This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: E8OBWzEiO5Sta382zNmvVsIxglho7sqXecjM+abAj5g= Subject key identifier: 3D:C4:10:FB:F0:C1:23:5E:5C:EF:44:38:D9:43:B6:03:F4:35:CC:6C Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0B83 Signing time: Mon 22 Dec 2025 18:37:32 +0000 Manifest this update: Mon 22 Dec 2025 18:37:31 +0000 Manifest next update: Mon 29 Dec 2025 18:37:31 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: NlU/gbGOnWiyBqyYzMbp1ELzkTBhBBQxRdvaHKh9J2U=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: Q9mMB9C2C5zqftIwQCLURXaOhu4FrV/pPVzwERgSn2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Dec 22 18:37:31 2025 GMT Not After : Dec 29 18:37:31 2025 GMT Subject: CN=69498fec-f815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:10:58:0d:cf:84:a6:0b:29:25:44:50:3f: 3e:2b:35:e3:36:5d:92:9f:51:cb:8e:93:b2:28:eb: 27:d5:d0:4f:a5:8b:bd:77:c2:fa:fe:f8:1d:db:5d: dd:8d:0b:42:0c:4b:d5:4a:01:d9:24:07:80:b2:dc: 9e:24:5f:87:4e:e3:25:0a:85:d8:33:e6:e3:ea:00: 4f:20:9d:db:be:05:08:8b:15:2d:20:fe:87:1e:e5: c3:bd:2e:ed:8c:82:f8:e4:b0:a8:61:bc:73:3d:db: 47:49:28:c9:8a:b3:ba:44:b9:4a:e6:bb:18:0b:3a: d8:68:90:f9:b3:04:4d:a4:76:81:00:45:78:b9:96: 46:9c:58:dc:48:e3:7c:fd:56:af:90:ef:04:7f:ab: 05:b1:4b:dd:2d:73:63:50:d9:51:00:40:ae:3a:ea: d6:f4:a0:ae:cf:63:85:3d:89:c6:fe:01:24:0d:e4: 65:66:87:89:e9:18:a5:e1:31:72:ca:6f:97:88:a2: 05:b7:fa:db:20:9d:41:7a:0c:0c:7d:5f:5f:81:00: 7a:44:01:8c:07:9e:08:af:3c:49:aa:0b:fc:73:e2: 07:ed:ea:16:21:f1:2e:c3:07:b6:ef:3f:d9:33:0e: 1b:40:c8:47:e4:0a:ef:9e:8f:89:e8:6d:8b:43:0e: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C4:10:FB:F0:C1:23:5E:5C:EF:44:38:D9:43:B6:03:F4:35:CC:6C X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:15:e7:9d:7f:87:48:9e:40:e1:4a:99:d4:47:51:24:bc:6c: 18:0d:b8:9d:57:5c:ff:3f:4f:52:ce:d0:e3:67:90:99:e2:61: 33:93:f6:f7:6e:c2:c3:57:cc:c2:2c:52:64:cb:88:30:de:70: 0a:b7:5e:7d:18:2c:56:df:31:6c:dc:21:96:3c:10:d1:72:b2: 05:45:2b:d8:94:c7:6a:fe:dd:ea:91:ef:a4:ed:36:e8:98:9b: 30:80:7a:3b:4f:70:98:5f:f5:95:d9:45:d3:b5:e6:5f:83:67: 83:5e:8d:51:50:15:b4:95:2d:64:89:5e:bf:12:80:cd:44:fa: d3:f7:32:a7:55:89:c8:ca:80:7a:91:e6:b3:3d:01:47:90:f6: 48:d4:91:87:14:ff:42:cb:a9:44:ea:1b:07:fd:0f:0e:57:1c: 93:d3:58:49:f4:c6:0c:d6:e5:b0:ea:d1:be:72:af:86:e4:f5: a9:4d:c4:31:10:5f:2b:be:c5:6c:44:33:9c:a6:9f:84:88:b2: 3a:08:3d:88:b9:1e:40:37:d5:76:0d:8d:57:ef:b7:82:d6:69: 7d:4e:a0:0b:4d:cf:36:b9:ba:46:4d:f3:13:ec:be:4e:90:ff: ea:25:85:68:0a:3b:cf:bc:3d:20:6d:ee:ee:99:83:5b:d4:1c: 08:29:a6:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUxMjIyMTgzNzMxWhcNMjUxMjI5MTgzNzMxWjAYMRYwFAYD VQQDDA02OTQ5OGZlYy1mODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXUQWA3PhKYLKSVEUD8+KzXjNl2Sn1HLjpOyKOsn1dBPpYu9d8L6/vgd213d jQtCDEvVSgHZJAeAstyeJF+HTuMlCoXYM+bj6gBPIJ3bvgUIixUtIP6HHuXDvS7t jIL45LCoYbxzPdtHSSjJirO6RLlK5rsYCzrYaJD5swRNpHaBAEV4uZZGnFjcSON8 /VavkO8Ef6sFsUvdLXNjUNlRAECuOurW9KCuz2OFPYnG/gEkDeRlZoeJ6Ril4TFy ym+XiKIFt/rbIJ1BegwMfV9fgQB6RAGMB54IrzxJqgv8c+IH7eoWIfEuwwe27z/Z Mw4bQMhH5Arvno+J6G2LQw6shQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3EEPvw wSNeXO9EONlDtgP0NcxsMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Feedf4dInkDhSpnUR1EkvGwYDbidV1z/P09SztDjZ5CZ4mEzk/b3 bsLDV8zCLFJky4gw3nAKt159GCxW3zFs3CGWPBDRcrIFRSvYlMdq/t3qke+k7Tbo mJswgHo7T3CYX/WV2UXTteZfg2eDXo1RUBW0lS1kiV6/EoDNRPrT9zKnVYnIyoB6 keazPQFHkPZI1JGHFP9Cy6lE6hsH/Q8OVxyT01hJ9MYM1uWw6tG+cq+G5PWpTcQx EF8rvsVsRDOcpp+EiLI6CD2IuR5AN9V2DY1X77eC1ml9TqALTc82ubpGTfMT7L5O kP/qJYVoCjvPvD0gbe7umYNb1BwIKaYP -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:39 2025 by rpki-client