This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: oGaXRMFzP/wL6o+dWa4V4OLYxBrMKidPACEJ/ZPlQ7s= Subject key identifier: 1C:B9:C8:25:F5:98:EC:C1:91:04:88:9A:54:F3:9B:7A:DB:7F:D4:4B Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0D14 Signing time: Mon 22 Dec 2025 18:46:07 +0000 Manifest this update: Mon 22 Dec 2025 18:46:06 +0000 Manifest next update: Mon 29 Dec 2025 18:46:06 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: 1kc8yzCzT/P8QKgnsNJCUCCNm+ORO+l/eaPz2kB4T9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Dec 22 18:46:06 2025 GMT Not After : Dec 29 18:46:06 2025 GMT Subject: CN=694991ef-a43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:48:96:53:94:c2:93:63:da:79:7f:81:5f:12: 3f:4e:d8:dd:9e:18:86:a2:04:41:91:3c:81:c4:74: f1:e0:a9:03:f0:c5:2f:9f:9f:77:5c:28:e1:e8:d6: e3:a5:2f:a2:c7:26:75:1d:9f:e0:95:af:9b:15:88: 47:66:04:48:74:2c:85:6d:14:d9:7b:5e:3b:eb:17: 59:3b:d2:93:24:05:42:b5:8e:c9:ee:cb:94:ae:47: b5:47:84:91:87:3b:e1:60:bd:dd:8d:e3:e3:a5:77: e5:67:fc:64:1f:3d:1c:21:58:7a:98:92:ef:b8:ba: 83:ed:29:00:e3:db:26:f9:35:22:0f:8c:b7:51:f1: c2:10:66:6d:ff:2a:df:05:a6:51:88:4f:e3:b9:c2: cb:dc:99:d4:c2:2e:c4:fd:ae:a8:60:60:c2:da:20: 69:8b:a3:a5:48:5d:df:63:47:fb:97:bf:3f:92:a5: 65:1d:76:c7:1b:25:a5:ba:ee:48:51:5f:79:33:75: c5:ea:48:2b:eb:3c:51:f1:c0:c2:97:fa:99:35:cc: 88:30:5e:74:46:10:08:4f:6e:6e:3c:63:41:e0:3f: d1:3f:8d:27:88:2a:e5:a1:a0:39:38:9e:ba:49:27: 0c:9d:72:6c:e0:28:71:6c:1c:9c:42:8a:1a:7e:ef: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B9:C8:25:F5:98:EC:C1:91:04:88:9A:54:F3:9B:7A:DB:7F:D4:4B X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:85:8d:bf:e4:4c:51:b7:0b:f9:e1:77:47:89:ce:41:eb: f7:b0:b0:b4:7e:79:2c:9a:26:aa:b9:cf:e4:22:d7:10:4f:69: db:e8:7c:06:5e:53:46:47:5c:70:c4:20:aa:96:5a:b0:ea:dc: b2:ae:ac:c4:e4:45:e1:bb:3e:78:2f:54:df:bd:f3:a8:ec:f2: 37:ec:70:78:f1:a9:c7:f8:e4:08:6c:01:7c:20:f8:32:b7:94: 85:cc:e3:39:e7:0b:d6:e6:92:13:a7:3d:a9:c5:ff:71:98:7b: 21:65:cf:d9:45:e5:8d:0d:7c:da:65:62:af:18:26:66:23:e5: 29:f1:07:2b:56:b2:66:8e:a4:5f:fc:c3:0c:f5:4d:c2:08:b2: 5d:10:bd:9a:1d:c4:6f:05:37:a6:d0:dd:8a:a5:93:30:f1:ab: 73:a4:06:2a:fc:a4:5a:96:97:de:2e:8a:2f:d5:74:6f:a0:24: 17:02:70:9e:eb:09:e6:91:1a:51:2a:98:36:2a:96:4d:28:1e: f9:75:46:f7:29:93:16:61:38:12:a6:08:0c:7d:d3:c8:b7:04: f0:d1:4f:0e:5d:5d:8d:40:f3:a0:4d:d9:03:d9:dc:17:3d:65: 4f:55:be:9c:21:1e:94:bf:c7:31:9a:4a:48:4e:6c:b1:4d:c9: e4:c3:4d:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUxMjIyMTg0NjA2WhcNMjUxMjI5MTg0NjA2WjAYMRYwFAYD VQQDDA02OTQ5OTFlZi1hNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kiWU5TCk2PaeX+BXxI/TtjdnhiGogRBkTyBxHTx4KkD8MUvn593XCjh6Nbj pS+ixyZ1HZ/gla+bFYhHZgRIdCyFbRTZe1476xdZO9KTJAVCtY7J7suUrke1R4SR hzvhYL3djePjpXflZ/xkHz0cIVh6mJLvuLqD7SkA49sm+TUiD4y3UfHCEGZt/yrf BaZRiE/jucLL3JnUwi7E/a6oYGDC2iBpi6OlSF3fY0f7l78/kqVlHXbHGyWluu5I UV95M3XF6kgr6zxR8cDCl/qZNcyIMF50RhAIT25uPGNB4D/RP40niCrloaA5OJ66 SScMnXJs4ChxbBycQooafu+kuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBy5yCX1 mOzBkQSImlTzm3rbf9RLMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB88oWNv+RMUbcL+eF3R4nOQev3sLC0fnksmiaquc/kItcQT2nb6HwG XlNGR1xwxCCqllqw6tyyrqzE5EXhuz54L1TfvfOo7PI37HB48anH+OQIbAF8IPgy t5SFzOM55wvW5pITpz2pxf9xmHshZc/ZReWNDXzaZWKvGCZmI+Up8QcrVrJmjqRf /MMM9U3CCLJdEL2aHcRvBTem0N2KpZMw8atzpAYq/KRalpfeLoov1XRvoCQXAnCe 6wnmkRpRKpg2KpZNKB75dUb3KZMWYTgSpggMfdPItwTw0U8OXV2NQPOgTdkD2dwX PWVPVb6cIR6Uv8cxmkpITmyxTcnkw02o -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:47 2025 by rpki-client