This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: g0QZHVbr6pvKQOfCWDMScjDDJnlZhnDEdYsYSy+5quY= Subject key identifier: 3E:7A:DA:A1:E4:D5:B5:F8:C4:AC:65:FD:85:83:E4:7E:36:6A:86:F3 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: D7 Signing time: Tue 23 Dec 2025 04:36:56 +0000 Manifest this update: Tue 23 Dec 2025 04:36:55 +0000 Manifest next update: Tue 30 Dec 2025 04:36:55 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: XDfvT4icpxQFSb8s3CXdhAMJYM6RgPdcp+DKY8xLKQs=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: 5WheE+aXkzXZDT7gqdgoxdvd7cxjWWrADEec8lz4BxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Dec 23 04:36:55 2025 GMT Not After : Dec 30 04:36:55 2025 GMT Subject: CN=694a1c68-6dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ef:9b:b6:8c:40:1c:51:c7:c8:7e:53:27:1b: ad:d4:69:7d:c9:e3:c7:b9:7b:9b:21:eb:f5:72:f3: a4:91:80:c6:a6:ab:44:7e:00:67:82:6f:85:0e:df: fc:4f:77:ec:a5:22:bc:28:9f:2f:f0:b7:f1:ec:ba: b5:68:a4:67:dc:df:0d:16:b1:aa:7a:99:cd:a7:b8: e9:3c:45:70:94:d3:3b:ea:4d:25:2e:ba:30:c3:d0: f3:d2:e3:0d:6c:20:0f:b8:32:bd:70:88:48:e2:fb: cb:aa:93:e3:b9:68:5e:93:3a:57:bc:c9:ae:02:a0: 2d:f6:32:a5:b3:5e:30:91:35:91:5e:af:a1:f2:48: 18:9e:eb:d4:e7:ba:ee:08:e6:2e:80:6d:74:4e:0c: 53:6a:d0:70:c6:56:65:f0:07:ac:9a:90:76:66:4d: 07:e9:34:15:67:14:ed:af:7e:b9:27:06:ce:1d:38: 2d:73:39:01:95:c4:f5:58:26:5f:4c:3f:71:87:e2: 9c:6e:3b:2a:31:70:88:bd:5c:63:e9:0a:7a:ee:5d: a2:5e:b7:1f:eb:a8:b9:ca:3b:47:50:56:85:02:40: da:c7:64:79:1b:f9:b0:46:ed:71:32:27:85:7b:41: 7e:a7:4c:e3:44:5a:83:b8:9f:48:91:c5:cf:45:6f: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:DA:A1:E4:D5:B5:F8:C4:AC:65:FD:85:83:E4:7E:36:6A:86:F3 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:89:9f:5c:9c:45:88:75:23:11:cd:ad:91:38:38:34:3a:7c: 17:61:87:57:c4:7e:24:56:f4:bc:70:1b:6a:46:2b:13:f5:be: f3:00:3c:d4:a0:fe:9f:04:2d:e3:5c:ee:5b:95:22:e5:d7:5a: 12:de:bd:2d:5c:ec:da:ea:79:23:39:bb:02:cd:3a:42:0c:89: e4:46:f5:dc:13:03:e4:87:c4:35:73:51:28:2d:91:4b:28:e5: e4:ee:c0:52:f0:c1:65:30:f9:70:d0:5d:90:29:89:85:36:13: 9c:fd:e8:79:02:25:25:49:91:1e:fe:25:5b:26:ff:b5:c2:f0: 42:df:64:dc:44:d3:c6:78:ac:99:0d:c9:2c:7e:a7:b2:aa:e4: a0:b2:0c:c8:51:b6:ae:fa:ea:b1:cd:51:91:9e:68:06:6d:ad: bd:9e:32:02:10:9d:fb:26:83:d9:3e:ed:74:af:cc:10:bf:69: 9a:d6:be:03:03:89:38:dd:30:f6:d4:6f:60:b6:59:e7:40:21: ab:74:be:9e:3f:63:af:78:b4:39:89:34:16:91:08:e8:e8:30: ff:52:3d:08:f1:6f:ad:d9:7f:e9:ec:31:0e:66:12:d0:a2:d3: 41:6d:e5:7a:6d:0e:13:74:ec:20:9f:a4:1c:73:87:d2:61:82: a4:95:80:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKEQ0Njk2NEY5RjM3MzFGMkY2M0U2NzAwOEM5MUU1OUM3 RENDNzg1NTcwHhcNMjUxMjIzMDQzNjU1WhcNMjUxMjMwMDQzNjU1WjAYMRYwFAYD VQQDDA02OTRhMWM2OC02ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8u+btoxAHFHHyH5TJxut1Gl9yePHuXubIev1cvOkkYDGpqtEfgBngm+FDt/8 T3fspSK8KJ8v8Lfx7Lq1aKRn3N8NFrGqepnNp7jpPEVwlNM76k0lLroww9Dz0uMN bCAPuDK9cIhI4vvLqpPjuWhekzpXvMmuAqAt9jKls14wkTWRXq+h8kgYnuvU57ru COYugG10TgxTatBwxlZl8AesmpB2Zk0H6TQVZxTtr365JwbOHTgtczkBlcT1WCZf TD9xh+KcbjsqMXCIvVxj6Qp67l2iXrcf66i5yjtHUFaFAkDax2R5G/mwRu1xMieF e0F+p0zjRFqDuJ9IkcXPRW+jswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD562qHk 1bX4xKxl/YWD5H42aobzMB8GA1UdIwQYMBaAFNRpZPnzcx8vY+ZwCMkeWcfcx4VX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FOTI2RTkxMjlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5OWo1bkFJeVI1Wng5ekho VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FOTI2RTkxMjlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5 OWo1bkFJeVI1Wng5ekhoVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyiZ9cnEWIdSMRza2RODg0OnwXYYdXxH4kVvS8cBtqRisT9b7zADzU oP6fBC3jXO5blSLl11oS3r0tXOza6nkjObsCzTpCDInkRvXcEwPkh8Q1c1EoLZFL KOXk7sBS8MFlMPlw0F2QKYmFNhOc/eh5AiUlSZEe/iVbJv+1wvBC32TcRNPGeKyZ DcksfqeyquSgsgzIUbau+uqxzVGRnmgGba29njICEJ37JoPZPu10r8wQv2ma1r4D A4k43TD21G9gtlnnQCGrdL6eP2OveLQ5iTQWkQjo6DD/Uj0I8W+t2X/p7DEOZhLQ otNBbeV6bQ4TdOwgn6Qcc4fSYYKklYDl -----END CERTIFICATE-----Generated at Wed Dec 24 11:12:46 2025 by rpki-client