This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json) Hash identifier: LjNiJyN6zmyPU121LRyLIdnqLj2D+0EeBvDysyldBcU= Subject key identifier: 6B:AB:ED:B1:AD:4F:F3:C1:B2:BB:10:B7:C4:34:83:2C:49:5E:C1:CE Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft Manifest number: 7A Signing time: Sun 21 Dec 2025 05:48:56 +0000 Manifest this update: Sun 21 Dec 2025 05:48:56 +0000 Manifest next update: Sun 28 Dec 2025 05:48:56 +0000 Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: yhCxk07WB80UU4eVqxpi5LO0tx5jgNDHWJnnRaq35TY=) 2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Validity Not Before: Dec 21 05:48:56 2025 GMT Not After : Dec 28 05:48:56 2025 GMT Subject: CN=69478a48-7bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:09:51:d7:9e:8e:ca:49:9b:af:ce:a2:66: 0c:87:73:4b:dc:b7:08:69:86:29:59:dc:74:26:9d: 01:2f:ed:4d:81:25:07:69:4d:ed:5c:33:09:cb:9d: b5:62:6d:2e:e4:d7:8f:d0:f8:a6:2b:8c:c8:77:2a: fa:59:50:a2:e6:77:96:19:70:e4:a6:5f:2f:67:32: 6d:fd:4d:d4:5e:4a:3a:e0:0f:f9:ac:bb:c4:d3:8d: 39:59:2a:dc:c4:86:51:73:44:27:0d:90:a7:b5:76: 15:8e:94:13:91:be:b4:09:a3:6c:5e:d3:c3:bb:6a: 98:8b:97:92:4f:33:93:02:92:c5:9c:df:cd:15:93: a0:95:6d:e1:8d:2e:ad:2d:d8:37:71:5c:b5:b6:21: 94:e0:eb:4c:67:6e:bd:18:67:5b:52:89:79:9e:cb: 5d:70:b6:cd:75:5e:42:3e:fc:58:ef:21:ed:4b:9b: 95:9e:60:d4:90:7a:3b:fc:04:62:7f:45:72:1a:3c: 53:5c:04:d1:ff:0f:d2:bf:08:77:a3:68:b9:e0:f4: 8c:52:71:02:92:09:b8:a9:6a:fb:f4:3d:cc:ac:48: 3a:fc:b6:e8:76:25:c0:c5:b1:dd:fc:d7:79:13:82: e9:30:d7:ff:6c:ca:eb:69:8a:6d:bd:d4:7e:53:14: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AB:ED:B1:AD:4F:F3:C1:B2:BB:10:B7:C4:34:83:2C:49:5E:C1:CE X509v3 Authority Key Identifier: keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:10:0f:0f:86:a9:5b:8e:aa:76:75:3f:ce:bb:c6:81:e4:c5: d2:56:14:ee:26:44:67:db:be:bb:32:a3:c8:ad:18:68:e9:ac: b9:6b:ba:f0:b3:4c:f7:eb:fd:9a:87:17:63:1d:e3:36:a4:d8: 93:57:7a:85:5c:da:04:5b:5c:21:cb:3e:2e:ca:86:83:9a:e6: 38:7e:98:ec:b3:13:66:53:f0:3f:d8:74:d3:ec:1f:2e:95:e1: 0d:d7:17:98:70:a9:89:a5:2c:dc:cb:7b:94:73:67:4d:ce:73: bc:77:9b:15:8d:a9:dd:3c:2d:e0:b7:f9:e4:ae:9d:49:08:d6: 06:21:0e:bf:c5:b8:13:49:73:8e:09:10:85:31:f8:c4:ce:ff: 1a:67:61:b6:b3:0e:27:7e:dc:80:98:1a:7b:e7:9e:4f:a9:10: 4a:39:6a:82:4f:30:8a:3c:9f:20:28:c4:76:9b:19:19:3c:7a: 90:72:a4:94:ae:74:dd:21:15:bc:33:52:6f:d7:dd:ad:dc:8d: cf:fc:34:8b:ad:e5:6e:7c:73:58:49:7f:c0:18:4f:d3:3c:a4: e7:54:9d:b4:6d:13:a1:0e:31:a1:58:02:24:7e:58:50:ad:ef: 02:4f:8a:fe:74:f0:a6:ce:33:2d:f7:5d:ed:2a:de:22:6d:99: a3:60:1d:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkVCNzExMC8GA1UEBRMoODA1QUFBMzZDMDE3RTlFODZDMzAzMkEzREFBRThEMjY4 QkRENDI1NDAeFw0yNTEyMjEwNTQ4NTZaFw0yNTEyMjgwNTQ4NTZaMBgxFjAUBgNV BAMMDTY5NDc4YTQ4LTdiYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZiwlR156Oykmbr86iZgyHc0vctwhphilZ3HQmnQEv7U2BJQdpTe1cMwnLnbVi bS7k14/Q+KYrjMh3KvpZUKLmd5YZcOSmXy9nMm39TdReSjrgD/msu8TTjTlZKtzE hlFzRCcNkKe1dhWOlBORvrQJo2xe08O7apiLl5JPM5MCksWc380Vk6CVbeGNLq0t 2DdxXLW2IZTg60xnbr0YZ1tSiXmey11wts11XkI+/FjvIe1Lm5WeYNSQejv8BGJ/ RXIaPFNcBNH/D9K/CHejaLng9IxScQKSCbipavv0PcysSDr8tuh2JcDFsd3813kT gukw1/9syutpim291H5TFL2ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa6vtsa1P 88GyuxC3xDSDLElewc4wHwYDVR0jBBgwFoAUgFqqNsAX6ehsMDKj2q6NJovdQlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2RUI3LzgzMUE4NDJBMUZE RTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0ZxcU5zQVg2ZWhzTURLajJxNk5Kb3ZkUWxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 RUI3LzgzMUE4NDJBMUZERTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVo c01ES2oycTZOSm92ZFFsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABEQDw+GqVuOqnZ1P867xoHkxdJWFO4mRGfbvrsyo8itGGjprLlruvCz TPfr/ZqHF2Md4zak2JNXeoVc2gRbXCHLPi7KhoOa5jh+mOyzE2ZT8D/YdNPsHy6V 4Q3XF5hwqYmlLNzLe5RzZ03Oc7x3mxWNqd08LeC3+eSunUkI1gYhDr/FuBNJc44J EIUx+MTO/xpnYbazDid+3ICYGnvnnk+pEEo5aoJPMIo8nyAoxHabGRk8epBypJSu dN0hFbwzUm/X3a3cjc/8NIut5W58c1hJf8AYT9M8pOdUnbRtE6EOMaFYAiR+WFCt 7wJPiv508KbOMy33Xe0q3iJtmaNgHTM= -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:31 2025 by rpki-client