This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: ALMPeQFQ9hw7JyWHSbsqgwpAVux4Rnuw1vSe2xr92So= Subject key identifier: 58:C2:E9:E3:79:3B:A8:86:F0:7B:24:3C:AF:D4:E1:8B:30:77:DC:E4 Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: EF Signing time: Sun 07 Dec 2025 03:42:56 +0000 Manifest this update: Sun 07 Dec 2025 03:42:55 +0000 Manifest next update: Sun 14 Dec 2025 03:42:55 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: VP/sLs7MsIIoUW9yvzZzW8+XInEF3VBNAUtT+GAhlmk=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: KCUoweqEDh9jHcBtb7W3HaJWTeDZFQpve4LjGr9WIOQ=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: cAiqdNWzTF0sxkzvHv6yM/PcMz/pHk5XzQwUuq8wOgo=) 4: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: aNcYj3A/gGnj4dxbU3z5mV3zt63Nh4QrgMIUUabFzuw=) 5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: SHadC7K9t4sf0FTRuN25Sqtx5daSfJ2m5VktpFS9BJc=) 6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: he2Yg9YLqUGBktzqkNPe9zTZfzSefhfrBKHZ0mm0MXI=) 7: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: 3FjaUGxyX9keX6h1j1EjjACKPn/PD276JgWOPNcm8Oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Dec 7 03:42:55 2025 GMT Not After : Dec 14 03:42:55 2025 GMT Subject: CN=6934f7c0-4191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:2a:fb:3a:7b:36:43:38:38:55:ad:1c:49: 3a:c5:08:b1:6b:78:14:0f:5b:7c:71:61:35:16:c8: d9:de:84:04:04:be:64:8a:49:b3:e1:06:c8:c8:e2: c0:79:6b:d1:10:68:3d:83:53:26:87:72:be:45:5e: c0:b0:eb:59:dd:3a:0a:70:bf:4e:04:41:2b:f7:f8: 75:c6:7e:1c:0f:b4:82:27:49:2d:ed:15:af:11:d6: c3:6f:54:e6:0d:1f:38:38:31:3c:f2:e3:b0:95:85: 4f:9f:f1:cb:d4:52:98:f9:cd:3c:4d:d4:53:90:2e: 42:d1:d2:69:d8:59:91:1a:c0:2c:25:50:c6:64:de: 5b:d8:e8:57:d2:6f:25:3d:8c:f9:06:ed:14:c2:ad: 94:92:16:3b:0e:61:7c:69:11:86:66:61:c6:b6:98: 16:bc:75:f8:1e:b7:86:02:ba:50:26:ee:9d:7e:c4: 0f:9e:4a:1d:8b:31:02:a8:ef:f9:83:74:0d:15:af: d5:67:4d:0c:9c:92:2f:bb:76:9b:1d:05:16:41:b9: 27:80:9f:dc:b2:18:fd:83:e6:08:3d:c0:c0:a2:33: 10:09:52:75:10:ee:1a:12:f4:f9:8f:ac:fc:f0:1a: 87:0f:31:e1:21:64:c1:d2:f6:fa:55:87:9b:37:dd: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:E9:E3:79:3B:A8:86:F0:7B:24:3C:AF:D4:E1:8B:30:77:DC:E4 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ef:bd:15:78:6a:52:b3:ce:2c:86:b8:93:dc:8e:30:d2:bd: 3a:b2:9b:74:64:9a:92:ea:53:60:f1:14:5f:e0:72:fe:03:c0: d0:f9:8d:c4:bf:66:79:fb:57:b6:ba:85:d0:b9:21:5c:1c:31: 59:c3:bc:22:8a:64:55:fe:4f:17:17:f3:94:8e:37:75:db:9e: 27:83:2c:c4:70:56:fd:52:4c:40:32:a7:ba:1c:5e:98:e5:83: 52:bd:bd:8b:d4:2b:ed:9a:96:fa:19:a0:4e:36:43:7b:45:ae: 6e:80:a0:b3:b4:0c:62:12:0d:d0:4a:19:11:b6:50:45:42:2b: dd:b8:ec:41:d6:45:f7:30:e2:19:30:f9:91:38:f3:03:2e:19: e1:e0:d0:9c:f8:41:a5:12:91:64:62:70:6b:08:4e:f4:b0:db: 63:23:87:6d:2b:09:26:2e:3a:a1:95:28:76:1e:ca:72:a4:da: 96:48:43:8d:2d:cc:3f:d9:ef:a5:f0:5c:9e:57:94:05:b2:ab: c4:8f:41:3c:4f:77:b9:9d:97:a7:a3:2d:02:3c:25:d2:da:ba: 10:26:e6:ff:f4:c6:4f:b9:ac:67:08:4c:fe:39:7a:9a:bc:08: 42:22:25:ed:71:89:8d:ad:e3:d9:81:b6:a3:fa:19:d7:52:5a: 72:ee:10:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUxMjA3MDM0MjU1WhcNMjUxMjE0MDM0MjU1WjAYMRYwFAYD VQQDEw02OTM0ZjdjMC00MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2swq+zp7NkM4OFWtHEk6xQixa3gUD1t8cWE1FsjZ3oQEBL5kikmz4QbIyOLA eWvREGg9g1Mmh3K+RV7AsOtZ3ToKcL9OBEEr9/h1xn4cD7SCJ0kt7RWvEdbDb1Tm DR84ODE88uOwlYVPn/HL1FKY+c08TdRTkC5C0dJp2FmRGsAsJVDGZN5b2OhX0m8l PYz5Bu0Uwq2UkhY7DmF8aRGGZmHGtpgWvHX4HreGArpQJu6dfsQPnkodizECqO/5 g3QNFa/VZ00MnJIvu3abHQUWQbkngJ/cshj9g+YIPcDAojMQCVJ1EO4aEvT5j6z8 8BqHDzHhIWTB0vb6VYebN90EuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjC6eN5 O6iG8HskPK/U4Yswd9zkMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr770VeGpSs84shriT3I4w0r06spt0ZJqS6lNg8RRf4HL+A8DQ+Y3E v2Z5+1e2uoXQuSFcHDFZw7wiimRV/k8XF/OUjjd1254ngyzEcFb9UkxAMqe6HF6Y 5YNSvb2L1Cvtmpb6GaBONkN7Ra5ugKCztAxiEg3QShkRtlBFQivduOxB1kX3MOIZ MPmROPMDLhnh4NCc+EGlEpFkYnBrCE70sNtjI4dtKwkmLjqhlSh2HspypNqWSEON Lcw/2e+l8FyeV5QFsqvEj0E8T3e5nZenoy0CPCXS2roQJub/9MZPuaxnCEz+OXqa vAhCIiXtcYmNrePZgbaj+hnXUlpy7hCv -----END CERTIFICATE-----Generated at Mon Dec 8 06:46:33 2025 by rpki-client