This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft File: gSWwbgdMKML4IQXEMQAEnt9uAPg.mft (raw, json) Hash identifier: mvKg+yRUScMeqqSyGNKlF6O7qgcf3yFFrIXtyKEVqxc= Subject key identifier: B7:0B:AC:4F:ED:03:39:80:3F:87:44:A8:A0:7F:81:12:02:E5:BD:7F Authority key identifier: 81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8 Certificate issuer: /CN=A917960F/serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft Manifest number: 31 Signing time: Tue 23 Dec 2025 06:25:57 +0000 Manifest this update: Tue 23 Dec 2025 06:25:57 +0000 Manifest next update: Tue 30 Dec 2025 06:25:57 +0000 Files and hashes: 1: gSWwbgdMKML4IQXEMQAEnt9uAPg.crl (hash: CZZsyc1tAi4ngtgQH6xohOCCuB9sn8/T3o7ySqdIYGY=) 2: 84BE275E976C11F0867B3309C4F9AE02.roa (hash: oi8XzJpwIHjUbhgHF5idfGzl4HHACOp+2V7vOP1CBSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917960F, serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8 Validity Not Before: Dec 23 06:25:57 2025 GMT Not After : Dec 30 06:25:57 2025 GMT Subject: CN=694a35f5-d18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:e0:26:37:e3:6b:02:61:c3:bb:79:99:f9: 64:41:ac:f4:10:4b:9f:84:da:24:4d:77:98:56:b3: 68:95:e2:ab:6f:ee:7d:a3:22:33:18:dc:b0:e0:31: 1f:29:9c:a5:c0:0d:cc:c9:46:1c:07:bf:7f:78:4c: 2a:e3:bc:c7:28:79:58:01:d1:39:24:a1:6e:3a:25: d9:78:fa:1d:fe:7d:48:65:c0:03:9c:a3:ac:91:e7: 8e:00:f7:65:ab:88:df:49:9d:99:7b:c1:7c:63:d7: 27:fd:57:e6:b1:98:a0:6f:81:d3:4a:2e:37:e8:18: 94:87:6a:ac:9f:33:4e:41:5d:f7:fc:a2:fc:c0:92: 3e:e6:15:0c:a5:9c:2d:ea:e8:62:47:b0:16:58:a4: 4d:3e:55:7e:01:c5:05:ad:43:95:3b:4e:a7:68:fd: b4:11:72:06:d9:bc:cc:b8:42:29:1c:b7:05:07:24: b6:c4:19:9d:dd:fb:06:2c:a4:8c:ec:50:b4:27:79: f0:bc:d8:a3:80:59:a4:65:7c:b5:8e:e8:a5:21:e8: 8e:d4:f7:d8:dd:72:e2:62:ca:17:01:9c:63:7b:18: 5f:91:5a:8c:13:74:1d:e1:d3:c6:df:a2:0d:10:9e: d7:2b:5b:63:c9:86:5b:cb:c9:f1:90:62:56:68:e2: ac:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0B:AC:4F:ED:03:39:80:3F:87:44:A8:A0:7F:81:12:02:E5:BD:7F X509v3 Authority Key Identifier: keyid:81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:46:b2:21:ea:a5:e7:3a:82:c0:92:fa:6a:be:68:7d:b9:b6: 19:b6:d0:c2:73:4b:d6:c4:38:0d:a5:a5:02:bb:8f:8c:6c:00: 3e:35:21:f3:f1:70:b7:0c:1f:67:22:99:bf:16:57:8b:d0:a6: 69:81:fc:db:c8:2a:56:c9:c5:56:15:5a:73:9e:cd:7c:0d:f6: 9e:45:5b:69:4a:e0:f7:51:c2:3e:2d:fa:65:46:42:99:f7:36: 14:ce:5f:94:61:d3:42:61:94:62:05:82:91:cb:26:1d:15:29: 9a:ee:89:54:9c:89:5d:2e:7b:94:2f:d7:ef:9c:36:ff:50:8d: ea:f0:1f:69:39:9d:32:53:15:32:d9:3d:6e:da:37:45:2e:24: 2a:ea:13:85:47:4b:b6:3f:5c:cf:9c:15:46:ac:94:ef:92:9f: fb:38:1c:27:f4:a1:bc:a1:0f:b8:bb:eb:ad:7d:c5:65:12:ac: ae:74:af:ad:c7:d7:b6:cc:b6:07:2c:c5:e0:66:02:0b:c9:41: bd:6d:21:f5:d0:a3:07:d2:cc:48:68:21:b0:ad:9d:b2:e6:38: 39:ff:01:fc:3e:28:85:62:86:4a:e4:2a:5d:bf:2b:0b:fe:28: ff:d8:31:56:67:79:02:d0:4d:3e:18:d2:cf:df:28:8b:1f:f9: 20:c8:92:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTYwRjExMC8GA1UEBRMoODEyNUIwNkUwNzRDMjhDMkY4MjEwNUM0MzEwMDA0OUVE RjZFMDBGODAeFw0yNTEyMjMwNjI1NTdaFw0yNTEyMzAwNjI1NTdaMBgxFjAUBgNV BAMMDTY5NGEzNWY1LWQxOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4weAmN+NrAmHDu3mZ+WRBrPQQS5+E2iRNd5hWs2iV4qtv7n2jIjMY3LDgMR8p nKXADczJRhwHv394TCrjvMcoeVgB0TkkoW46Jdl4+h3+fUhlwAOco6yR544A92Wr iN9JnZl7wXxj1yf9V+axmKBvgdNKLjfoGJSHaqyfM05BXff8ovzAkj7mFQylnC3q 6GJHsBZYpE0+VX4BxQWtQ5U7Tqdo/bQRcgbZvMy4QikctwUHJLbEGZ3d+wYspIzs ULQnefC82KOAWaRlfLWO6KUh6I7U99jdcuJiyhcBnGN7GF+RWowTdB3h08bfog0Q ntcrW2PJhlvLyfGQYlZo4qz7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtwusT+0D OYA/h0SooH+BEgLlvX8wHwYDVR0jBBgwFoAUgSWwbgdMKML4IQXEMQAEnt9uAPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NjBGL0JBMzVFMEE4OTc2 QjExRjBBRUU3QTU4NEM0RjlBRTAyL2dTV3diZ2RNS01MNElRWEVNUUFFbnQ5dUFQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1NXd2JnZE1LTUw0SVFYRU1RQUVudDl1QVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NjBGL0JBMzVFMEE4OTc2QjExRjBBRUU3QTU4NEM0RjlBRTAyL2dTV3diZ2RNS01M NElRWEVNUUFFbnQ5dUFQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtGsiHqpec6gsCS+mq+aH25thm20MJzS9bEOA2lpQK7j4xsAD41IfPx cLcMH2cimb8WV4vQpmmB/NvIKlbJxVYVWnOezXwN9p5FW2lK4PdRwj4t+mVGQpn3 NhTOX5Rh00JhlGIFgpHLJh0VKZruiVSciV0ue5Qv1++cNv9QjerwH2k5nTJTFTLZ PW7aN0UuJCrqE4VHS7Y/XM+cFUaslO+Sn/s4HCf0obyhD7i76619xWUSrK50r63H 17bMtgcsxeBmAgvJQb1tIfXQowfSzEhoIbCtnbLmODn/Afw+KIVihkrkKl2/Kwv+ KP/YMVZneQLQTT4Y0s/fKIsf+SDIkkE= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:00 2025 by rpki-client