This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: pvte11gOBip7IPcHTRirHat9ryuKLvwCBllXLZB+1a8= Subject key identifier: 0C:90:AB:28:1C:B6:79:81:F7:C7:73:94:6F:C9:00:C3:16:C4:23:51 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0BC4 Signing time: Sat 20 Dec 2025 18:29:45 +0000 Manifest this update: Sat 20 Dec 2025 18:29:45 +0000 Manifest next update: Sat 27 Dec 2025 18:29:45 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: 8QxO9x8TmU6YqE9AG+7iDTzgZ50fAag/92+qQ8dhYXI=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: BaHDfNkjZ1fMZBSLRiFXON3hK0vL1pU4sF4hs/DbBBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Dec 20 18:29:45 2025 GMT Not After : Dec 27 18:29:45 2025 GMT Subject: CN=6946eb19-ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:84:d1:af:77:33:9a:41:2b:6b:1d:79:36: d8:8a:ee:6c:ff:25:b7:04:a4:25:b5:a5:94:53:95: 56:2d:28:3e:80:0f:d6:68:88:9a:c1:fe:f3:57:b2: 2d:22:eb:e1:ef:87:f0:a1:49:03:45:4d:18:41:2b: e9:cb:7f:16:a9:f9:5e:da:fd:75:b5:f8:73:c2:39: b6:8f:20:e7:ae:c2:bc:28:78:ba:82:db:3e:e1:2a: 0f:ce:98:2d:6f:ce:b0:74:5f:f5:95:1a:ac:95:ac: ca:b0:3a:58:1a:0f:d0:94:3e:76:73:51:77:ba:8d: 9b:39:9c:bf:a4:9c:ce:64:25:0b:80:1e:ae:0d:41: a6:df:33:6c:ff:d7:81:f8:d3:1b:6f:11:64:bf:ab: 1d:a6:af:b8:fd:30:31:ac:85:02:df:a8:85:1d:6b: 99:36:0d:67:07:c4:49:39:02:05:21:5b:a7:af:51: a2:d1:7c:28:c4:5a:0f:a1:a4:1e:85:d1:de:ff:9d: ad:39:28:09:38:a3:19:f2:14:f1:34:e1:c6:df:a1: 03:07:e0:a1:c2:77:3c:10:9b:b0:2a:8a:9d:74:ec: fe:28:fe:a9:c7:c9:f1:68:1e:47:94:f2:19:0b:20: 52:1d:5a:2f:2e:1f:f3:bf:50:17:f3:d3:4c:e6:43: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:90:AB:28:1C:B6:79:81:F7:C7:73:94:6F:C9:00:C3:16:C4:23:51 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1f:49:f0:72:53:b0:ea:e2:3b:53:a7:25:06:b3:38:9d:b2: 0d:9f:1f:42:8f:3e:11:f6:5a:4a:56:97:c1:fe:21:c0:52:1f: a9:f6:60:56:a4:6e:6a:78:af:31:b2:2d:80:3b:90:cd:0f:c0: c3:c6:fc:46:5d:e8:d5:a8:06:a3:99:1b:42:07:71:67:6d:36: 24:40:1f:e9:2d:ad:16:5b:c3:fb:89:37:90:61:4b:46:67:d0: 6f:5f:a6:75:1d:cd:57:96:07:5a:f6:da:6a:a6:fb:dc:63:06: 9f:5b:37:9d:d4:ed:e0:1f:eb:9a:e3:68:f1:de:b4:40:12:b2: 70:8d:3d:ed:0e:a3:2c:aa:7b:7b:b5:5c:8b:df:f3:53:95:51: e2:48:9d:3a:54:bd:c5:5b:9e:2c:12:62:cd:8a:b7:82:f4:31: 31:88:8c:4d:cf:41:94:25:6b:99:07:f0:aa:3e:8c:a3:7a:3e: ce:ca:a6:17:28:08:8e:e8:90:a7:9d:18:a4:51:88:64:33:68: 95:47:99:39:12:cb:f7:16:12:be:8c:8f:75:58:23:2a:36:cc: 89:a6:09:93:18:36:d4:2f:26:16:e2:bc:40:f8:b7:ec:e0:13: 72:78:4b:22:c4:26:78:3e:a1:cc:3e:16:9e:43:45:64:e8:1b: d3:dc:fe:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUxMjIwMTgyOTQ1WhcNMjUxMjI3MTgyOTQ1WjAYMRYwFAYD VQQDDA02OTQ2ZWIxOS1lZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupOE0a93M5pBK2sdeTbYiu5s/yW3BKQltaWUU5VWLSg+gA/WaIiawf7zV7It Iuvh74fwoUkDRU0YQSvpy38Wqfle2v11tfhzwjm2jyDnrsK8KHi6gts+4SoPzpgt b86wdF/1lRqslazKsDpYGg/QlD52c1F3uo2bOZy/pJzOZCULgB6uDUGm3zNs/9eB +NMbbxFkv6sdpq+4/TAxrIUC36iFHWuZNg1nB8RJOQIFIVunr1Gi0XwoxFoPoaQe hdHe/52tOSgJOKMZ8hTxNOHG36EDB+Chwnc8EJuwKoqddOz+KP6px8nxaB5HlPIZ CyBSHVovLh/zv1AX89NM5kOixQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyQqygc tnmB98dzlG/JAMMWxCNRMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbH0nwclOw6uI7U6clBrM4nbINnx9Cjz4R9lpKVpfB/iHAUh+p9mBW pG5qeK8xsi2AO5DND8DDxvxGXejVqAajmRtCB3FnbTYkQB/pLa0WW8P7iTeQYUtG Z9BvX6Z1Hc1Xlgda9tpqpvvcYwafWzed1O3gH+ua42jx3rRAErJwjT3tDqMsqnt7 tVyL3/NTlVHiSJ06VL3FW54sEmLNireC9DExiIxNz0GUJWuZB/CqPoyjej7OyqYX KAiO6JCnnRikUYhkM2iVR5k5Esv3FhK+jI91WCMqNsyJpgmTGDbULyYW4rxA+Lfs 4BNyeEsixCZ4PqHMPhaeQ0Vk6BvT3P6x -----END CERTIFICATE-----Generated at Mon Dec 22 10:24:05 2025 by rpki-client