This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: PXQjrYEhCaxPW+c8nHGhzMkx0wdnysiupDW5m+VDY1g= Subject key identifier: D6:F8:F7:82:B3:21:F3:0E:C1:5F:35:FC:BF:A3:C3:C7:6C:05:42:AD Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 06FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 06F2 Signing time: Mon 22 Dec 2025 21:12:51 +0000 Manifest this update: Mon 22 Dec 2025 21:12:51 +0000 Manifest next update: Mon 29 Dec 2025 21:12:51 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: EJoXTVpBYGORFXJpD+Y8ll33LLVwkcL++MigvUUmGZQ=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: 4w/uXYfZSRmzJc52RjrImrLh+EqtuXeWbymI1Ev9aJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Dec 22 21:12:51 2025 GMT Not After : Dec 29 21:12:51 2025 GMT Subject: CN=6949b453-ec18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:f4:3a:00:1d:89:2b:6d:43:ff:4d:3e:d8: 28:32:bb:10:b3:2a:4c:72:13:e2:9d:0c:ca:1e:a1: 82:8a:5c:b8:4f:43:d8:e4:7c:ac:20:ea:2e:0f:89: b3:5a:54:b5:5b:91:fc:d8:6d:d1:a5:c5:e9:f5:83: 5b:fb:66:ff:2c:d9:94:d2:76:9e:d4:f3:18:00:b8: 3c:dd:6a:0f:7c:b2:33:0f:03:dc:55:f4:07:81:36: 3f:f7:f5:6d:f8:81:b1:93:96:f6:f6:20:aa:36:16: fb:b2:93:77:f9:57:f6:f6:71:34:d4:83:dd:07:03: b9:6e:90:99:68:20:cf:39:53:d4:e1:d6:9e:bd:bc: f6:5d:5b:0d:82:ff:e4:ce:14:98:8e:ca:9b:48:8e: cb:eb:65:cc:be:42:7a:a4:dc:e6:9d:f4:f4:4c:e0: b9:5c:0e:51:58:d3:77:ca:11:54:d8:bc:c1:95:d9: 5a:d4:70:c4:b7:ab:b2:d8:4e:e2:60:44:a2:2c:de: 1b:e9:02:4e:0e:14:45:64:0a:16:e1:3a:64:0e:c8: 95:6f:d8:ea:13:eb:a9:33:c8:fc:bc:01:d8:35:97: af:d6:45:7d:63:1f:3a:bd:c9:80:d3:f4:97:7b:bd: 91:20:39:fc:b5:47:34:a4:5a:d2:52:cc:ce:6d:31: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F8:F7:82:B3:21:F3:0E:C1:5F:35:FC:BF:A3:C3:C7:6C:05:42:AD X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b8:cf:15:c3:1f:22:98:1b:63:da:42:d9:83:b0:77:7f:09: d3:60:4b:85:23:d3:67:c6:2b:51:c6:ac:cd:96:6a:5b:63:62: 95:9b:73:af:7e:11:01:ff:18:06:a4:91:ba:01:39:02:94:4b: 60:05:df:53:27:2c:b0:33:c0:90:f2:cc:74:a9:8c:1f:70:fb: 25:16:2e:05:5c:e9:00:42:e7:91:64:29:b9:21:6c:43:b5:82: f7:df:bb:38:51:4c:3b:52:d3:10:8b:49:c9:84:9e:ef:be:e1: 56:12:59:8c:6d:21:41:a3:d3:b4:41:d4:8a:a2:78:83:b4:44: 4f:a7:5c:bf:de:f5:57:7d:ce:9d:ab:94:b2:7d:8f:68:35:7e: 30:5b:4c:bc:c9:f0:23:35:d8:ce:f9:21:eb:5f:11:fc:05:e4: 56:2e:19:8b:b7:10:5c:e4:21:a7:2f:44:22:26:ac:31:1c:dc: 56:13:b0:ee:b2:85:99:60:f6:ca:47:c4:6a:86:be:c4:bb:8c: 18:51:6e:c9:aa:c0:55:c8:8f:e5:e8:fa:af:57:1a:d9:d3:7d: 10:f3:08:4e:a9:08:38:cc:46:78:35:fc:28:db:ff:74:c3:22: 52:fa:0d:16:16:53:67:33:00:2a:d5:6f:a2:ab:83:0c:8a:97: b5:94:bd:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUxMjIyMjExMjUxWhcNMjUxMjI5MjExMjUxWjAYMRYwFAYD VQQDDA02OTQ5YjQ1My1lYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWD0OgAdiSttQ/9NPtgoMrsQsypMchPinQzKHqGCily4T0PY5HysIOouD4mz WlS1W5H82G3RpcXp9YNb+2b/LNmU0nae1PMYALg83WoPfLIzDwPcVfQHgTY/9/Vt +IGxk5b29iCqNhb7spN3+Vf29nE01IPdBwO5bpCZaCDPOVPU4daevbz2XVsNgv/k zhSYjsqbSI7L62XMvkJ6pNzmnfT0TOC5XA5RWNN3yhFU2LzBldla1HDEt6uy2E7i YESiLN4b6QJODhRFZAoW4TpkDsiVb9jqE+upM8j8vAHYNZev1kV9Yx86vcmA0/SX e72RIDn8tUc0pFrSUszObTEb9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNb494Kz IfMOwV81/L+jw8dsBUKtMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANuM8Vwx8imBtj2kLZg7B3fwnTYEuFI9NnxitRxqzNlmpbY2KVm3Ov fhEB/xgGpJG6ATkClEtgBd9TJyywM8CQ8sx0qYwfcPslFi4FXOkAQueRZCm5IWxD tYL337s4UUw7UtMQi0nJhJ7vvuFWElmMbSFBo9O0QdSKoniDtERPp1y/3vVXfc6d q5SyfY9oNX4wW0y8yfAjNdjO+SHrXxH8BeRWLhmLtxBc5CGnL0QiJqwxHNxWE7Du soWZYPbKR8Rqhr7Eu4wYUW7JqsBVyI/l6PqvVxrZ030Q8whOqQg4zEZ4Nfwo2/90 wyJS+g0WFlNnMwAq1W+iq4MMipe1lL23 -----END CERTIFICATE-----Generated at Tue Dec 23 02:12:15 2025 by rpki-client