This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: hKNm18CypTtH3gO7jmqNB+yJPIcOWvE40gqkEzlY4ng= Subject key identifier: 6B:F3:E2:9E:D7:87:98:96:99:94:41:A8:67:96:58:91:EB:27:16:9D Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 0255 Signing time: Tue 23 Dec 2025 00:41:22 +0000 Manifest this update: Tue 23 Dec 2025 00:41:21 +0000 Manifest next update: Tue 30 Dec 2025 00:41:21 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: AiaDADMqK1sGqi4ubiOBNsnEJTgAItP0uKnjSNJGxhE=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: /HJseqaXYqKNU4JSpgFfB6yF7Shuw95sDH+Hz1X2J8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Dec 23 00:41:21 2025 GMT Not After : Dec 30 00:41:21 2025 GMT Subject: CN=6949e531-d980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cf:51:f4:52:04:5e:96:1a:ab:d2:bf:dd:0c: 26:25:1a:c3:85:65:99:68:d2:c8:96:c0:9e:38:13: 66:65:33:f1:e9:99:20:ca:0b:0f:46:a6:01:c9:3c: 7c:08:74:b4:44:aa:c7:72:c4:51:c2:a4:a0:de:43: 11:bd:79:a6:6d:89:3f:4d:1d:4c:8c:b3:02:01:ce: 64:5a:da:85:6b:8c:9f:04:3b:83:73:13:d2:45:04: 7f:bd:76:29:10:33:e1:3c:4c:d8:c4:f8:76:95:a1: e0:7d:c5:71:ad:dd:de:25:31:24:5a:d0:36:bd:b8: 1e:31:3a:ff:3e:85:ea:01:be:90:e3:19:fd:ba:1f: 03:2f:46:ea:4e:e6:6f:92:e1:0d:c6:ca:13:5f:52: 16:e8:7b:16:ba:05:36:29:2e:26:7e:8e:67:20:11: e9:44:61:12:d8:1a:22:44:11:ad:90:44:62:24:54: ec:9f:60:8d:86:d0:69:cb:d7:ec:c3:12:7f:85:4d: bc:83:ea:54:1d:8f:e1:1c:33:5e:27:8d:0d:b8:0a: f3:5c:88:df:83:7c:90:0e:1d:5e:d3:82:ec:a6:18: 5a:72:2c:2e:bc:06:b7:e8:e6:b8:4f:e2:29:e3:3a: eb:6b:19:b0:01:3b:ac:92:f8:57:98:f9:a5:05:c2: 43:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F3:E2:9E:D7:87:98:96:99:94:41:A8:67:96:58:91:EB:27:16:9D X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:fc:ae:9f:b6:1f:14:cc:07:1e:06:80:b3:fc:16:b6:f2:97: 4c:8d:79:c0:55:54:bf:5d:ef:c1:73:82:ba:80:21:c4:58:82: ff:b6:48:10:05:cb:75:96:1a:84:03:0e:f6:7c:be:0a:13:5d: 40:2a:14:d4:3d:cf:f8:8a:17:ca:a8:4c:8d:c5:78:55:6e:4a: 1b:47:d8:77:3c:90:47:f8:e2:73:0b:f5:14:dd:5d:0c:51:2d: c9:8a:3b:88:3f:88:42:9b:32:cf:9f:1a:2a:b1:da:8f:09:55: 71:e6:f2:ef:0c:72:06:5a:2b:60:66:b4:70:f8:f3:33:6a:34: ae:0b:4e:dc:60:e6:ad:13:ee:69:1b:d8:a8:7a:31:5b:bd:95: b4:cb:3d:0b:8f:7f:c0:f9:45:09:92:c2:a3:5a:16:d1:ea:11: 00:f9:0f:2b:85:5f:5b:ec:e2:fb:4a:8c:f3:7d:f4:f6:81:da: dd:f3:57:29:12:1d:44:e7:3e:a0:5a:08:f7:62:46:e1:cc:78: d7:b0:85:0d:4d:d6:07:e2:d0:ed:68:8d:59:f2:f7:75:43:ee: 54:be:df:5e:67:ac:ca:ba:36:20:45:ff:23:96:b4:5c:7d:5f: ed:14:d4:52:75:d4:f4:09:4d:e2:e9:d5:b7:6b:f9:da:b3:2b: bc:4b:b9:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUxMjIzMDA0MTIxWhcNMjUxMjMwMDA0MTIxWjAYMRYwFAYD VQQDDA02OTQ5ZTUzMS1kOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1M9R9FIEXpYaq9K/3QwmJRrDhWWZaNLIlsCeOBNmZTPx6ZkgygsPRqYByTx8 CHS0RKrHcsRRwqSg3kMRvXmmbYk/TR1MjLMCAc5kWtqFa4yfBDuDcxPSRQR/vXYp EDPhPEzYxPh2laHgfcVxrd3eJTEkWtA2vbgeMTr/PoXqAb6Q4xn9uh8DL0bqTuZv kuENxsoTX1IW6HsWugU2KS4mfo5nIBHpRGES2BoiRBGtkERiJFTsn2CNhtBpy9fs wxJ/hU28g+pUHY/hHDNeJ40NuArzXIjfg3yQDh1e04LsphhaciwuvAa36Oa4T+Ip 4zrraxmwATuskvhXmPmlBcJDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvz4p7X h5iWmZRBqGeWWJHrJxadMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/K6fth8UzAceBoCz/Ba28pdMjXnAVVS/Xe/Bc4K6gCHEWIL/tkgQ Bct1lhqEAw72fL4KE11AKhTUPc/4ihfKqEyNxXhVbkobR9h3PJBH+OJzC/UU3V0M US3JijuIP4hCmzLPnxoqsdqPCVVx5vLvDHIGWitgZrRw+PMzajSuC07cYOatE+5p G9ioejFbvZW0yz0Lj3/A+UUJksKjWhbR6hEA+Q8rhV9b7OL7SozzffT2gdrd81cp Eh1E5z6gWgj3YkbhzHjXsIUNTdYH4tDtaI1Z8vd1Q+5Uvt9eZ6zKujYgRf8jlrRc fV/tFNRSddT0CU3i6dW3a/nasyu8S7kN -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:31 2025 by rpki-client