This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: pAxfvrXHvUOxhr27q1buuxssOeXnDNG4kAmL5ZzSNmI= Subject key identifier: 21:C7:E5:60:A5:B8:22:1D:93:FC:4E:FA:C3:C8:63:A4:CC:75:11:86 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 06D9 Signing time: Mon 22 Dec 2025 21:21:56 +0000 Manifest this update: Mon 22 Dec 2025 21:21:55 +0000 Manifest next update: Mon 29 Dec 2025 21:21:55 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: X1JCfB9p4Q0ksMD3kuMeCnvw5RvvFjVOB3x/jKjAhM8=) 2: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: hEey+djFvYlE1JXaWprdcTf+AvgTaP0qwoFIGuxytf8=) 3: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: IfBzr9sVSOqGORxPOUkKKUq6yH0SHvi80/oQFSYNxqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Dec 22 21:21:55 2025 GMT Not After : Dec 29 21:21:55 2025 GMT Subject: CN=6949b673-46f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:ca:24:fe:72:35:fa:9c:ba:19:ed:10:69: 4a:ae:e9:d9:04:94:33:17:39:4d:9c:45:f2:14:3a: 4e:f8:1d:0b:2e:1f:ba:e9:e1:44:4a:d9:48:ad:85: 14:22:33:3e:18:23:83:4f:17:61:52:03:b8:25:88: 2d:eb:a5:1b:bd:94:d8:f9:3b:ec:f0:a8:04:98:53: 65:03:43:54:bc:7c:e1:8d:8d:11:34:85:0a:c6:3a: 67:a0:33:b7:c0:89:e6:af:32:1e:6a:fc:09:49:50: a0:da:11:03:f4:6d:20:a1:e2:e6:cf:02:33:83:ce: 37:05:aa:1f:c7:de:44:6f:da:84:80:d5:c5:e2:4a: e6:1e:a2:fb:b5:46:36:c2:b1:97:39:0d:ee:fe:4d: 3f:b3:25:f6:04:1d:28:6c:5d:bd:83:7e:32:95:45: 48:d9:e9:5d:34:11:55:6c:42:01:78:28:17:c8:16: 33:1d:5a:5b:db:18:28:35:8a:95:a8:63:47:2e:d4: a1:3a:c8:f1:38:a6:49:e0:d0:81:d9:40:91:36:81: 51:6f:48:da:2a:e0:91:97:38:94:82:3b:0b:ce:4b: 8c:3a:31:49:c0:0b:aa:ef:78:6b:8e:15:45:92:55: 80:82:a5:49:61:f4:70:ed:3b:86:d1:69:9f:4b:e8: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C7:E5:60:A5:B8:22:1D:93:FC:4E:FA:C3:C8:63:A4:CC:75:11:86 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:fc:c0:71:4a:75:f0:cd:16:29:29:69:b9:b4:82:f9:fb:1f: ef:1e:93:63:38:32:23:b1:b0:76:c4:fb:94:12:d2:1c:95:02: 0e:6a:3e:bf:2e:5d:56:75:92:e2:af:5b:0e:9e:bc:9e:04:21: 27:b7:d3:e0:d2:f4:24:06:ff:c6:03:85:fb:ab:90:c9:d7:96: 1a:06:96:92:2a:ed:e2:08:95:c5:10:3a:85:b2:84:ef:e5:cc: 0e:4a:c6:2c:a5:ec:b8:a9:21:c0:a8:ca:80:88:35:c6:6a:84: 48:98:d2:55:6b:2a:96:48:7f:22:b9:83:23:24:50:c7:81:4d: 29:dd:72:29:0a:0d:93:63:ba:45:07:bc:f2:09:05:d9:3b:9c: 39:b1:e5:d0:10:6e:aa:be:ff:8a:71:d4:17:12:67:60:5d:ea: da:6b:0d:bc:2c:ea:bb:98:01:01:d3:2f:90:0a:41:5c:1f:2d: ac:46:88:36:54:a2:ba:d8:01:4d:f7:03:0b:50:6b:8d:9b:d7: 54:dc:a9:13:0c:1a:ef:ee:fc:0a:77:87:e5:29:cd:e2:d0:9d: c7:87:05:e3:f9:0c:67:15:2d:0f:a4:f4:35:b1:ad:b0:9b:fa: 91:16:4a:90:95:6c:4b:2b:e0:cd:ab:22:ae:b5:50:07:72:fb: d7:99:43:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUxMjIyMjEyMTU1WhcNMjUxMjI5MjEyMTU1WjAYMRYwFAYD VQQDDA02OTQ5YjY3My00NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRzKJP5yNfqcuhntEGlKrunZBJQzFzlNnEXyFDpO+B0LLh+66eFEStlIrYUU IjM+GCODTxdhUgO4JYgt66UbvZTY+Tvs8KgEmFNlA0NUvHzhjY0RNIUKxjpnoDO3 wInmrzIeavwJSVCg2hED9G0goeLmzwIzg843Baofx95Eb9qEgNXF4krmHqL7tUY2 wrGXOQ3u/k0/syX2BB0obF29g34ylUVI2eldNBFVbEIBeCgXyBYzHVpb2xgoNYqV qGNHLtShOsjxOKZJ4NCB2UCRNoFRb0jaKuCRlziUgjsLzkuMOjFJwAuq73hrjhVF klWAgqVJYfRw7TuG0WmfS+gCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHH5WCl uCIdk/xO+sPIY6TMdRGGMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy/MBxSnXwzRYpKWm5tIL5+x/vHpNjODIjsbB2xPuUEtIclQIOaj6/ Ll1WdZLir1sOnryeBCEnt9Pg0vQkBv/GA4X7q5DJ15YaBpaSKu3iCJXFEDqFsoTv 5cwOSsYspey4qSHAqMqAiDXGaoRImNJVayqWSH8iuYMjJFDHgU0p3XIpCg2TY7pF B7zyCQXZO5w5seXQEG6qvv+KcdQXEmdgXeraaw28LOq7mAEB0y+QCkFcHy2sRog2 VKK62AFN9wMLUGuNm9dU3KkTDBrv7vwKd4flKc3i0J3HhwXj+QxnFS0PpPQ1sa2w m/qRFkqQlWxLK+DNqyKutVAHcvvXmUO7 -----END CERTIFICATE-----Generated at Tue Dec 23 20:03:57 2025 by rpki-client