This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json) Hash identifier: b0uwYye5gkCuuq/Wcrx3GbUne4NApssQrPuRFBTuwSE= Subject key identifier: 20:10:CB:FD:A4:EB:5D:7E:86:3F:3B:E4:37:B4:20:6A:08:40:CA:D2 Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft Manifest number: 0C1B Signing time: Mon 22 Dec 2025 19:15:38 +0000 Manifest this update: Mon 22 Dec 2025 19:15:37 +0000 Manifest next update: Mon 29 Dec 2025 19:15:37 +0000 Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: XQMGF8YymHDFdxFziJP8rsY4zmeSFaCcOFlffZR3D7k=) 2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 8seskI/5/VQRZazAh70N9kr0X5I8gYV92db2rNZfLeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Validity Not Before: Dec 22 19:15:37 2025 GMT Not After : Dec 29 19:15:37 2025 GMT Subject: CN=694998da-863c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:39:60:13:cb:dc:ec:de:51:e0:95:98:18: ab:1e:24:64:05:05:55:ba:83:8e:ed:81:62:18:78: 1c:bf:ec:b4:de:24:39:79:08:ff:ae:9d:80:87:6b: ea:d9:0f:2c:eb:f7:14:7d:15:25:2f:0a:1a:d0:66: 10:2a:b4:71:c5:d6:70:82:28:01:40:dc:52:90:5f: b9:3f:81:d1:85:a4:1d:08:51:10:fc:06:44:03:9e: 85:46:77:4f:da:e3:ef:6a:fb:9c:d3:46:8b:42:e3: 5f:50:a4:1f:53:37:90:d2:5e:65:cd:d9:e9:ec:88: fc:18:48:60:7b:e0:60:45:26:ad:d8:c1:df:0b:0f: c7:05:84:92:06:e8:5e:ae:f3:a8:32:6e:71:85:9e: a1:a7:68:e2:bb:90:8c:51:af:41:9d:f4:0e:84:ed: 90:60:e4:ec:5c:6f:9f:1b:18:c2:ec:fc:77:4e:7d: a3:a3:29:73:73:c7:2f:24:80:33:69:e6:1d:58:a1: 4c:67:cd:1f:78:88:3e:10:c2:70:30:1d:86:07:76: 89:80:e0:86:9a:b3:71:28:5a:80:f8:19:d8:58:47: dd:41:00:51:e4:06:88:00:7c:7a:09:56:cc:96:84: db:53:d3:95:c8:91:ea:00:71:c1:81:41:15:c2:0f: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:10:CB:FD:A4:EB:5D:7E:86:3F:3B:E4:37:B4:20:6A:08:40:CA:D2 X509v3 Authority Key Identifier: keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6d:c3:be:1e:7b:8d:ba:f0:a1:e7:80:af:0e:18:e7:c1:e4: 2d:98:30:66:7a:af:10:6e:78:bc:b7:0c:ab:1f:30:36:90:5e: 3b:0b:a9:a6:b3:a5:1a:97:21:b3:ad:d2:7d:93:b1:52:d7:25: e5:18:e3:41:da:91:cc:58:d0:79:8a:39:d0:29:5f:07:ef:3e: 64:4b:da:f4:fb:3e:cf:14:0a:f2:2d:41:88:85:8d:b0:c9:02: e6:57:8a:a5:f8:56:d1:d6:eb:d9:05:6f:d1:7f:64:f5:ff:f1: 02:55:8c:72:4d:5b:34:b2:14:0c:de:b0:11:a0:33:b9:0b:19: 14:93:1c:7f:a7:48:19:5f:d0:2b:07:e2:3e:14:21:c7:de:36: d3:e4:7a:02:73:43:27:88:db:a9:89:55:a8:f5:84:8c:27:ce: c1:d7:7b:ab:7e:3b:a7:ea:b1:79:8b:52:06:1c:4b:e8:a9:f8: 6c:5a:fd:88:45:10:cb:d0:4e:c3:e0:49:1c:62:ba:ca:6a:1f: e5:bd:5a:f7:c9:ba:af:25:de:bf:1b:32:a0:22:2a:2f:f9:10: b3:7a:2b:6a:96:7a:fd:69:4f:0d:31:eb:3f:41:54:af:bc:2d: bf:fe:2a:5f:79:71:ac:c7:be:98:bd:12:e6:f8:42:09:23:e4: 75:9c:01:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz RjA1QkQ5OTAwHhcNMjUxMjIyMTkxNTM3WhcNMjUxMjI5MTkxNTM3WjAYMRYwFAYD VQQDDA02OTQ5OThkYS04NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKI5YBPL3OzeUeCVmBirHiRkBQVVuoOO7YFiGHgcv+y03iQ5eQj/rp2Ah2vq 2Q8s6/cUfRUlLwoa0GYQKrRxxdZwgigBQNxSkF+5P4HRhaQdCFEQ/AZEA56FRndP 2uPvavuc00aLQuNfUKQfUzeQ0l5lzdnp7Ij8GEhge+BgRSat2MHfCw/HBYSSBuhe rvOoMm5xhZ6hp2jiu5CMUa9BnfQOhO2QYOTsXG+fGxjC7Px3Tn2joylzc8cvJIAz aeYdWKFMZ80feIg+EMJwMB2GB3aJgOCGmrNxKFqA+BnYWEfdQQBR5AaIAHx6CVbM loTbU9OVyJHqAHHBgUEVwg/irQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAQy/2k 611+hj875De0IGoIQMrSMB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV NUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5bcO+HnuNuvCh54CvDhjnweQtmDBmeq8Qbni8twyrHzA2kF47C6mm s6UalyGzrdJ9k7FS1yXlGONB2pHMWNB5ijnQKV8H7z5kS9r0+z7PFAryLUGIhY2w yQLmV4ql+FbR1uvZBW/Rf2T1//ECVYxyTVs0shQM3rARoDO5CxkUkxx/p0gZX9Ar B+I+FCHH3jbT5HoCc0MniNupiVWo9YSMJ87B13urfjun6rF5i1IGHEvoqfhsWv2I RRDL0E7D4EkcYrrKah/lvVr3ybqvJd6/GzKgIiov+RCzeitqlnr9aU8NMes/QVSv vC2//ipfeXGsx76YvRLm+EIJI+R1nAHo -----END CERTIFICATE-----Generated at Tue Dec 23 06:07:23 2025 by rpki-client