This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json) Hash identifier: pWXU336Qig+qngKc2/2L5VuR7NFhNick5fKpI5uLhLA= Subject key identifier: 5C:E7:F4:22:99:0F:A2:A2:D9:7B:6B:C8:3D:A3:75:D4:3D:D7:0D:0E Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft Manifest number: 06B2 Signing time: Mon 22 Dec 2025 21:31:55 +0000 Manifest this update: Mon 22 Dec 2025 21:31:55 +0000 Manifest next update: Mon 29 Dec 2025 21:31:55 +0000 Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: C8zyhsVBRINZa87o3NqXipHLMYVK2es5C89X54iU9o4=) 2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: NEghmZK6SR0tR3ZI4129y+/95/Ec7cMoQlur8P+TYRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE Validity Not Before: Dec 22 21:31:55 2025 GMT Not After : Dec 29 21:31:55 2025 GMT Subject: CN=6949b8cb-9508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:d1:eb:82:64:b7:89:7b:c4:74:d3:e8:24: 7e:b5:11:9c:72:bf:cd:3e:ab:28:61:a4:c3:99:ff: bf:29:8e:fd:ba:0e:53:27:e4:77:47:4a:4e:40:14: 42:46:60:3d:a0:92:58:2a:78:d4:e5:fb:2d:b5:a1: 72:61:06:bb:54:bf:f9:02:15:64:86:52:10:97:86: ac:ca:4f:e4:45:18:ff:46:a1:86:7d:a7:e1:1c:03: 42:56:05:a4:94:ba:f0:18:e3:a5:b6:7b:06:1c:f6: 84:90:f1:3d:5a:84:2f:73:7f:19:54:2f:4d:25:28: d6:be:4b:53:5e:3b:7b:39:54:1e:6f:71:67:e7:9a: fa:35:7e:75:5d:00:5b:48:55:a1:74:7b:44:26:bb: 02:0e:ca:a6:18:88:1c:79:b7:7a:a0:04:fe:6c:a2: 22:83:16:d7:ca:fb:a6:33:ed:f8:19:77:6c:4b:bb: 1d:7e:c7:06:ea:83:32:c9:dc:43:4b:05:23:d6:58: 24:12:70:71:4a:17:61:db:34:aa:9d:44:e0:3a:a8: b9:58:cf:f1:5f:17:2e:cc:b4:6c:b2:5c:47:76:bd: b7:82:7d:14:a4:f7:77:5e:8d:d1:9b:64:41:a0:f2: 8c:da:77:fb:f3:6b:90:3c:fc:9b:9d:e2:71:b9:83: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E7:F4:22:99:0F:A2:A2:D9:7B:6B:C8:3D:A3:75:D4:3D:D7:0D:0E X509v3 Authority Key Identifier: keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:27:31:e5:ca:63:b0:13:bd:fe:9a:62:f2:63:fd:ca:7b: fc:f2:a2:3b:29:e5:3c:3c:a2:e9:12:90:97:c8:70:e5:7a:d4: a3:76:ff:eb:ae:24:72:9d:00:eb:0e:60:f8:c1:e8:b0:de:9d: aa:ab:43:b4:01:25:b4:71:48:55:23:ad:72:a3:07:10:1d:23: a1:18:ad:ee:6b:bb:e6:e1:e7:0d:11:95:14:4d:d6:25:0a:51: ca:6d:f8:22:dc:dd:8d:f8:ab:bc:cc:03:d6:53:01:6f:a4:d6: ff:7b:b2:85:4c:34:4f:ef:0c:5d:ba:5e:af:51:03:cf:03:c9: dd:ab:a6:04:b0:a7:e2:c0:76:34:3d:d6:0e:5e:d7:f3:8f:13: 29:5e:c6:fc:55:2d:14:ae:59:1d:f3:7c:18:8b:ff:85:9d:bc: e1:b9:bf:96:a0:4b:86:19:b0:e1:13:01:f4:ae:75:f7:0f:9f: 59:6e:91:08:97:46:c7:35:71:9d:31:60:31:63:cb:c2:df:bd: 30:2e:ce:e2:67:2c:94:18:d8:d6:42:6d:66:f3:7f:67:db:f6: be:02:a2:28:ce:fd:fc:eb:f9:86:e3:b0:ce:56:6f:ba:0a:50: 1a:42:07:0b:35:d4:83:e5:ae:7f:35:33:08:e7:d6:02:3f:73: 24:87:92:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4NEUxMTAvBgNVBAUTKDAzOERFMDk1RTgzRjZDQTZFNjNBNUYyMzZFN0IyMkYy RkY5OTFCQkUwHhcNMjUxMjIyMjEzMTU1WhcNMjUxMjI5MjEzMTU1WjAYMRYwFAYD VQQDDA02OTQ5YjhjYi05NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVnR64Jkt4l7xHTT6CR+tRGccr/NPqsoYaTDmf+/KY79ug5TJ+R3R0pOQBRC RmA9oJJYKnjU5fsttaFyYQa7VL/5AhVkhlIQl4asyk/kRRj/RqGGfafhHANCVgWk lLrwGOOltnsGHPaEkPE9WoQvc38ZVC9NJSjWvktTXjt7OVQeb3Fn55r6NX51XQBb SFWhdHtEJrsCDsqmGIgcebd6oAT+bKIigxbXyvumM+34GXdsS7sdfscG6oMyydxD SwUj1lgkEnBxShdh2zSqnUTgOqi5WM/xXxcuzLRsslxHdr23gn0UpPd3Xo3Rm2RB oPKM2nf782uQPPybneJxuYMnIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzn9CKZ D6Ki2XtryD2jddQ91w0OMB8GA1UdIwQYMBaAFAON4JXoP2ym5jpfI257IvL/mRu+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg0RS9CMzU4MTM2NDhF REQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JLYm1PbDhqYm5zaTh2LVpH NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0M2dsZWdfYktibU9sOGpibnNpOHYtWkc3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg0RS9CMzU4MTM2NDhFREQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JL Ym1PbDhqYm5zaTh2LVpHNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClhicx5cpjsBO9/ppi8mP9ynv88qI7KeU8PKLpEpCXyHDletSjdv/r riRynQDrDmD4weiw3p2qq0O0ASW0cUhVI61yowcQHSOhGK3ua7vm4ecNEZUUTdYl ClHKbfgi3N2N+Ku8zAPWUwFvpNb/e7KFTDRP7wxdul6vUQPPA8ndq6YEsKfiwHY0 PdYOXtfzjxMpXsb8VS0Urlkd83wYi/+Fnbzhub+WoEuGGbDhEwH0rnX3D59ZbpEI l0bHNXGdMWAxY8vC370wLs7iZyyUGNjWQm1m839n2/a+AqIozv386/mG47DOVm+6 ClAaQgcLNdSD5a5/NTMI59YCP3Mkh5I/ -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:55 2025 by rpki-client