This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: /ABPVCnhA76zZ4fUNT5x/EAFV9SKuI2aN+FCciQS2O8= Subject key identifier: 84:D9:52:36:D1:A0:ED:A4:33:E2:23:F0:33:D1:F8:83:4A:CD:C2:27 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 037C Signing time: Mon 22 Dec 2025 23:53:03 +0000 Manifest this update: Mon 22 Dec 2025 23:53:03 +0000 Manifest next update: Mon 29 Dec 2025 23:53:03 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: 6E99v8df7mP+yLruJchJpESYPoTMgWaufs2bLn5N2us=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Dec 22 23:53:03 2025 GMT Not After : Dec 29 23:53:03 2025 GMT Subject: CN=6949d9df-24b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:cc:31:d4:cb:0e:77:e3:aa:10:ae:a1:3c: a6:06:4e:17:66:35:7c:9a:1c:96:94:06:a7:f8:73: cd:0e:4a:ee:92:55:40:6d:12:57:60:60:3c:60:80: f0:74:4a:e2:7a:c4:2b:93:52:e2:c4:cf:de:cb:56: be:c1:4b:7c:ab:3b:6b:d2:33:17:45:7f:74:10:c4: 4d:17:ed:3c:f4:f3:ab:64:83:2d:cb:71:16:05:a3: f1:ca:17:4a:47:3e:77:d6:f9:c8:73:5e:f2:b5:b9: 52:21:ef:74:5e:40:4f:e2:5f:53:b3:70:72:a6:86: 67:be:99:36:73:21:29:93:15:73:9d:b1:f4:23:c4: 7e:e8:28:f6:2f:0e:98:63:62:d8:47:e0:57:bf:08: b3:e0:bf:64:4d:61:bd:22:8c:e8:50:26:de:89:49: 27:39:87:c0:33:a5:bf:50:70:06:8a:ee:c1:c5:31: 89:3d:d8:54:9a:d9:0c:c3:e3:11:68:9f:3c:19:ff: 74:da:39:5e:ce:81:98:09:ec:bc:be:91:f1:99:37: a1:c4:75:4e:8c:0c:5c:85:44:bc:6b:a5:43:51:a9: 06:da:b7:61:79:e2:5a:82:4a:d3:a4:2d:e7:53:3c: f0:0b:35:5a:5a:c4:b7:d1:93:2b:52:4a:a3:0a:15: 34:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:52:36:D1:A0:ED:A4:33:E2:23:F0:33:D1:F8:83:4A:CD:C2:27 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fe:43:52:71:12:d1:ad:9f:05:02:76:14:4e:b6:81:5c:f1: be:4e:ef:16:8d:a3:73:bc:4e:5d:91:15:81:47:08:96:b8:b0: fc:90:aa:15:15:d0:f4:f9:1d:f1:b9:83:e9:9c:c7:7c:e2:29: 51:36:36:f6:81:76:ef:5f:09:f6:66:0c:ba:95:61:43:52:3d: a7:3b:24:7f:4e:85:73:08:0b:fb:60:ab:4d:a0:a6:7b:ef:d7: f4:9f:75:bc:3a:5c:70:f2:9c:a1:c8:fb:d6:35:8b:da:a6:1c: 7a:1d:f8:e7:4b:a0:bc:92:e9:34:05:19:2c:1d:27:20:5b:04: 4c:df:7e:d1:7c:e8:e1:85:b5:78:3d:b1:44:04:15:90:14:5d: 3d:e5:50:a8:46:2f:3b:14:b5:c3:12:94:02:d7:81:3e:3b:6d: f1:00:fb:d3:29:5b:00:19:2d:8b:5e:e2:02:b3:25:00:a2:86: 19:bb:38:3f:4f:7e:f5:65:51:97:cd:b4:68:96:ac:c9:c1:c9: 03:97:ac:58:07:4c:63:13:24:1b:64:b3:46:e7:9a:2b:9f:5f: 18:a9:c5:de:20:23:07:9d:80:5a:77:fe:6b:0e:65:2b:42:b4: 5c:1c:c2:f5:ca:61:22:b6:ea:0e:5b:7e:33:7f:85:ba:c5:e4: 4e:74:cf:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUxMjIyMjM1MzAzWhcNMjUxMjI5MjM1MzAzWjAYMRYwFAYD VQQDDA02OTQ5ZDlkZi0yNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRXMMdTLDnfjqhCuoTymBk4XZjV8mhyWlAan+HPNDkruklVAbRJXYGA8YIDw dEriesQrk1LixM/ey1a+wUt8qztr0jMXRX90EMRNF+089POrZIMty3EWBaPxyhdK Rz531vnIc17ytblSIe90XkBP4l9Ts3BypoZnvpk2cyEpkxVznbH0I8R+6Cj2Lw6Y Y2LYR+BXvwiz4L9kTWG9IozoUCbeiUknOYfAM6W/UHAGiu7BxTGJPdhUmtkMw+MR aJ88Gf902jlezoGYCey8vpHxmTehxHVOjAxchUS8a6VDUakG2rdheeJagkrTpC3n UzzwCzVaWsS30ZMrUkqjChU0KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITZUjbR oO2kM+Ij8DPR+INKzcInMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb/kNScRLRrZ8FAnYUTraBXPG+Tu8WjaNzvE5dkRWBRwiWuLD8kKoV FdD0+R3xuYPpnMd84ilRNjb2gXbvXwn2Zgy6lWFDUj2nOyR/ToVzCAv7YKtNoKZ7 79f0n3W8Olxw8pyhyPvWNYvaphx6HfjnS6C8kuk0BRksHScgWwRM337RfOjhhbV4 PbFEBBWQFF095VCoRi87FLXDEpQC14E+O23xAPvTKVsAGS2LXuICsyUAooYZuzg/ T371ZVGXzbRolqzJwckDl6xYB0xjEyQbZLNG55orn18YqcXeICMHnYBad/5rDmUr QrRcHML1ymEituoOW34zf4W6xeROdM9b -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:50 2025 by rpki-client