This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft File: gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json) Hash identifier: HyFkwLNZfirzi9Es6cpPxyFO1NlkHbGAVZOKu4oHguI= Subject key identifier: 10:C7:8C:D2:E3:9A:C5:D6:03:18:B3:94:07:2B:FC:6C:F8:4C:8C:A6 Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28 Certificate issuer: /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28 Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft Manifest number: 0BA1 Signing time: Thu 18 Dec 2025 18:40:13 +0000 Manifest this update: Thu 18 Dec 2025 18:40:12 +0000 Manifest next update: Thu 25 Dec 2025 18:40:12 +0000 Files and hashes: 1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: FVXAd3Zcaux5sQRLz8K5HtEhCSPVpL9xpmJtXwbwO8E=) 2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: o4u5Q2Jc2gCY8tVjsD1bgPzcbwwoDr6mqctN+7fPekU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28 Validity Not Before: Dec 18 18:40:12 2025 GMT Not After : Dec 25 18:40:12 2025 GMT Subject: CN=69444a8d-ff5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:dc:f2:74:09:e3:4f:62:1b:3a:cf:d6:0e: 4a:fb:26:24:03:3b:d2:c8:6e:04:fe:3e:88:24:be: 5c:16:da:97:cd:52:21:b4:83:25:4e:3f:99:ae:2e: bb:d6:3f:29:b3:41:15:3b:ca:be:c7:be:38:44:c9: 88:9d:56:d5:d6:f8:3a:70:4e:46:8d:6c:73:4f:ba: c8:88:5f:3e:73:d0:75:e2:1a:db:43:96:ff:3b:c3: 3d:2e:74:ff:a3:b4:34:3d:98:59:65:58:6f:88:8a: da:7c:64:54:04:df:d1:fc:c5:8e:1e:d7:4e:e5:f8: dc:a6:f9:1b:9a:7a:57:e7:87:a2:e3:82:1c:a1:52: 30:ea:cb:97:ad:4b:c7:a1:c8:33:85:30:df:25:25: ef:0c:e2:f8:33:39:1f:f1:01:db:e0:39:39:1f:75: 8a:36:28:78:2b:d9:51:e3:70:67:6e:c7:87:3d:fc: ca:e5:02:25:be:d4:86:0b:78:17:99:f1:1f:e1:4c: f4:cb:e4:60:78:b7:20:e8:64:fa:5a:8f:c8:93:4a: 33:ce:a0:fe:f5:e1:02:ac:69:c7:b6:1e:b2:31:05: 80:24:f6:9a:6d:7f:2e:dd:4c:69:a3:7d:54:0f:29: e1:1b:b6:10:9b:34:7f:5b:84:e8:0c:60:62:12:8c: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C7:8C:D2:E3:9A:C5:D6:03:18:B3:94:07:2B:FC:6C:F8:4C:8C:A6 X509v3 Authority Key Identifier: keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b8:02:94:f1:b1:8b:66:12:40:ea:cf:05:4e:1a:21:62:2a: 4f:0c:7c:45:05:6b:98:3b:1a:b4:ca:f8:48:bd:f7:58:13:71: 86:92:99:e4:72:21:f3:08:7a:cc:96:8f:c1:9c:2f:24:60:6d: a3:a4:3d:3a:10:f1:c9:dd:72:0f:a4:a9:15:ea:85:b0:37:11: 52:bd:66:a4:29:e2:92:2d:4a:6e:ec:b2:a1:43:50:d9:fa:54: d7:5e:fe:46:4b:ff:72:46:c5:21:e8:59:fd:44:56:88:46:8d: d2:81:8e:ec:6a:10:19:e8:ed:39:ff:3a:17:9d:50:9a:45:fe: 29:78:1b:20:24:65:84:29:2c:8a:1c:3b:86:f4:e4:03:d9:03: 64:ec:9b:4d:78:01:24:b4:6c:ae:ac:ac:0e:6c:2e:71:0c:86: d4:da:09:64:07:f3:db:b0:91:6e:33:23:ef:0d:26:aa:6d:b0: 86:3a:dc:18:15:6b:d7:1b:1e:81:69:cf:e8:a1:2a:d3:60:19: b6:43:16:89:dc:72:09:26:52:0c:9f:e0:20:07:e1:1a:a9:ce: 16:ed:00:8e:b4:1f:cd:b3:54:03:70:0b:64:3e:c5:ce:44:36: b7:2d:ad:b8:c8:96:27:50:53:d9:46:c2:58:a2:0e:49:38:5d: eb:76:95:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwODgxMTAvBgNVBAUTKDgwMTdGOEY2QjFFQzAyM0M0ODM2QTQ1N0E3QjA1ODQy QTA3MTlGMjgwHhcNMjUxMjE4MTg0MDEyWhcNMjUxMjI1MTg0MDEyWjAYMRYwFAYD VQQDDA02OTQ0NGE4ZC1mZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGrc8nQJ409iGzrP1g5K+yYkAzvSyG4E/j6IJL5cFtqXzVIhtIMlTj+Zri67 1j8ps0EVO8q+x744RMmInVbV1vg6cE5GjWxzT7rIiF8+c9B14hrbQ5b/O8M9LnT/ o7Q0PZhZZVhviIrafGRUBN/R/MWOHtdO5fjcpvkbmnpX54ei44IcoVIw6suXrUvH ocgzhTDfJSXvDOL4Mzkf8QHb4Dk5H3WKNih4K9lR43BnbseHPfzK5QIlvtSGC3gX mfEf4Uz0y+RgeLcg6GT6Wo/Ik0ozzqD+9eECrGnHth6yMQWAJPaabX8u3Uxpo31U DynhG7YQmzR/W4ToDGBiEow4GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDHjNLj msXWAxizlAcr/Gz4TIymMB8GA1UdIwQYMBaAFIAX+Pax7AI8SDakV6ewWEKgcZ8o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjA4OC9GNTY5Q0Y3NjM4 NzcxMUVBOTM2OTUxNzlDNEY5QUUwMi9nQmY0OXJIc0FqeElOcVJYcDdCWVFxQnhu eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCZjQ5ckhzQWp4SU5xUlhwN0JZUXFCeG55Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjA4OC9GNTY5Q0Y3NjM4NzcxMUVBOTM2OTUxNzlDNEY5QUUwMi9nQmY0OXJIc0Fq eElOcVJYcDdCWVFxQnhueWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGuAKU8bGLZhJA6s8FThohYipPDHxFBWuYOxq0yvhIvfdYE3GGkpnk ciHzCHrMlo/BnC8kYG2jpD06EPHJ3XIPpKkV6oWwNxFSvWakKeKSLUpu7LKhQ1DZ +lTXXv5GS/9yRsUh6Fn9RFaIRo3SgY7sahAZ6O05/zoXnVCaRf4peBsgJGWEKSyK HDuG9OQD2QNk7JtNeAEktGyurKwObC5xDIbU2glkB/PbsJFuMyPvDSaqbbCGOtwY FWvXGx6Bac/ooSrTYBm2QxaJ3HIJJlIMn+AgB+Eaqc4W7QCOtB/Ns1QDcAtkPsXO RDa3La24yJYnUFPZRsJYog5JOF3rdpX4 -----END CERTIFICATE-----Generated at Fri Dec 19 18:01:42 2025 by rpki-client