This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: TOl7FmKD56WZZCSWYcM7pOyie0jAiIEnTlnHRLInK/4= Subject key identifier: 22:69:77:2A:24:EA:A3:B4:BD:6F:66:1C:F9:32:F2:B6:15:E9:FA:0E Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 1528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 151F Signing time: Sat 20 Dec 2025 16:34:33 +0000 Manifest this update: Sat 20 Dec 2025 16:34:33 +0000 Manifest next update: Sat 27 Dec 2025 16:34:33 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: hW3t8+yZLfodTznRB/WPJ3c/9wJ/gW+qaadMaZ+fhDA=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5416 (0x1528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Dec 20 16:34:33 2025 GMT Not After : Dec 27 16:34:33 2025 GMT Subject: CN=6946d019-4b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:c0:af:b4:8c:36:9a:2b:9c:47:78:ec:f2: d5:1d:0e:0c:3f:34:da:89:c0:80:1e:fa:01:04:6f: c4:3d:c5:83:cd:89:74:bb:57:2a:c1:cd:4c:f4:6a: 9a:c6:6a:48:37:26:06:21:f5:3f:14:09:ba:2c:63: 3a:cc:6f:84:00:7a:6e:cd:4a:f9:ca:17:17:12:23: b2:02:51:fe:f1:3e:a1:0a:f4:6b:f4:90:fc:e3:25: f9:53:65:d3:7c:a0:21:3a:db:76:e2:75:fb:e2:b2: 39:79:43:a4:85:cf:20:de:6e:3f:ab:e4:b2:aa:9d: ed:d1:5f:e8:2f:05:17:7a:71:de:95:ff:81:db:40: 01:29:c5:14:33:8f:85:cc:95:a4:2a:06:85:78:e8: 2a:39:89:21:2a:01:57:66:5c:5a:a3:b3:23:5b:da: a1:e8:bd:dd:3e:2a:4d:25:4f:2d:ca:f9:5c:28:cd: 04:19:4f:9f:f2:a1:05:f7:f6:ba:4a:5a:e6:c6:78: f9:80:87:2e:46:20:00:35:70:cf:9a:34:5a:05:af: 46:1a:7b:c1:9c:6d:8b:e2:b4:17:bc:fc:8a:b6:49: a0:90:19:5b:be:b4:df:e9:6a:17:82:42:89:03:d6: 06:49:01:22:76:d7:4c:19:42:b4:cb:eb:ce:01:a9: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:77:2A:24:EA:A3:B4:BD:6F:66:1C:F9:32:F2:B6:15:E9:FA:0E X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:af:fd:ac:81:65:2d:94:f7:9b:ef:7d:7a:3e:f2:32:a5:eb: d0:3e:05:05:9d:70:84:52:68:67:0b:65:04:5b:76:1c:ee:26: 37:cf:d1:5d:4b:f8:fc:fb:60:f3:74:5b:dc:54:a9:f4:2b:d4: b0:9d:fc:f2:e9:4c:21:5b:38:13:4e:b3:0f:0a:a9:90:24:d4: 88:17:5b:f7:33:ce:80:02:b0:37:60:b7:62:4e:19:be:36:6a: 03:e1:7b:d5:07:fe:8f:c9:b6:d4:f9:f7:b2:fb:e0:19:d2:b9: a4:6a:49:f0:20:96:c5:eb:65:e9:30:b7:d0:32:df:bc:80:fc: db:77:d2:62:44:2d:af:bc:0a:1b:2f:f5:3c:b2:8e:14:a1:3a: 2a:55:18:3e:4d:b7:9a:ca:69:bc:4a:c6:9f:fc:58:e0:cf:fd: cf:f9:f8:34:bd:1b:5d:7a:7b:ce:e0:26:8f:a8:5c:99:7e:c1: eb:15:47:6b:67:0b:38:92:ee:db:21:de:55:45:d6:35:6c:58: e7:a1:07:33:94:d6:ae:f7:94:00:57:a5:46:92:81:16:7c:6f: 55:d3:ae:d7:30:95:e6:8a:fd:8b:ce:5d:0e:e9:55:83:72:37: 53:8c:0f:d9:b5:e5:65:f6:61:ad:b6:ac:9e:59:11:28:d4:e4: 2a:38:08:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUxMjIwMTYzNDMzWhcNMjUxMjI3MTYzNDMzWjAYMRYwFAYD VQQDDA02OTQ2ZDAxOS00YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVzAr7SMNpornEd47PLVHQ4MPzTaicCAHvoBBG/EPcWDzYl0u1cqwc1M9Gqa xmpINyYGIfU/FAm6LGM6zG+EAHpuzUr5yhcXEiOyAlH+8T6hCvRr9JD84yX5U2XT fKAhOtt24nX74rI5eUOkhc8g3m4/q+Syqp3t0V/oLwUXenHelf+B20ABKcUUM4+F zJWkKgaFeOgqOYkhKgFXZlxao7MjW9qh6L3dPipNJU8tyvlcKM0EGU+f8qEF9/a6 Slrmxnj5gIcuRiAANXDPmjRaBa9GGnvBnG2L4rQXvPyKtkmgkBlbvrTf6WoXgkKJ A9YGSQEidtdMGUK0y+vOAamo5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJpdyok 6qO0vW9mHPky8rYV6foOMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPr/2sgWUtlPeb7316PvIypevQPgUFnXCEUmhnC2UEW3Yc7iY3z9Fd S/j8+2DzdFvcVKn0K9Swnfzy6UwhWzgTTrMPCqmQJNSIF1v3M86AArA3YLdiThm+ NmoD4XvVB/6PybbU+fey++AZ0rmkaknwIJbF62XpMLfQMt+8gPzbd9JiRC2vvAob L/U8so4UoToqVRg+Tbeaymm8Ssaf/Fjgz/3P+fg0vRtdenvO4CaPqFyZfsHrFUdr Zws4ku7bId5VRdY1bFjnoQczlNau95QAV6VGkoEWfG9V067XMJXmiv2Lzl0O6VWD cjdTjA/ZteVl9mGttqyeWREo1OQqOAjk -----END CERTIFICATE-----Generated at Sun Dec 21 07:46:06 2025 by rpki-client