This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: fzxP2KPLrpEjxyEhtg6l4rFWAG44hmi+qFUI/p1TVO0= Subject key identifier: 10:5C:C3:35:51:0E:EB:22:CB:29:C7:E9:8F:22:5C:51:1B:6B:E7:D1 Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 0825 Signing time: Mon 22 Dec 2025 20:11:43 +0000 Manifest this update: Mon 22 Dec 2025 20:11:43 +0000 Manifest next update: Mon 29 Dec 2025 20:11:43 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: PEQqeo1FmSPg7Y4/pfMChlt/0GHMkUCJk7AOo+I+ayc=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: Dec 22 20:11:43 2025 GMT Not After : Dec 29 20:11:43 2025 GMT Subject: CN=6949a5ff-1b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:a2:3e:4b:2d:7e:12:57:5d:62:5c:64:5c: aa:8e:fe:62:34:be:24:6e:24:c2:6b:2a:03:e3:71: 1b:8d:81:f4:5a:40:7e:ce:38:0b:39:bf:90:34:8c: e5:e5:3c:d5:3f:dd:46:2b:e0:2d:e4:c7:3e:f4:9f: bf:90:ea:0a:23:3f:17:b4:53:e9:e2:ab:07:bd:45: fd:41:bf:b7:fa:d3:04:d9:51:9f:41:5f:63:06:17: d8:58:fb:34:53:4b:b1:ec:ca:68:64:ad:e6:f0:43: d1:5d:23:25:6a:5f:31:38:a8:5f:e8:f2:7d:4f:a8: aa:25:cb:01:2b:3e:39:be:9c:9b:41:21:56:05:7e: eb:45:c6:a7:a1:42:3c:18:48:2d:7f:ca:64:96:90: da:ac:ba:a0:a9:7f:af:af:42:08:c0:01:5f:dd:4a: ce:03:4c:ff:7b:35:52:26:44:34:10:95:f7:d9:2f: ac:89:2b:e9:b4:89:95:16:32:5b:ff:5e:49:56:59: cd:74:5c:0b:e7:09:17:28:0e:a4:62:4f:8a:ee:0e: 38:f7:b4:3f:21:7f:7c:5c:ce:87:41:ec:a3:ec:11: 17:cd:d2:27:dc:e4:94:a5:a7:e8:8a:ee:29:9c:57: b6:22:41:2b:f2:5e:0f:66:3e:9c:12:03:5c:85:ea: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5C:C3:35:51:0E:EB:22:CB:29:C7:E9:8F:22:5C:51:1B:6B:E7:D1 X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1c:96:9c:72:0c:c0:51:88:b8:a3:10:95:bc:5a:b1:b7:f5: 75:9a:b3:13:e6:3f:a6:3d:0b:6b:02:d0:e1:85:28:fa:1a:de: d0:0e:9d:a9:58:08:ca:dd:8e:ad:aa:43:79:cb:46:8b:53:16: 04:e0:70:00:b2:a4:29:93:70:5e:a9:95:30:a7:5e:e1:16:b5: c2:c9:a6:d0:b9:6b:6a:94:e4:ab:18:be:0c:c2:35:3f:0f:06: 02:6c:04:7f:c9:5b:1c:04:a1:5b:5d:1f:03:02:61:b2:88:94: 78:95:b2:3c:40:f5:7e:57:21:a5:28:d5:1b:35:64:2d:d6:10: 8e:cf:58:36:94:9b:e8:37:fe:ad:76:9c:73:29:21:9a:28:2b: ae:45:71:b5:1e:e6:39:9b:63:be:39:5e:91:45:c7:72:e4:35: 44:65:05:7e:4d:99:e2:4f:53:c7:eb:c2:55:a9:32:19:d6:3f: 69:4a:51:74:a9:f7:ec:3f:ed:a2:bd:a5:46:3e:21:6d:e9:39: 28:36:8e:f8:f0:63:e4:72:c8:32:66:71:d5:fa:0f:12:c8:db: ce:ef:b1:ca:b5:d6:2b:8a:35:2a:d3:c9:f2:9d:df:5b:ed:0f: 82:59:fb:73:f8:80:b1:66:e7:8b:8a:fa:c9:4e:ef:17:15:43: 5b:ef:53:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUxMjIyMjAxMTQzWhcNMjUxMjI5MjAxMTQzWjAYMRYwFAYD VQQDDA02OTQ5YTVmZi0xYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDqiPkstfhJXXWJcZFyqjv5iNL4kbiTCayoD43EbjYH0WkB+zjgLOb+QNIzl 5TzVP91GK+At5Mc+9J+/kOoKIz8XtFPp4qsHvUX9Qb+3+tME2VGfQV9jBhfYWPs0 U0ux7MpoZK3m8EPRXSMlal8xOKhf6PJ9T6iqJcsBKz45vpybQSFWBX7rRcanoUI8 GEgtf8pklpDarLqgqX+vr0IIwAFf3UrOA0z/ezVSJkQ0EJX32S+siSvptImVFjJb /15JVlnNdFwL5wkXKA6kYk+K7g4497Q/IX98XM6HQeyj7BEXzdIn3OSUpafoiu4p nFe2IkEr8l4PZj6cEgNcheom7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBcwzVR DusiyynH6Y8iXFEba+fRMB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOHJaccgzAUYi4oxCVvFqxt/V1mrMT5j+mPQtrAtDhhSj6Gt7QDp2p WAjK3Y6tqkN5y0aLUxYE4HAAsqQpk3BeqZUwp17hFrXCyabQuWtqlOSrGL4MwjU/ DwYCbAR/yVscBKFbXR8DAmGyiJR4lbI8QPV+VyGlKNUbNWQt1hCOz1g2lJvoN/6t dpxzKSGaKCuuRXG1HuY5m2O+OV6RRcdy5DVEZQV+TZniT1PH68JVqTIZ1j9pSlF0 qffsP+2ivaVGPiFt6TkoNo748GPkcsgyZnHV+g8SyNvO77HKtdYrijUq08nynd9b 7Q+CWftz+ICxZueLivrJTu8XFUNb71N3 -----END CERTIFICATE-----Generated at Tue Dec 23 11:21:02 2025 by rpki-client