This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft File: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json) Hash identifier: BsrVWxxMpqWk3ZHgLxuKMEYwuJKUAnfQR+UD/U9iQc4= Subject key identifier: 9D:A1:20:A9:A9:27:D9:7F:2B:5E:5E:5C:DC:67:41:1C:45:14:6C:09 Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 Certificate issuer: /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft Manifest number: 0520 Signing time: Mon 22 Dec 2025 22:39:25 +0000 Manifest this update: Mon 22 Dec 2025 22:39:24 +0000 Manifest next update: Mon 29 Dec 2025 22:39:24 +0000 Files and hashes: 1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: IGD7tps+ixUjXyS3DQJmnMgUAZ96nSceDWmhysxASCE=) 2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: a+Y61sonWEkeUKpiRdmPcvnEh5eS40fnFCOIgfk3fv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Validity Not Before: Dec 22 22:39:24 2025 GMT Not After : Dec 29 22:39:24 2025 GMT Subject: CN=6949c89c-f7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:50:6e:89:7e:e3:aa:af:90:89:59:5d:2a:9e: 3e:95:ba:37:98:f4:c9:77:f2:ad:f4:2f:f1:1f:b1: 39:6e:94:52:b9:cf:6d:c4:c7:e6:fd:1c:90:27:a0: 9a:0d:0b:e2:73:40:0f:75:ff:83:a6:5c:2f:9c:e3: 38:b0:af:a2:29:ff:9d:0f:ea:f0:0d:46:a7:60:fe: cb:1b:3e:5f:7e:f5:5a:1d:98:aa:1d:61:ba:0d:42: f6:f8:6f:5b:a4:ff:2f:5a:cc:ff:bc:94:60:7e:54: 29:1d:3a:63:1b:60:1b:ac:03:5c:d1:b9:5c:fc:ad: ba:2a:0b:8b:1d:e6:ab:15:1d:8e:bd:84:a6:c5:8d: 41:e8:fe:c0:84:79:36:4a:a1:64:ae:04:cb:4a:ea: f9:6e:7b:3e:47:31:2f:81:79:d6:cc:33:c0:59:d8: 8e:9a:02:80:5d:a6:9c:aa:94:fc:2e:5b:95:11:16: f1:cf:11:24:b2:43:20:83:81:59:82:4a:41:24:c1: d5:b4:20:2e:00:2b:f2:7f:3f:ca:8a:0d:9d:32:eb: e0:12:58:80:a5:4b:43:62:97:df:3a:e3:1b:20:20: cf:e9:f8:a4:f5:8e:a5:1c:f1:53:46:40:64:aa:5f: 44:72:8d:b1:2c:f8:13:e3:27:f6:98:e7:a1:62:f7: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A1:20:A9:A9:27:D9:7F:2B:5E:5E:5C:DC:67:41:1C:45:14:6C:09 X509v3 Authority Key Identifier: keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c5:cd:7c:2c:a0:ca:03:bb:bc:27:6a:72:eb:1e:36:0d:5a: f3:05:92:3f:4c:f7:99:8b:3f:17:c9:c2:f6:ef:55:e3:f1:e2: b1:ae:41:cf:6c:13:f4:cd:d5:79:29:1e:86:53:9c:c3:21:69: 93:27:a0:f9:c5:12:b5:ef:2f:f4:86:7d:db:5a:f9:41:1d:90: 80:c1:59:bd:3e:54:2c:87:ef:2e:d2:68:c4:9d:f4:d0:3b:76: de:66:83:0e:67:9d:a0:b6:0d:fd:0b:9b:6f:31:4c:30:4e:a5: bd:8f:37:09:2e:ee:d2:e5:8a:55:1a:de:f1:2a:db:51:f1:19: 15:c2:63:35:11:2a:f8:cb:1a:80:fa:cc:a8:e5:45:04:36:27: 9b:7b:8d:97:f4:5c:44:59:88:84:1c:10:46:77:45:9a:63:9c: 2a:4d:9c:53:37:59:1e:a4:04:e3:ba:86:2e:b9:d3:73:0e:b5: f5:ae:44:9c:9e:74:7c:f1:88:b7:46:f1:f1:07:d7:54:82:44: e0:95:2f:2e:3a:4a:9a:15:10:49:cf:f3:cf:9e:19:23:7a:16: 71:5e:9c:b8:2a:42:b7:d2:46:9f:1f:34:8f:a7:48:0f:3d:a2: ea:8b:9b:12:80:f7:92:50:1e:5f:f0:7c:ed:62:f0:24:50:c6: 1c:3e:5c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5MUMxMTAvBgNVBAUTKDFBNjEyMzA3NTY5NEI4MjIxOEFBMkZDNzZGNjE1QjQw MjU1OTYxNTYwHhcNMjUxMjIyMjIzOTI0WhcNMjUxMjI5MjIzOTI0WjAYMRYwFAYD VQQDDA02OTQ5Yzg5Yy1mN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAilBuiX7jqq+QiVldKp4+lbo3mPTJd/Kt9C/xH7E5bpRSuc9txMfm/RyQJ6Ca DQvic0APdf+DplwvnOM4sK+iKf+dD+rwDUanYP7LGz5ffvVaHZiqHWG6DUL2+G9b pP8vWsz/vJRgflQpHTpjG2AbrANc0blc/K26KguLHearFR2OvYSmxY1B6P7AhHk2 SqFkrgTLSur5bns+RzEvgXnWzDPAWdiOmgKAXaacqpT8LluVERbxzxEkskMgg4FZ gkpBJMHVtCAuACvyfz/Kig2dMuvgEliApUtDYpffOuMbICDP6fik9Y6lHPFTRkBk ql9Eco2xLPgT4yf2mOehYvd6dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2hIKmp J9l/K15eXNxnQRxFFGwJMB8GA1UdIwQYMBaAFBphIwdWlLgiGKovx29hW0AlWWFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkxQy9CQzI2M0E4RTJC RDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVDSVlxaV9IYjJGYlFDVlpZ VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtRWpCMWFVdUNJWXFpX0hiMkZiUUNWWllWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTkxQy9CQzI2M0E4RTJCRDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVD SVlxaV9IYjJGYlFDVlpZVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxc18LKDKA7u8J2py6x42DVrzBZI/TPeZiz8XycL271Xj8eKxrkHP bBP0zdV5KR6GU5zDIWmTJ6D5xRK17y/0hn3bWvlBHZCAwVm9PlQsh+8u0mjEnfTQ O3beZoMOZ52gtg39C5tvMUwwTqW9jzcJLu7S5YpVGt7xKttR8RkVwmM1ESr4yxqA +syo5UUENiebe42X9FxEWYiEHBBGd0WaY5wqTZxTN1kepATjuoYuudNzDrX1rkSc nnR88Yi3RvHxB9dUgkTglS8uOkqaFRBJz/PPnhkjehZxXpy4KkK30kafHzSPp0gP PaLqi5sSgPeSUB5f8HztYvAkUMYcPlyG -----END CERTIFICATE-----Generated at Tue Dec 23 22:42:35 2025 by rpki-client