This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json) Hash identifier: 3x458BgPqnVirg7+H8ekrfAboOjtJlckjAvv4NRArXA= Subject key identifier: 6C:5C:D3:F4:1A:0B:87:C0:81:05:1A:18:B6:4D:0D:0C:D6:D0:0F:44 Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Certificate serial: 22DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft Manifest number: 22D2 Signing time: Mon 22 Dec 2025 15:40:30 +0000 Manifest this update: Mon 22 Dec 2025 15:40:29 +0000 Manifest next update: Mon 29 Dec 2025 15:40:29 +0000 Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: PlbuH0iMm1P3hkOHQzSMQ/VrV4Xzcm01l9Fn6pBPisI=) 2: 27BCA4ECCCAD11F0B8832177C4F9AE02.roa (hash: /b/HE29VkzRu6puxi118aV61lD4MgPZJsNuOhpfIX8Y=) 3: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=) 4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: uQM6SKGof/O1Wbld70qp2buHFHsOt09Sypi0b/EZeEM=) 5: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: yMBDorU4Lt5NEIhIOX3t46/cZp8SC2Q4+GgHPUR0It0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8926 (0x22de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Validity Not Before: Dec 22 15:40:29 2025 GMT Not After : Dec 29 15:40:29 2025 GMT Subject: CN=6949666e-1a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:87:1d:8f:ab:c8:bc:e6:58:f9:80:76:ef: 15:f6:59:21:3f:35:36:62:a9:ae:88:6e:0b:16:d4: cf:0b:b8:79:d6:07:90:8e:b4:b3:bd:72:ce:b1:74: e2:85:ee:fd:d0:c6:f3:1f:2c:4d:2d:4b:90:10:3a: 08:db:1e:f9:ec:7f:25:d2:3b:a2:93:34:10:8e:a4: c7:e4:8d:0b:60:ce:4c:9b:33:79:ea:01:97:f9:f8: e5:1d:96:32:3f:1e:69:51:91:a3:a1:74:7c:d5:eb: 5d:19:46:5a:f9:af:11:91:90:99:f9:3f:e8:00:3a: 54:c9:18:07:41:0b:e8:fe:e2:39:f3:26:66:d7:d6: 29:cc:b4:84:c9:19:e8:54:b5:48:43:8b:db:93:d6: d7:42:a5:c2:77:72:d3:99:0d:f3:73:24:bf:fb:eb: 1b:9d:ab:55:6f:36:fc:3f:55:b3:08:3d:2d:2a:d3: 9f:a2:78:45:54:25:6d:20:4f:52:9a:91:1d:2b:10: 49:3b:7e:44:64:49:1a:93:ca:ac:e5:16:b2:fa:12: 31:60:d6:8b:c0:07:11:cf:55:a4:d8:67:bf:6a:4c: 75:d8:ce:f9:12:1d:4f:ce:81:50:bb:28:a9:69:19: 46:ab:53:b1:37:a3:5f:86:42:e7:51:73:1b:ec:5d: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:D3:F4:1A:0B:87:C0:81:05:1A:18:B6:4D:0D:0C:D6:D0:0F:44 X509v3 Authority Key Identifier: keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:37:32:49:29:73:be:ff:1a:7c:fe:71:37:e7:bc:a8:2c:aa: b1:e3:c1:ed:1c:5c:e9:f6:c8:8d:a7:68:ca:0e:59:21:c0:a5: a1:c6:33:c1:96:fb:2c:7f:6b:6a:01:45:57:9a:cf:32:22:64: d3:2f:9c:43:d5:8e:fa:44:ee:09:45:54:99:34:33:79:23:9f: 98:72:a2:c2:6f:d5:56:65:bd:8b:a6:8e:c6:70:fc:8f:a8:30: 96:4a:5c:7e:63:ca:63:c4:48:ed:51:ab:e7:3f:7e:75:2c:18: 5f:bc:2d:3a:d2:e3:ca:46:fc:3b:cd:d4:9a:1c:ee:29:04:22: a9:0b:ca:70:82:5e:35:ea:02:4f:3f:4f:fc:27:d8:98:06:dd: 29:e9:87:44:a9:9c:fa:1b:92:f2:8b:aa:a4:a7:93:dd:3d:d6: 64:c6:8b:4b:0f:6c:1c:03:30:aa:8f:1c:60:d0:7e:7d:c9:ba: bb:c8:3b:8a:9c:3b:46:79:22:54:2a:cd:95:b5:f5:62:9d:2d: a4:2d:27:d8:db:6f:22:a3:94:a2:6f:fe:36:68:32:d7:55:a8: a3:cd:e0:b6:59:02:5c:dc:c8:99:63:66:d0:22:de:bd:40:e5: 4c:ba:7f:2c:11:42:eb:ef:87:f4:61:30:da:ca:a6:5d:f8:1c: f8:fa:e4:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0 QTFGOUI1MUQwHhcNMjUxMjIyMTU0MDI5WhcNMjUxMjI5MTU0MDI5WjAYMRYwFAYD VQQDDA02OTQ5NjY2ZS0xYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh7iHHY+ryLzmWPmAdu8V9lkhPzU2YqmuiG4LFtTPC7h51geQjrSzvXLOsXTi he790MbzHyxNLUuQEDoI2x757H8l0juikzQQjqTH5I0LYM5MmzN56gGX+fjlHZYy Px5pUZGjoXR81etdGUZa+a8RkZCZ+T/oADpUyRgHQQvo/uI58yZm19YpzLSEyRno VLVIQ4vbk9bXQqXCd3LTmQ3zcyS/++sbnatVbzb8P1WzCD0tKtOfonhFVCVtIE9S mpEdKxBJO35EZEkak8qs5Ray+hIxYNaLwAcRz1Wk2Ge/akx12M75Eh1PzoFQuyip aRlGq1OxN6NfhkLnUXMb7F3LVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxc0/Qa C4fAgQUaGLZNDQzW0A9EMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00 LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1NzJJKXO+/xp8/nE357yoLKqx48HtHFzp9siNp2jKDlkhwKWhxjPB lvssf2tqAUVXms8yImTTL5xD1Y76RO4JRVSZNDN5I5+YcqLCb9VWZb2Lpo7GcPyP qDCWSlx+Y8pjxEjtUavnP351LBhfvC060uPKRvw7zdSaHO4pBCKpC8pwgl416gJP P0/8J9iYBt0p6YdEqZz6G5Lyi6qkp5PdPdZkxotLD2wcAzCqjxxg0H59ybq7yDuK nDtGeSJUKs2VtfVinS2kLSfY228io5Sib/42aDLXVaijzeC2WQJc3MiZY2bQIt69 QOVMun8sEULr74f0YTDayqZd+Bz4+uTE -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:38 2025 by rpki-client