This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json) Hash identifier: JSdxpBAtzMq7B11bTvUiZq9T8gxCDmBqlCKt25kfFI8= Subject key identifier: F6:91:8F:38:2A:B7:AA:5D:59:8B:67:74:DB:D8:1B:9B:41:C4:E3:2D Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft Manifest number: 59 Signing time: Mon 15 Dec 2025 04:06:38 +0000 Manifest this update: Mon 15 Dec 2025 04:06:37 +0000 Manifest next update: Mon 22 Dec 2025 04:06:37 +0000 Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: JiePEScTKi7JPL+XUJo8GGmuugWDJTb9fGp4I21Dnno=) 2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 04:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Validity Not Before: Dec 15 04:06:37 2025 GMT Not After : Dec 22 04:06:37 2025 GMT Subject: CN=693f894d-597b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:a6:2b:bf:70:bf:a5:fe:c4:0a:10:75:54: 27:cb:48:17:54:21:33:03:72:72:db:cc:5f:d1:93: 81:c2:e5:3c:09:a4:27:20:aa:c5:13:67:a2:97:ab: 3a:32:4e:9d:84:48:32:2f:e0:a5:53:45:d2:57:27: b7:45:c9:fd:1b:6b:75:b9:50:93:2e:81:3d:44:88: 67:20:24:dc:17:d3:1d:c4:c6:de:d1:9f:dd:b9:85: 0a:82:2b:86:60:74:57:26:6b:2b:d9:cc:b1:10:7c: d6:33:e7:41:9e:fd:60:e8:39:6b:f8:17:f7:54:45: f6:93:e9:34:f8:86:fb:96:cb:89:5e:4a:ac:49:a7: f0:45:90:75:ac:4a:2c:8d:1a:f2:cc:d1:c3:e9:f7: e5:ee:8f:8d:d1:4c:ad:77:ab:38:40:01:93:3a:8f: 50:d0:f7:db:40:dd:b5:3a:97:55:80:b3:a9:26:8f: fd:d1:88:35:18:7f:71:81:44:2a:b2:63:5e:19:ed: 23:4d:3b:25:d7:b2:65:25:bd:a6:c4:7a:3f:e2:3c: c5:b6:48:c8:1d:69:32:5b:e8:f6:bb:8a:37:7a:50: a5:3a:88:b2:2a:3e:f5:08:4b:81:76:4a:c6:5e:b5: 44:42:5f:72:dc:a4:ac:8d:72:f8:6d:2c:ee:c7:80: f4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:8F:38:2A:B7:AA:5D:59:8B:67:74:DB:D8:1B:9B:41:C4:E3:2D X509v3 Authority Key Identifier: keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:76:7a:5c:f8:df:47:a6:0a:8e:62:a2:26:d2:3e:1f:c6:93: 0a:f8:41:a7:6f:cb:25:a7:cf:e9:a1:56:bb:e5:0f:9b:a7:39: d0:85:8d:60:8f:ad:e8:77:1f:9c:84:5d:71:b4:30:c7:a8:7c: 29:23:88:e1:ef:93:aa:8b:c2:77:7e:40:cd:8e:5e:7d:4d:2b: a0:1d:0c:4b:52:6e:31:2f:e6:85:2f:70:6f:bb:93:02:32:4d: 61:26:f6:23:64:48:fb:a1:02:08:fa:ce:15:2e:cf:3e:f7:a1: c9:e5:88:ce:5d:17:22:d9:1a:96:ee:28:db:84:1c:9e:9f:b7: b1:39:a3:85:e5:8a:95:ba:2f:2d:f2:7b:a6:5f:a3:07:41:f9: 0f:40:dd:e9:1d:01:45:f2:ad:9c:6f:68:60:44:df:ae:95:4b: d5:98:2f:d2:f1:cf:e9:74:76:3b:d1:25:3e:22:1b:0d:38:05: d1:96:5a:56:3a:e2:02:dd:59:1f:b7:f5:8a:26:25:bc:e7:e4: 52:1d:1b:0e:31:2e:d7:fb:a9:8c:81:cc:26:9e:64:ae:d8:a7: a4:45:3e:7d:42:f1:60:8f:eb:0f:79:3c:04:66:04:67:b6:ff: 00:c5:53:5b:ec:76:99:c8:6b:31:3b:4c:bb:c9:52:4a:4d:be: 39:f3:3e:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoODFBNjU3RUFBQzc1NTRDQUI3QTFBMjg4RjVCM0ZFRURE OEE1Q0M0QjAeFw0yNTEyMTUwNDA2MzdaFw0yNTEyMjIwNDA2MzdaMBgxFjAUBgNV BAMMDTY5M2Y4OTRkLTU5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSgaYrv3C/pf7EChB1VCfLSBdUITMDcnLbzF/Rk4HC5TwJpCcgqsUTZ6KXqzoy Tp2ESDIv4KVTRdJXJ7dFyf0ba3W5UJMugT1EiGcgJNwX0x3Ext7Rn925hQqCK4Zg dFcmayvZzLEQfNYz50Ge/WDoOWv4F/dURfaT6TT4hvuWy4leSqxJp/BFkHWsSiyN GvLM0cPp9+Xuj43RTK13qzhAAZM6j1DQ99tA3bU6l1WAs6kmj/3RiDUYf3GBRCqy Y14Z7SNNOyXXsmUlvabEej/iPMW2SMgdaTJb6Pa7ijd6UKU6iLIqPvUIS4F2SsZe tURCX3LcpKyNcvhtLO7HgPT7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9pGPOCq3 ql1Zi2d029gbm0HE4y0wHwYDVR0jBBgwFoAUgaZX6qx1VMq3oaKI9bP+7dilzEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBLzc2MTNGMzE2NTMx MzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2FaWDZxeDFWTXEzb2FLSTliUC03ZGlsekVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBLzc2MTNGMzE2NTMxMzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1x M29hS0k5YlAtN2RpbHpFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ92elz430emCo5ioibSPh/Gkwr4QadvyyWnz+mhVrvlD5unOdCFjWCP reh3H5yEXXG0MMeofCkjiOHvk6qLwnd+QM2OXn1NK6AdDEtSbjEv5oUvcG+7kwIy TWEm9iNkSPuhAgj6zhUuzz73ocnliM5dFyLZGpbuKNuEHJ6ft7E5o4XlipW6Ly3y e6ZfowdB+Q9A3ekdAUXyrZxvaGBE366VS9WYL9Lxz+l0djvRJT4iGw04BdGWWlY6 4gLdWR+39YomJbzn5FIdGw4xLtf7qYyBzCaeZK7Yp6RFPn1C8WCP6w95PARmBGe2 /wDFU1vsdpnIazE7TLvJUkpNvjnzPnE= -----END CERTIFICATE-----Generated at Tue Dec 16 23:04:48 2025 by rpki-client