This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: RTf+bBAGiNxql2IGoOVvedS2gh9RpChV+Tohr8YFX1s= Subject key identifier: CF:B2:4C:BA:9F:C4:8E:26:C5:69:3D:1A:15:09:B4:85:09:E2:28:97 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0BC5 Signing time: Mon 22 Dec 2025 18:27:00 +0000 Manifest this update: Mon 22 Dec 2025 18:26:59 +0000 Manifest next update: Mon 29 Dec 2025 18:26:59 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: Nn5W8Tb1xvyqiN3/1oBVIR7LpCSZtJs7mxvbnbmOUwQ=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: BaHDfNkjZ1fMZBSLRiFXON3hK0vL1pU4sF4hs/DbBBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Dec 22 18:26:59 2025 GMT Not After : Dec 29 18:26:59 2025 GMT Subject: CN=69498d73-aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:99:88:68:a2:a8:af:a7:d4:a3:b0:19:2c: 72:83:0d:3b:0a:dd:23:93:62:9a:80:9e:86:72:d1: 91:8b:fb:d8:b6:9f:bd:f9:48:15:9c:17:1b:de:cb: 52:3a:d8:7e:61:67:1c:ac:60:0a:60:e1:88:17:5b: 15:09:47:85:05:6b:27:e4:12:43:c9:91:f1:56:40: 4d:bf:5c:58:70:9d:34:58:ba:ca:28:f6:51:ef:20: b7:e2:d2:6c:ed:46:4f:db:d5:ca:3c:29:a8:90:ea: 53:e5:4f:7e:5d:8e:3e:fa:84:64:3a:60:a8:d4:40: c9:24:fe:c7:35:d7:57:2d:c0:0c:b8:e6:37:01:a4: bd:b7:3b:e8:52:fc:22:3a:44:92:78:2c:c0:98:06: 1a:0a:c5:e2:b6:f6:c6:76:49:a7:90:79:ff:2c:19: b1:67:52:bc:d2:92:37:37:5d:20:3b:82:b7:b4:81: 14:02:bd:11:25:ad:e5:3d:d1:b9:17:81:36:43:31: 95:4c:49:e8:43:84:a3:cd:4d:a4:b1:12:0f:9f:c1: 03:b6:75:0d:14:48:fe:c6:ec:11:79:3e:3f:25:31: ff:ed:39:d3:c3:60:d9:be:9e:c7:8f:e7:82:c9:d7: fa:67:31:0d:52:f9:2d:2f:3f:8c:ef:a9:39:db:fa: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B2:4C:BA:9F:C4:8E:26:C5:69:3D:1A:15:09:B4:85:09:E2:28:97 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f4:49:0b:40:a8:27:44:5d:8a:76:8d:79:f0:78:39:a6:e3: f7:e1:e2:4e:f0:11:42:3c:9f:96:af:c5:c6:69:38:14:83:28: 5e:8f:21:96:23:6f:fe:ae:10:76:77:43:50:27:87:67:f8:04: 43:ad:2e:fc:64:f3:36:5b:b5:b2:a1:b1:99:6f:52:9b:93:c4: 94:cd:86:c5:f4:8f:f7:fa:74:0d:84:6c:a2:b1:27:42:d9:2f: 2c:2b:bd:9d:3b:91:64:22:49:ef:b4:09:22:98:de:98:f3:a6: a2:d8:d8:70:f8:85:77:a5:7c:fa:77:29:3b:56:18:1d:fd:96: 45:55:15:e9:a8:09:32:87:54:b6:0a:9d:f6:0c:d6:d7:01:b5: 73:38:b3:9b:4b:5f:da:8d:0c:ba:f7:fc:ce:99:2d:bc:a6:2d: e5:7b:80:41:b5:dc:e1:77:32:e0:70:dc:68:0e:e6:af:dd:d4: 31:a8:48:24:76:74:d4:28:27:bc:e4:65:11:ee:a4:21:11:34: 25:6f:16:f8:52:27:31:f0:ee:26:0a:42:b2:3b:48:07:5c:65: 99:d9:67:81:01:85:0a:8f:e5:90:77:4d:39:14:7c:28:c9:07: a8:ee:e8:8a:10:24:7f:5c:70:93:10:b0:4e:66:5e:69:d1:d3: 91:b5:58:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUxMjIyMTgyNjU5WhcNMjUxMjI5MTgyNjU5WjAYMRYwFAYD VQQDDA02OTQ5OGQ3My1hZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVeZiGiiqK+n1KOwGSxygw07Ct0jk2KagJ6GctGRi/vYtp+9+UgVnBcb3stS Oth+YWccrGAKYOGIF1sVCUeFBWsn5BJDyZHxVkBNv1xYcJ00WLrKKPZR7yC34tJs 7UZP29XKPCmokOpT5U9+XY4++oRkOmCo1EDJJP7HNddXLcAMuOY3AaS9tzvoUvwi OkSSeCzAmAYaCsXitvbGdkmnkHn/LBmxZ1K80pI3N10gO4K3tIEUAr0RJa3lPdG5 F4E2QzGVTEnoQ4SjzU2ksRIPn8EDtnUNFEj+xuwReT4/JTH/7TnTw2DZvp7Hj+eC ydf6ZzENUvktLz+M76k52/qS/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+yTLqf xI4mxWk9GhUJtIUJ4iiXMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO9EkLQKgnRF2Kdo158Hg5puP34eJO8BFCPJ+Wr8XGaTgUgyhejyGW I2/+rhB2d0NQJ4dn+ARDrS78ZPM2W7WyobGZb1Kbk8SUzYbF9I/3+nQNhGyisSdC 2S8sK72dO5FkIknvtAkimN6Y86ai2Nhw+IV3pXz6dyk7Vhgd/ZZFVRXpqAkyh1S2 Cp32DNbXAbVzOLObS1/ajQy69/zOmS28pi3le4BBtdzhdzLgcNxoDuav3dQxqEgk dnTUKCe85GUR7qQhETQlbxb4Uicx8O4mCkKyO0gHXGWZ2WeBAYUKj+WQd005FHwo yQeo7uiKECR/XHCTELBOZl5p0dORtVjX -----END CERTIFICATE-----Generated at Wed Dec 24 15:01:01 2025 by rpki-client