc:1e: 3b:31:03:8c:88:62:a3:ca:1b:2f:95:98:de:00:4f:12:1c:ce: bc:d6:a3:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTEyMTkwNTU0NDNaFw0yNTEyMjYwNTU0NDNaMBgxFjAUBgNV BAMMDTY5NDRlOGE0LTUwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZDj+kg5GLU76j0D9GrzD/MyzhvH5dNRlU+p7rpQgj7e2QtAGfTaY1cI0RhAEi sLBUojORwBRsjCA3ir8iNKH0np4JfCAX2rWkLpUjKsgfD4UYLYxGQVJkq/9STllA WVow22WuQnYrZjvR2P1NHrHKgOjn7x1FDYE2ANtu7NhEDGBAwtCJnKkDFc0fDoUb H7h/aXaqfEtz8R5x2pcVniv29flR415r9dCAoARb3CrksZhfgZhcm5b/yoTYLtjd QA+pnNTiZzRYtAjTTJa7zVS0LoTwGMH9flvnx7fr3abpUzUW5DilYMIhURq9S86T eLhdRNo/S/+At7Lwh9iQmAd1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUumATg0yz bWxjcNGth3yjk0k0gi4wHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYzHqxjcrtZ4w+UAig8wr/ynMqudBuoJ7zCY/3J4HKBMYAWb5mKiBxL ZmjzJlNMtFFNZWVq2ji3aijhkd3YhiJ18VFlX1A3hHFCowK0dYZIAhotTgVnwK7n /k1ZyeG+4qGYxBJNhBeu4IZfiCZTwIqL0B2V9P3grb4VYP8PmfklC5smO+MMkmFB NA0F0eJmyRwpnAl9/cQcuCWmR+R/FdrMdjRbC332BpjSHIOxbJa6u0FQn9JeBBly SdzYw/hCii1nM0FxNTqfijv7e4BmDCe6Q29W3PAMlmmwyP0rlhWQfXFxr5Tg9/y8 HjsxA4yIYqPKGy+VmN4ATxIczrzWo0w= -----END CERTIFICATE-----Generated at Sat Dec 20 11:41:10 2025 by rpki-client