This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: mghQp2zn8kcz4rtDx32MSIwoaR3rKzrsEo33K2yzx5o= Subject key identifier: 05:93:F3:05:5B:2F:6B:88:92:9F:34:54:A8:05:83:38:47:E5:CC:58 Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 01EC Signing time: Tue 23 Dec 2025 01:40:04 +0000 Manifest this update: Tue 23 Dec 2025 01:40:03 +0000 Manifest next update: Tue 30 Dec 2025 01:40:03 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: reiMtiWEOOAH0hmK634OkslNtvXjwLrGWqYOHrqZon4=) 2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: TYXUwM1es+viCTvOIJkrXn99Lf7hGCjK/asxpXmwfB0=) 3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: 9PDqSioWn5hBKEyF3Xh2bcZ5nBkq113KFDA0GhUPDK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Dec 23 01:40:03 2025 GMT Not After : Dec 30 01:40:03 2025 GMT Subject: CN=6949f2f4-f3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:33:98:96:cc:43:25:56:eb:e6:f9:ce:df: 0a:0d:54:a3:1b:b6:d9:9a:5b:52:bc:ff:58:55:54: d7:fc:66:ac:07:f1:1a:2a:ee:52:51:6f:c9:81:33: e6:bc:45:41:1a:24:f4:d2:c5:44:88:ce:10:a5:c6: a8:5a:08:54:00:b6:18:93:88:0e:e8:eb:b0:b9:4a: 98:45:54:7e:96:4b:4b:17:77:40:b8:19:35:96:7d: df:74:08:48:1c:dc:ba:16:b3:28:1b:ca:89:67:87: 48:0e:fc:a7:f5:22:e1:49:ad:e1:ad:0c:14:1e:65: 7f:11:4d:00:30:08:41:67:78:49:f6:e7:f8:4c:04: a3:d3:c5:d1:dc:5b:04:d9:61:25:c6:af:b2:9e:c9: 30:7e:74:9d:cd:76:09:6f:76:9b:cc:da:6f:b4:a1: 02:2c:72:66:40:b8:75:4d:05:f0:ec:3f:5a:aa:56: 3c:8c:5d:90:8e:ea:84:10:49:13:7c:29:35:6d:de: 06:28:99:29:ea:3a:41:0c:8e:84:59:43:0b:e9:79: 2c:b7:c5:ca:eb:b6:ef:6d:c3:b7:ee:ea:9a:09:01: 91:1f:ee:b8:02:c8:19:af:8d:10:26:96:36:ca:0e: 9b:c4:4d:f5:31:30:b5:19:7d:aa:25:64:00:a1:4b: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:93:F3:05:5B:2F:6B:88:92:9F:34:54:A8:05:83:38:47:E5:CC:58 X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a8:f0:1d:90:dc:de:f0:e4:b4:ae:c0:b0:08:5e:25:80:9a: 1e:d2:e3:00:1c:cf:61:d5:82:da:ea:e0:25:71:f0:c1:6e:01: 77:a1:4e:0c:e1:62:b2:1d:c4:e5:96:4d:51:d7:ff:09:b2:77: 29:ea:d7:80:17:a5:54:7f:d9:32:a8:f5:af:70:8c:3d:ec:ac: 7d:ad:54:e1:b2:02:d6:2a:fa:25:21:4d:d5:81:4a:b7:3c:d9: 5f:22:22:43:47:67:66:fa:87:89:88:02:30:e1:a3:51:3e:f2: ba:f6:b6:5a:33:03:e1:4a:40:f9:7e:67:64:b2:b5:d1:eb:a9: b2:48:7e:44:5e:88:a0:43:43:95:f5:f4:fe:18:92:4e:74:70: 8c:bc:fa:a6:0a:f4:c8:de:54:38:15:df:cd:ed:fb:84:3c:7d: 02:c8:7d:c1:0a:87:f9:e4:7f:11:c1:01:f2:42:de:31:0f:d5: 06:73:6a:e2:18:4b:50:dd:22:30:6d:28:ab:e8:20:c8:41:58: 36:3c:4c:af:1b:d6:a5:e4:eb:67:4d:9a:31:0d:86:76:66:15: 9b:bf:25:bc:34:14:16:58:e3:72:6e:8d:92:f4:c9:a0:c0:1c: ec:ef:0e:d1:59:00:7b:1e:94:e5:b5:10:41:35:5c:cb:5a:af: 89:b5:4b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUxMjIzMDE0MDAzWhcNMjUxMjMwMDE0MDAzWjAYMRYwFAYD VQQDDA02OTQ5ZjJmNC1mM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3YzmJbMQyVW6+b5zt8KDVSjG7bZmltSvP9YVVTX/GasB/EaKu5SUW/JgTPm vEVBGiT00sVEiM4QpcaoWghUALYYk4gO6OuwuUqYRVR+lktLF3dAuBk1ln3fdAhI HNy6FrMoG8qJZ4dIDvyn9SLhSa3hrQwUHmV/EU0AMAhBZ3hJ9uf4TASj08XR3FsE 2WElxq+ynskwfnSdzXYJb3abzNpvtKECLHJmQLh1TQXw7D9aqlY8jF2QjuqEEEkT fCk1bd4GKJkp6jpBDI6EWUML6Xkst8XK67bvbcO37uqaCQGRH+64AsgZr40QJpY2 yg6bxE31MTC1GX2qJWQAoUta6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWT8wVb L2uIkp80VKgFgzhH5cxYMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASqPAdkNze8OS0rsCwCF4lgJoe0uMAHM9h1YLa6uAlcfDBbgF3oU4M 4WKyHcTllk1R1/8Jsncp6teAF6VUf9kyqPWvcIw97Kx9rVThsgLWKvolIU3VgUq3 PNlfIiJDR2dm+oeJiAIw4aNRPvK69rZaMwPhSkD5fmdksrXR66mySH5EXoigQ0OV 9fT+GJJOdHCMvPqmCvTI3lQ4Fd/N7fuEPH0CyH3BCof55H8RwQHyQt4xD9UGc2ri GEtQ3SIwbSir6CDIQVg2PEyvG9al5OtnTZoxDYZ2ZhWbvyW8NBQWWONybo2S9Mmg wBzs7w7RWQB7HpTltRBBNVzLWq+JtUsW -----END CERTIFICATE-----Generated at Tue Dec 23 14:50:51 2025 by rpki-client