This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: 0+L4m85Z7RIYiv4hDBFwTBmhz9eJ6gONq4m6o46iwuE= Subject key identifier: 90:71:85:CB:45:F1:FE:16:E0:4E:23:E1:B3:2C:AE:AB:45:ED:9E:63 Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 07B7 Signing time: Thu 18 Dec 2025 20:50:56 +0000 Manifest this update: Thu 18 Dec 2025 20:50:55 +0000 Manifest next update: Thu 25 Dec 2025 20:50:55 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: oCAPP61JlTQIjpTrq3Jvc6HLrMH/AGx4S0d+f7wmYW4=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Dec 18 20:50:55 2025 GMT Not After : Dec 25 20:50:55 2025 GMT Subject: CN=69446930-7510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:7a:64:83:c8:b8:0b:56:e9:6e:41:dc:b8: d6:b9:38:5c:c2:6f:f0:4e:e1:8d:32:25:26:1d:f1: 43:a3:b7:35:c0:b6:08:d5:80:d9:1d:9c:29:dc:d2: 68:a4:d5:ba:ed:58:52:a6:b6:10:06:5c:a0:cf:a6: a6:62:a1:3d:d4:6b:7e:a7:e6:4f:e9:74:f0:40:9d: 6b:6f:f7:07:ff:08:9f:57:a8:a3:eb:e1:8f:74:dc: 8f:26:de:3e:e3:f1:54:9d:86:c6:b0:17:a0:0d:83: 7e:d5:57:14:f1:59:7f:ac:ff:2d:0e:e2:25:1e:9b: 9a:9d:d0:72:c6:a7:a2:1a:cc:09:9c:a3:13:66:9d: b4:a4:a3:5f:2e:7a:bc:b2:e8:f4:20:52:2c:c9:a1: 0c:f6:2c:62:27:1d:63:b6:c4:e0:98:9b:82:61:73: 9b:bf:a8:a5:4e:2e:26:61:e5:f8:84:03:8a:2f:03: 8c:fa:4f:01:d1:88:2c:f3:8f:c5:36:f8:7a:51:0a: 5c:cd:18:21:4e:75:37:38:6b:4a:9a:91:e0:2a:d0: 13:f6:ba:24:71:e4:42:b4:29:ff:87:fa:59:3d:49: c3:18:dc:b5:d0:aa:68:cb:d7:e1:09:59:18:7b:00: 34:b6:2f:22:3e:f2:f2:5c:1d:67:ad:2c:d5:60:36: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:71:85:CB:45:F1:FE:16:E0:4E:23:E1:B3:2C:AE:AB:45:ED:9E:63 X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:72:42:81:a2:cc:46:98:d3:f4:12:d3:20:be:2e:e2:70:df: 98:08:0f:e3:7f:62:5e:c0:9c:8d:a9:7b:3a:b4:3f:98:bc:2b: 1d:bd:0a:ee:9e:af:c8:1c:9a:b9:50:ab:f5:f6:f5:b2:0f:b2: 44:d4:c7:58:ad:da:fd:3e:86:2a:d4:86:10:73:2e:06:86:f4: 17:97:fe:9a:73:92:9f:48:21:06:71:ac:d6:b6:3c:03:25:e9: 39:36:15:c4:8d:8a:6f:d2:ca:e6:39:3b:ea:cd:f9:fa:8d:e1: bc:26:8f:83:2c:bc:32:d9:89:66:0c:af:b0:d3:da:73:d2:ee: 01:f9:d3:74:75:5a:a8:4c:06:2a:ae:b2:26:bf:ab:c1:ca:68: ed:a4:55:59:fc:14:ce:a4:88:1b:03:13:77:c2:df:d0:40:28: 65:ab:5b:b8:93:7b:0f:4e:7a:41:8b:31:91:61:9b:71:af:6d: 56:d5:05:98:6d:9b:21:5a:99:98:79:64:c1:f0:91:1f:00:93: a2:ee:33:36:1e:f7:1b:03:22:fe:0a:53:0c:72:17:05:7e:6b: 57:82:15:23:12:e5:c4:42:82:75:74:cd:5b:b0:20:11:d2:14: 07:4b:1b:dc:81:b6:3c:00:57:54:d6:2a:dc:43:de:ba:07:f5: 52:a1:de:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUxMjE4MjA1MDU1WhcNMjUxMjI1MjA1MDU1WjAYMRYwFAYD VQQDDA02OTQ0NjkzMC03NTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunF6ZIPIuAtW6W5B3LjWuThcwm/wTuGNMiUmHfFDo7c1wLYI1YDZHZwp3NJo pNW67VhSprYQBlygz6amYqE91Gt+p+ZP6XTwQJ1rb/cH/wifV6ij6+GPdNyPJt4+ 4/FUnYbGsBegDYN+1VcU8Vl/rP8tDuIlHpuandByxqeiGswJnKMTZp20pKNfLnq8 suj0IFIsyaEM9ixiJx1jtsTgmJuCYXObv6ilTi4mYeX4hAOKLwOM+k8B0Ygs84/F Nvh6UQpczRghTnU3OGtKmpHgKtAT9rokceRCtCn/h/pZPUnDGNy10Kpoy9fhCVkY ewA0ti8iPvLyXB1nrSzVYDavEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBxhctF 8f4W4E4j4bMsrqtF7Z5jMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ckKBosxGmNP0EtMgvi7icN+YCA/jf2JewJyNqXs6tD+YvCsdvQru nq/IHJq5UKv19vWyD7JE1MdYrdr9PoYq1IYQcy4GhvQXl/6ac5KfSCEGcazWtjwD Jek5NhXEjYpv0srmOTvqzfn6jeG8Jo+DLLwy2YlmDK+w09pz0u4B+dN0dVqoTAYq rrImv6vBymjtpFVZ/BTOpIgbAxN3wt/QQChlq1u4k3sPTnpBizGRYZtxr21W1QWY bZshWpmYeWTB8JEfAJOi7jM2HvcbAyL+ClMMchcFfmtXghUjEuXEQoJ1dM1bsCAR 0hQHSxvcgbY8AFdU1ircQ966B/VSod6Z -----END CERTIFICATE-----Generated at Sat Dec 20 10:04:03 2025 by rpki-client