This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: Gp/SeRamfVM+OyuUIhnh+03wvEpgtR2d0sfLD0crKc4= Subject key identifier: 0D:D2:02:BE:A8:CB:E4:9B:E9:DC:E2:27:8C:F5:D2:AB:72:BB:0C:F3 Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 01F7 Signing time: Tue 23 Dec 2025 01:31:54 +0000 Manifest this update: Tue 23 Dec 2025 01:31:53 +0000 Manifest next update: Tue 30 Dec 2025 01:31:53 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: yCsQeqdLOFf9ssQPM1MVWeFasY7+EyxfVFBgqc2qV94=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: txIJm5SN5mj5ufLae9sOD2bwnfe8kYJIqTNAvBL7Uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Dec 23 01:31:53 2025 GMT Not After : Dec 30 01:31:53 2025 GMT Subject: CN=6949f109-7872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8a:e0:64:c0:e1:dd:77:dc:d8:19:76:3c:8f: 5f:25:2a:e3:49:2f:57:f5:fa:d5:fe:d7:98:57:a8: c4:9f:b8:ce:b1:3c:2d:50:2f:3a:e3:3b:f5:f1:0d: d8:8e:ad:4b:63:1c:75:cd:33:5e:a9:61:6b:46:ed: 00:a8:41:15:a8:83:3a:b6:d4:da:d6:e6:07:db:fa: 58:11:7e:ec:a5:db:f4:42:06:b7:ea:37:8e:46:de: 9a:e1:11:79:c0:2f:75:37:bc:96:2f:3d:74:a2:9a: ec:3e:07:89:48:3e:97:9d:1a:8d:fc:fb:11:a3:0d: 75:79:6f:03:cf:c2:da:7d:30:a0:94:ca:c0:cf:65: f4:61:63:9e:40:ff:3f:16:cd:e3:74:cd:5c:65:bf: 7e:7f:ac:59:64:2e:72:25:84:17:91:aa:61:77:df: 47:a0:8e:93:f9:c6:0c:d3:a3:9d:3d:cb:e3:72:19: 66:43:3f:23:da:98:33:52:c5:c4:31:0a:c5:1c:a8: f9:83:f4:b9:6b:bc:99:e2:6c:8e:dc:9e:0e:75:ee: 50:db:4e:69:ad:84:72:de:88:53:b1:80:d2:8a:da: b3:55:37:12:b8:8d:c8:7d:42:0f:6a:29:28:36:e8: b3:06:c3:be:1e:a3:6b:77:7c:8f:82:8e:53:09:9a: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D2:02:BE:A8:CB:E4:9B:E9:DC:E2:27:8C:F5:D2:AB:72:BB:0C:F3 X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:33:b8:c6:73:e7:ba:c0:6b:d3:10:7b:a7:cc:71:c9:d7:71: 6a:3d:ea:9f:d6:15:32:28:29:44:bc:d1:6c:7f:fa:7f:0b:e6: 6c:5d:0f:e6:fc:ef:b1:a8:7f:a7:52:4d:fa:6b:4f:1f:75:43: e4:5b:31:06:25:33:2d:4e:4c:ab:a8:f1:b4:10:dc:26:1d:97: 1f:1f:cc:60:d0:26:7e:3c:0c:44:28:2e:a3:7a:e9:5f:df:d2: f8:2a:f2:14:53:21:2f:7a:c6:03:53:6f:64:11:af:be:61:bd: af:45:87:91:2a:7f:b5:97:fc:92:b4:ad:ef:aa:5d:95:02:ba: e7:e8:7c:e7:5d:da:3e:24:63:7d:1a:60:e4:38:4c:1f:16:b5: d3:a3:24:fe:97:70:5d:bb:17:5f:df:dc:1c:5c:20:34:6a:6b: da:67:f1:07:fb:53:23:49:e7:e4:0b:11:7d:b7:e7:dd:1a:49: 6d:bf:a8:e3:b1:97:3f:5b:be:e5:7a:23:c6:7f:fe:d3:95:42: fc:82:bb:66:8e:6d:25:1b:fd:c7:1e:f7:08:74:23:56:b1:94: 84:6b:d5:2a:c7:90:6d:78:ee:25:a4:ba:72:1a:5e:f1:46:1e: f6:77:74:a8:8e:99:e9:92:4c:0a:08:1f:ba:54:e8:ca:91:ad: 47:38:de:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUxMjIzMDEzMTUzWhcNMjUxMjMwMDEzMTUzWjAYMRYwFAYD VQQDDA02OTQ5ZjEwOS03ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IrgZMDh3Xfc2Bl2PI9fJSrjSS9X9frV/teYV6jEn7jOsTwtUC864zv18Q3Y jq1LYxx1zTNeqWFrRu0AqEEVqIM6ttTa1uYH2/pYEX7spdv0Qga36jeORt6a4RF5 wC91N7yWLz10oprsPgeJSD6XnRqN/PsRow11eW8Dz8LafTCglMrAz2X0YWOeQP8/ Fs3jdM1cZb9+f6xZZC5yJYQXkaphd99HoI6T+cYM06OdPcvjchlmQz8j2pgzUsXE MQrFHKj5g/S5a7yZ4myO3J4Ode5Q205prYRy3ohTsYDSitqzVTcSuI3IfUIPaiko NuizBsO+HqNrd3yPgo5TCZqKOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3SAr6o y+Sb6dziJ4z10qtyuwzzMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoM7jGc+e6wGvTEHunzHHJ13FqPeqf1hUyKClEvNFsf/p/C+ZsXQ/m /O+xqH+nUk36a08fdUPkWzEGJTMtTkyrqPG0ENwmHZcfH8xg0CZ+PAxEKC6jeulf 39L4KvIUUyEvesYDU29kEa++Yb2vRYeRKn+1l/yStK3vql2VArrn6HznXdo+JGN9 GmDkOEwfFrXToyT+l3Bduxdf39wcXCA0amvaZ/EH+1MjSefkCxF9t+fdGkltv6jj sZc/W77leiPGf/7TlUL8grtmjm0lG/3HHvcIdCNWsZSEa9Uqx5BteO4lpLpyGl7x Rh72d3SojpnpkkwKCB+6VOjKka1HON5X -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:53 2025 by rpki-client