This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: vP15pCmt1lFLMztaanoXbCzz6GMR013stw4DE17dz3g= Subject key identifier: 4E:2D:DA:19:27:9A:2B:D1:58:05:F2:0D:4A:11:65:1F:76:BD:A0:EE Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 2D Signing time: Tue 23 Dec 2025 06:28:38 +0000 Manifest this update: Tue 23 Dec 2025 06:28:37 +0000 Manifest next update: Tue 30 Dec 2025 06:28:37 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: K4+nFwk56KI7/V6F+TepTYxxUs7lWnJmVwujwJaKn8Y=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: Ty3keWksVpROp5e1j4cINLe1/6qFn8g6RY9zGQ2Ec2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Dec 23 06:28:37 2025 GMT Not After : Dec 30 06:28:37 2025 GMT Subject: CN=694a3695-e282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:95:d9:50:51:e9:26:29:8c:25:36:05:35: 12:a6:cf:69:0d:87:4d:e4:f3:0f:c6:b2:62:69:0b: 2f:8d:bf:50:61:bd:25:54:e4:08:18:0d:db:a7:ba: b9:b9:cc:e9:3e:ed:68:9c:46:51:c6:5a:04:e9:69: 92:b8:d6:c6:4a:47:9b:a8:f7:97:9f:ff:ca:a3:8f: ee:60:f8:94:61:cf:48:78:ae:02:e9:33:ac:9a:0a: cd:aa:d9:5b:8b:f5:5e:1f:eb:25:ff:b1:56:38:d7: 4b:6f:fd:1a:a1:7c:b8:f8:3f:81:b6:d0:e4:08:00: 9a:a1:bf:71:95:c1:3d:3c:5b:a1:97:f1:e5:75:45: ba:02:38:16:cf:2c:a2:b3:13:ba:8d:e3:66:cf:78: 85:92:53:8b:02:8d:11:ee:f0:ec:65:f9:0e:55:08: 05:64:ed:5c:99:bd:ab:ea:ad:0a:cb:04:21:f7:8e: 53:8c:53:42:b5:31:ff:5a:7c:fe:55:2f:24:3b:70: bd:7c:59:52:86:00:6f:3f:70:7f:c1:28:61:06:5d: 99:1f:8c:6e:b9:12:3a:1c:5d:89:47:59:a9:c8:c4: 1b:ff:f3:d0:c2:66:d5:a3:f2:1a:8f:9e:4c:22:03: 9c:e6:b3:44:a2:f4:2e:16:29:b7:0d:ac:dc:94:56: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2D:DA:19:27:9A:2B:D1:58:05:F2:0D:4A:11:65:1F:76:BD:A0:EE X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:75:be:c3:eb:68:5b:f5:7e:f2:66:53:4c:68:2f:ea:00:c1: 2a:f3:f4:76:54:ba:37:13:97:7d:07:2c:c4:6e:90:a8:9c:06: 3f:fa:03:7d:61:e9:8d:16:c7:a3:43:a6:72:72:5e:36:5f:5b: 3d:cc:ad:84:c1:39:d0:cc:d6:fd:05:ff:73:0c:45:96:4f:76: 93:2c:f0:61:f3:9e:10:05:b5:42:ec:57:ae:65:dc:09:6b:c5: fd:77:d0:87:4b:82:37:9d:ce:48:f9:76:7c:74:79:89:a7:91: d0:99:04:77:2a:2e:4f:f0:22:ef:fb:00:dc:73:f4:23:3e:7f: 39:58:27:b1:68:78:4c:c2:31:5d:0f:27:da:eb:52:74:76:9f: f5:5b:9a:4b:53:6c:b0:d3:55:3a:e8:27:53:c3:79:38:4a:cb: 05:e0:34:79:75:e5:c6:04:5c:78:46:43:83:e2:ae:c3:72:8b: a9:95:a6:5e:23:be:d0:62:ba:9d:48:af:28:14:6b:c3:a0:8d: 02:ef:f2:84:c9:88:23:42:d6:66:a9:9c:26:16:6f:ca:13:85: fa:b1:10:5a:fe:05:46:3b:eb:06:fb:da:d3:b4:5e:9b:0c:55: 08:43:46:a5:96:f1:9e:02:97:0f:25:5a:3b:fb:ee:46:a0:38: b0:96:05:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNTEyMjMwNjI4MzdaFw0yNTEyMzAwNjI4MzdaMBgxFjAUBgNV BAMMDTY5NGEzNjk1LWUyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTe5XZUFHpJimMJTYFNRKmz2kNh03k8w/GsmJpCy+Nv1BhvSVU5AgYDdunurm5 zOk+7WicRlHGWgTpaZK41sZKR5uo95ef/8qjj+5g+JRhz0h4rgLpM6yaCs2q2VuL 9V4f6yX/sVY410tv/RqhfLj4P4G20OQIAJqhv3GVwT08W6GX8eV1RboCOBbPLKKz E7qN42bPeIWSU4sCjRHu8Oxl+Q5VCAVk7VyZvavqrQrLBCH3jlOMU0K1Mf9afP5V LyQ7cL18WVKGAG8/cH/BKGEGXZkfjG65EjocXYlHWanIxBv/89DCZtWj8hqPnkwi A5zms0Si9C4WKbcNrNyUVpCDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTi3aGSea K9FYBfINShFlH3a9oO4wHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJl1vsPraFv1fvJmU0xoL+oAwSrz9HZUujcTl30HLMRukKicBj/6A31h 6Y0Wx6NDpnJyXjZfWz3MrYTBOdDM1v0F/3MMRZZPdpMs8GHznhAFtULsV65l3Alr xf130IdLgjedzkj5dnx0eYmnkdCZBHcqLk/wIu/7ANxz9CM+fzlYJ7FoeEzCMV0P J9rrUnR2n/VbmktTbLDTVTroJ1PDeThKywXgNHl15cYEXHhGQ4PirsNyi6mVpl4j vtBiup1IrygUa8OgjQLv8oTJiCNC1mapnCYWb8oThfqxEFr+BUY76wb72tO0XpsM VQhDRqWW8Z4Clw8lWjv77kagOLCWBfc= -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:03 2025 by rpki-client