This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft File: _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json) Hash identifier: 7uCuoabAxcMLf5UhTh33jzF5EFyBsrZnQi1ZCUOkFaA= Subject key identifier: 25:B1:CD:CE:BB:DC:D3:08:4A:3E:E9:DD:18:97:C3:80:4C:94:07:02 Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 Certificate issuer: /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Certificate serial: 2753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft Manifest number: 2744 Signing time: Mon 22 Dec 2025 15:30:15 +0000 Manifest this update: Mon 22 Dec 2025 15:30:14 +0000 Manifest next update: Mon 29 Dec 2025 15:30:14 +0000 Files and hashes: 1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: Wn7MEvtqt7wUA97CT501RUK4boPrjT3YHxsS3GwPAiI=) 2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: AGdYmprG1+spdhAmRDse9H6yLxE5LG56xPYvpdtuuFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10067 (0x2753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Validity Not Before: Dec 22 15:30:14 2025 GMT Not After : Dec 29 15:30:14 2025 GMT Subject: CN=69496406-8a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:68:e4:f5:0c:59:29:2b:9a:0f:52:ae:67: 95:11:49:6e:e7:9a:7f:a6:1a:fa:ef:4c:15:64:f5: 01:39:1c:c1:20:c3:58:17:25:31:84:51:58:04:21: 4e:63:9c:df:3e:55:1b:1e:e7:2e:8d:59:a5:7d:b8: 88:bb:f3:55:71:34:6b:d1:fb:83:6b:e2:f1:82:a0: 12:c5:48:a5:ed:e4:8b:e4:cc:a2:a0:09:7b:ff:da: 74:cd:42:b5:22:32:c3:65:a5:c7:ad:cc:d8:12:d2: 52:89:67:35:f9:da:58:ce:19:2f:b4:2d:b8:24:b8: a2:2d:5d:7b:2c:41:9f:8b:4d:57:46:08:7c:95:e4: 9e:f6:43:bc:47:66:95:c0:83:31:35:81:07:2c:42: 09:fb:ce:c8:0c:ea:dc:f5:85:45:bd:9a:5e:8d:d2: 40:78:cc:c6:b6:38:50:7c:52:bf:cf:2f:03:fa:4f: 81:e1:b2:6e:6c:86:c1:d4:82:d1:af:8e:d0:c7:6a: 63:75:e8:d6:c4:ea:9b:13:44:37:5b:32:0b:79:9a: df:ca:80:1e:d0:c9:5e:5a:6f:41:17:63:ae:2f:21: 52:0a:07:46:5a:23:c0:5f:07:23:89:88:9d:d2:6d: 7d:20:ad:9a:9c:c1:31:e1:58:5b:ab:01:81:e8:1b: c6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B1:CD:CE:BB:DC:D3:08:4A:3E:E9:DD:18:97:C3:80:4C:94:07:02 X509v3 Authority Key Identifier: keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:9a:a4:58:a8:7a:2b:74:19:7c:c2:c2:6b:08:0f:34:7e: d8:42:a4:d1:40:9d:7a:75:83:57:0e:ec:b6:d2:9a:98:cb:b3: d6:43:57:1a:4e:0a:98:b3:2e:7a:e5:f5:bb:5a:bb:de:63:de: d7:bf:96:9d:48:99:d8:f8:42:38:12:ec:d6:66:72:50:c2:06: 39:69:5b:a8:06:ee:cd:18:76:76:bc:72:57:47:e8:f9:5e:f5: f4:92:09:74:0d:58:c3:1e:24:78:80:1c:75:38:3f:1e:0b:8f: 1f:9e:5b:7e:d7:e8:04:50:44:96:fe:b8:70:50:5c:6f:5d:58: ef:53:08:95:ad:41:f4:c3:62:ea:a1:f9:e9:b4:c1:e3:59:70: 04:b8:f1:22:b2:ad:59:de:65:a9:eb:d7:30:1d:e4:ab:4d:be: 54:90:55:e8:eb:29:5d:47:46:12:65:4d:7a:72:84:ea:d1:57: 81:19:5a:9d:4b:34:03:64:50:04:ec:4c:84:fc:c3:70:36:67: 19:bd:37:95:c0:35:0b:a9:60:dd:e8:27:29:ed:f3:83:d9:e9: 8b:d3:99:fc:0e:9b:56:8a:a3:12:65:a7:e4:24:2b:86:cf:a0: 6e:60:d9:5a:8d:c1:cd:a8:e5:7f:e6:09:5b:9e:35:d8:59:ce: 54:1e:30:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFDOUQxMTAvBgNVBAUTKEZDNjU1QTIxNTQzRUNGNTdCRkEzRUJERjc5NDZBOTk1 NjFFQzUyRjUwHhcNMjUxMjIyMTUzMDE0WhcNMjUxMjI5MTUzMDE0WjAYMRYwFAYD VQQDDA02OTQ5NjQwNi04YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxlo5PUMWSkrmg9SrmeVEUlu55p/phr670wVZPUBORzBIMNYFyUxhFFYBCFO Y5zfPlUbHucujVmlfbiIu/NVcTRr0fuDa+LxgqASxUil7eSL5MyioAl7/9p0zUK1 IjLDZaXHrczYEtJSiWc1+dpYzhkvtC24JLiiLV17LEGfi01XRgh8leSe9kO8R2aV wIMxNYEHLEIJ+87IDOrc9YVFvZpejdJAeMzGtjhQfFK/zy8D+k+B4bJubIbB1ILR r47Qx2pjdejWxOqbE0Q3WzILeZrfyoAe0MleWm9BF2OuLyFSCgdGWiPAXwcjiYid 0m19IK2anMEx4VhbqwGB6BvGpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWxzc67 3NMISj7p3RiXw4BMlAcCMB8GA1UdIwQYMBaAFPxlWiFUPs9Xv6Pr33lGqZVh7FL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUM5RC83M0FDQTVFNENG NDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXoxZV9vLXZmZVVhcGxXSHNV dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVmFJVlEtejFlX28tdmZlVWFwbFdIc1V2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUM5RC83M0FDQTVFNENGNDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXox ZV9vLXZmZVVhcGxXSHNVdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBilJqkWKh6K3QZfMLCawgPNH7YQqTRQJ16dYNXDuy20pqYy7PWQ1ca TgqYsy565fW7WrveY97Xv5adSJnY+EI4EuzWZnJQwgY5aVuoBu7NGHZ2vHJXR+j5 XvX0kgl0DVjDHiR4gBx1OD8eC48fnlt+1+gEUESW/rhwUFxvXVjvUwiVrUH0w2Lq ofnptMHjWXAEuPEisq1Z3mWp69cwHeSrTb5UkFXo6yldR0YSZU16coTq0VeBGVqd SzQDZFAE7EyE/MNwNmcZvTeVwDULqWDd6Ccp7fOD2emL05n8DptWiqMSZafkJCuG z6BuYNlajcHNqOV/5glbnjXYWc5UHjDl -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:45 2025 by rpki-client