This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: Gz0XlYjQqnTFPbZTeEd1nuqX+T2oEh+/JqU7X7yyGKE= Subject key identifier: F9:06:1B:22:A5:2B:22:37:38:2B:84:EB:9E:57:2E:34:77:8E:3A:F2 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 0143 Signing time: Tue 23 Dec 2025 03:24:15 +0000 Manifest this update: Tue 23 Dec 2025 03:24:14 +0000 Manifest next update: Tue 30 Dec 2025 03:24:14 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: Rn5Dzxn6PveLxGC1DNFhzpMoV5honASmzK+1Doag8Ko=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Dec 23 03:24:14 2025 GMT Not After : Dec 30 03:24:14 2025 GMT Subject: CN=694a0b5f-b0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:2c:e9:7a:ee:f4:0d:5f:55:d7:a3:aa:aa: 86:d1:69:9c:6f:34:5f:10:5f:89:21:88:ce:1e:96: dc:33:55:00:5a:24:20:e0:d6:40:12:ba:da:ab:d5: 35:77:f1:69:cb:43:a6:06:37:72:b3:d1:7e:da:ed: 4e:2e:cf:d5:c8:7d:fa:76:71:74:38:b9:10:c9:71: 5d:9f:83:d8:4e:28:08:1e:f3:b7:49:1d:29:90:c9: d4:74:65:75:0a:49:a3:93:99:4c:55:66:f7:9c:6f: ca:f4:73:a7:a7:db:f7:42:78:1b:a2:ec:e8:fb:dc: d0:df:53:f1:11:44:df:f0:93:3f:71:11:0f:2f:73: 08:9e:74:fc:b2:d8:4c:b5:d1:b1:bf:73:4f:02:a3: e0:ae:50:db:b3:9e:54:53:70:d0:67:7a:9b:10:37: 79:eb:80:e9:1a:d7:94:d3:03:48:39:25:b2:9e:b7: c4:37:10:f6:8c:0b:27:47:17:c8:72:c8:42:de:94: 37:1a:bb:6a:db:9d:08:29:b8:96:f6:2a:48:de:31: 56:f8:f3:f4:60:4f:61:8a:ee:ea:ae:a7:3a:2d:bd: 0d:32:a0:88:c2:73:0f:1a:a8:17:e7:3b:9f:bf:46: ff:98:38:3a:f9:bc:5f:d6:71:c8:5a:ec:84:02:c7: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:1B:22:A5:2B:22:37:38:2B:84:EB:9E:57:2E:34:77:8E:3A:F2 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d8:4e:bc:f9:55:8d:55:97:c0:e1:b2:37:cd:d4:f6:14:4e: f8:1f:9e:70:60:0d:34:bc:1a:6f:3c:95:71:5a:4d:25:59:fb: 1e:c2:4e:a0:09:68:0d:a1:e6:3e:14:5f:e0:69:fc:d2:32:93: 3d:b9:4d:41:5e:a5:24:d5:bf:6d:55:b1:3f:30:f0:40:f3:db: 8f:6a:03:7b:a1:4f:5b:bc:35:da:0a:4a:c1:81:c9:2b:f8:9b: 90:a2:b8:82:43:57:6c:86:cd:62:e5:65:62:21:55:06:7a:6c: a0:40:c9:26:32:64:ad:b7:ca:b7:a9:e0:ff:74:57:b5:fd:4b: 5d:8d:22:18:af:ed:06:48:f4:dd:1e:5e:73:18:69:bb:b2:a3: e0:28:9e:76:2a:50:e4:5f:f5:b1:b1:fd:d2:5d:27:69:c0:18: d0:9d:f0:8a:d2:8b:05:4e:78:4d:c1:15:c3:94:c2:cf:4e:2f: 98:c1:61:d6:db:52:90:ae:99:f5:ef:f4:3c:5d:d3:b0:c9:08: 13:77:c0:26:af:a1:16:3c:ff:d6:61:cb:d5:c9:17:39:7e:d2: e4:e4:20:fb:42:f1:1c:d2:cf:61:00:02:02:16:59:79:dd:61: 16:e0:53:16:79:d2:0f:c8:a5:7f:3b:53:81:13:c1:cb:7a:ff: d4:fd:f0:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUxMjIzMDMyNDE0WhcNMjUxMjMwMDMyNDE0WjAYMRYwFAYD VQQDDA02OTRhMGI1Zi1iMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkAs6Xru9A1fVdejqqqG0WmcbzRfEF+JIYjOHpbcM1UAWiQg4NZAErraq9U1 d/Fpy0OmBjdys9F+2u1OLs/VyH36dnF0OLkQyXFdn4PYTigIHvO3SR0pkMnUdGV1 Ckmjk5lMVWb3nG/K9HOnp9v3Qngbouzo+9zQ31PxEUTf8JM/cREPL3MInnT8sthM tdGxv3NPAqPgrlDbs55UU3DQZ3qbEDd564DpGteU0wNIOSWynrfENxD2jAsnRxfI cshC3pQ3Grtq250IKbiW9ipI3jFW+PP0YE9hiu7qrqc6Lb0NMqCIwnMPGqgX5zuf v0b/mDg6+bxf1nHIWuyEAscEjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkGGyKl KyI3OCuE655XLjR3jjryMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA02E68+VWNVZfA4bI3zdT2FE74H55wYA00vBpvPJVxWk0lWfsewk6g CWgNoeY+FF/gafzSMpM9uU1BXqUk1b9tVbE/MPBA89uPagN7oU9bvDXaCkrBgckr +JuQoriCQ1dshs1i5WViIVUGemygQMkmMmStt8q3qeD/dFe1/UtdjSIYr+0GSPTd Hl5zGGm7sqPgKJ52KlDkX/Wxsf3SXSdpwBjQnfCK0osFTnhNwRXDlMLPTi+YwWHW 21KQrpn17/Q8XdOwyQgTd8Amr6EWPP/WYcvVyRc5ftLk5CD7QvEc0s9hAAICFll5 3WEW4FMWedIPyKV/O1OBE8HLev/U/fBB -----END CERTIFICATE-----Generated at Wed Dec 24 17:34:58 2025 by rpki-client