This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: xyvNsKSvn4VRqczS78K4oDxwvvAFG1VXYzq3gX43X4A= Subject key identifier: 0A:D9:90:D8:ED:BD:46:9C:C2:E4:A8:68:80:CE:B2:B8:E0:E8:72:0E Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 01A1 Signing time: Sun 21 Dec 2025 02:34:43 +0000 Manifest this update: Sun 21 Dec 2025 02:34:43 +0000 Manifest next update: Sun 28 Dec 2025 02:34:43 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: w/foTR1cNRVGdcjt3tZYMwr/37IZDHAB2engatvBm5A=) 2: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: LNlWSJZd3y6vHDkscBPq/ORoIGPntGhXrtydBgng1E0=) 3: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: 1By/MbbkjCjjWqbVaZd/4CDXKFgmbctBCGN70Tvq9pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814, serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: Dec 21 02:34:43 2025 GMT Not After : Dec 28 02:34:43 2025 GMT Subject: CN=69475cc3-22c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:f5:71:04:75:d9:e7:74:0b:58:2a:1d:95: 3d:85:0c:8f:1c:64:f4:6c:90:f9:df:53:cf:66:05: 6e:b0:3f:42:36:dd:2d:be:8e:d0:9b:dd:cf:b6:ba: e3:4d:7c:b6:83:86:b5:a8:05:8e:86:2b:a3:70:87: 36:a6:8b:6b:60:02:87:f6:2c:54:af:25:7a:07:ea: f1:20:a9:00:ef:77:a8:c8:6c:0d:fe:b9:2a:82:4e: ea:bd:bb:3c:ed:f3:de:00:f7:df:a1:92:24:d7:4e: da:dd:2c:f3:10:ed:cd:12:f9:a0:e3:10:81:1b:c3: 1b:fb:72:4e:e4:95:e9:f3:cc:41:d4:8a:5f:1d:0b: f7:14:02:a3:67:f9:d9:7d:63:4b:58:bd:c9:0d:ca: d9:10:eb:55:79:2d:1e:12:d2:e8:74:f1:b5:42:be: 8c:1d:dc:da:2e:f7:5f:42:65:42:8e:0e:9a:60:8f: 0a:ed:93:f6:bc:b4:66:6d:68:f1:42:63:90:54:db: 6f:83:63:5e:e2:e0:f2:9c:c4:04:c0:8b:e9:16:74: 9d:02:5a:67:1f:0d:14:87:f9:89:76:a0:22:d9:86: 8e:d3:c6:d7:bf:bb:2f:66:04:65:96:eb:74:b5:c1: df:6a:94:78:0d:10:4b:04:ac:53:d9:10:9b:92:ce: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D9:90:D8:ED:BD:46:9C:C2:E4:A8:68:80:CE:B2:B8:E0:E8:72:0E X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:9d:96:16:ba:5e:6c:91:df:c3:b6:2d:9d:67:4e:c2:89:c0: 4f:30:87:a1:e6:88:bb:01:ca:2e:65:9c:c8:52:20:91:5a:aa: 0c:64:8c:35:49:bd:78:c5:52:3d:88:fe:da:3d:a2:89:60:5a: bb:16:8a:b7:d1:90:3b:d3:0c:5d:95:0a:03:b7:b9:42:6e:40: 97:a3:85:18:e6:92:d3:56:92:24:14:11:ea:1d:7c:3d:56:e0: 85:e0:a2:49:b1:31:e9:1d:d3:3f:28:ba:89:bb:6a:1c:c5:f6: f7:6c:3b:9a:d1:32:07:b2:18:3a:a4:e6:0d:d4:e2:57:a3:a4: 19:70:9b:27:06:ab:11:76:00:7a:ce:92:4d:f1:42:b7:2d:79: 7f:82:47:6a:cd:ee:03:c2:5d:91:ff:74:b5:57:dc:ee:40:a5: b3:f6:22:2b:f7:df:4d:72:55:be:7f:0c:cb:da:e5:3a:4d:0a: 3c:a7:dc:86:e7:2e:25:fa:21:b1:40:04:3f:3f:c9:bd:a4:3e: bd:d2:1d:7e:f3:ea:cb:e7:db:8d:aa:c4:bb:5c:da:47:08:50: 8e:f3:df:89:f2:c2:50:c7:16:d3:6f:b3:66:3e:01:f2:b0:ff: 80:00:68:db:cb:4e:38:c9:fd:68:50:1a:9b:b7:90:81:24:cf: 98:fb:fe:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0 MzIxQkIwMzUwHhcNMjUxMjIxMDIzNDQzWhcNMjUxMjI4MDIzNDQzWjAYMRYwFAYD VQQDDA02OTQ3NWNjMy0yMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRP1cQR12ed0C1gqHZU9hQyPHGT0bJD531PPZgVusD9CNt0tvo7Qm93Ptrrj TXy2g4a1qAWOhiujcIc2potrYAKH9ixUryV6B+rxIKkA73eoyGwN/rkqgk7qvbs8 7fPeAPffoZIk107a3SzzEO3NEvmg4xCBG8Mb+3JO5JXp88xB1IpfHQv3FAKjZ/nZ fWNLWL3JDcrZEOtVeS0eEtLodPG1Qr6MHdzaLvdfQmVCjg6aYI8K7ZP2vLRmbWjx QmOQVNtvg2Ne4uDynMQEwIvpFnSdAlpnHw0Uh/mJdqAi2YaO08bXv7svZgRllut0 tcHfapR4DRBLBKxT2RCbks6/4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArZkNjt vUacwuSoaIDOsrjg6HIOMB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa Tmc2ak83S0R5aHRESWJzRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHnZYWul5skd/Dti2dZ07CicBPMIeh5oi7AcouZZzIUiCRWqoMZIw1 Sb14xVI9iP7aPaKJYFq7Foq30ZA70wxdlQoDt7lCbkCXo4UY5pLTVpIkFBHqHXw9 VuCF4KJJsTHpHdM/KLqJu2ocxfb3bDua0TIHshg6pOYN1OJXo6QZcJsnBqsRdgB6 zpJN8UK3LXl/gkdqze4Dwl2R/3S1V9zuQKWz9iIr999NclW+fwzL2uU6TQo8p9yG 5y4l+iGxQAQ/P8m9pD690h1+8+rL59uNqsS7XNpHCFCO89+J8sJQxxbTb7NmPgHy sP+AAGjby044yf1oUBqbt5CBJM+Y+/5f -----END CERTIFICATE-----Generated at Sun Dec 21 20:58:55 2025 by rpki-client