This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json) Hash identifier: mda4NF87XdCdtuPQsFcOYcsEwQBaDPlR686GLejZ1FU= Subject key identifier: 3A:F9:9C:D1:6F:F1:35:F6:31:C2:AA:5A:30:58:31:8F:6F:2F:FA:F2 Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft Manifest number: 55 Signing time: Tue 23 Dec 2025 06:04:21 +0000 Manifest this update: Tue 23 Dec 2025 06:04:20 +0000 Manifest next update: Tue 30 Dec 2025 06:04:20 +0000 Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: 37v3mxxkIiSvn6ArZ5zuuGafDs1SMIIWTCiZRTX7oW4=) 2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: jbmHjCRldQebtcE9n4Zv2veO89dDLab7PzgfvTloAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Validity Not Before: Dec 23 06:04:20 2025 GMT Not After : Dec 30 06:04:20 2025 GMT Subject: CN=694a30e5-6065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:16:17:74:9c:d6:19:dc:82:97:da:7e:2f: 6d:53:ed:52:30:29:2c:f9:ca:10:20:f6:10:55:ed: 26:3b:94:cb:19:18:d9:16:7f:f4:28:ee:59:0f:96: 5f:af:bb:3f:1e:f3:3f:42:2f:80:e9:e3:28:f9:52: 6f:18:24:33:6b:ec:67:fa:13:23:63:3e:ab:42:37: c4:2c:12:e9:50:49:9e:18:15:28:36:97:5c:21:0a: 8d:2d:68:df:a5:35:38:95:0e:30:9a:ba:f2:4a:de: c5:bf:3e:6a:5c:54:24:a4:b1:ee:d9:0a:04:b9:bc: eb:46:4c:ca:29:77:35:6f:f7:b8:6d:9f:b8:1a:23: cf:b9:26:05:80:05:e3:6f:e3:c7:a9:2e:8d:21:0e: 09:7c:50:45:32:07:ba:01:87:1d:8c:61:e7:e0:af: 18:d2:7b:28:8c:65:a3:17:08:09:6b:d2:05:38:34: ac:6a:b8:0d:5f:0f:f6:2e:65:c2:05:6a:92:d5:fb: 94:d5:81:c2:a8:30:c3:27:29:35:35:75:cb:bf:82: 98:36:63:8e:c2:ea:b0:43:f8:33:0c:f2:ff:ea:04: 89:20:f9:d2:bb:0c:77:01:ce:8a:3d:54:8e:73:9b: c1:98:de:dc:a2:20:28:0e:d2:e0:ba:54:fa:c6:3e: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F9:9C:D1:6F:F1:35:F6:31:C2:AA:5A:30:58:31:8F:6F:2F:FA:F2 X509v3 Authority Key Identifier: keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:77:f3:8e:af:e9:94:6d:b9:9b:6c:97:bb:1c:05:50:c1:28: 7a:df:20:92:ff:30:30:50:be:72:aa:31:e5:db:f4:1d:de:5f: f7:bd:fd:b8:e1:30:f7:be:26:72:63:1e:ca:4e:5f:95:5c:36: fc:7a:68:e7:23:de:9f:d0:49:2b:f1:55:61:f0:e5:1e:97:aa: b8:45:ab:30:88:ca:a1:c3:e4:54:b7:04:62:bf:f7:ca:b4:70: 73:be:4d:ad:1e:21:48:8a:14:00:61:8a:f9:9c:36:6f:8e:05: e6:b0:0b:bf:7a:ed:54:08:8e:31:8d:40:28:ec:fc:36:77:98: e1:56:c1:2a:a4:94:9d:fe:24:4c:04:a3:91:4f:06:72:ac:37: 11:79:3d:65:11:d7:8b:61:ae:64:40:5e:fe:98:7e:4b:86:2f: d5:57:01:1e:ac:18:b5:00:9b:5e:17:6a:e7:e0:e4:b6:fd:15: 1d:94:5f:63:2f:0d:86:a7:ef:5a:54:d0:df:14:43:92:72:81: 96:2d:53:58:21:5f:d9:0a:24:40:02:d2:65:56:43:57:61:01: a7:2a:10:44:2f:60:ea:93:24:c1:2f:83:0f:3f:71:23:8f:6f: 09:ef:71:71:d3:42:8e:50:b3:1a:08:2d:79:cc:6e:3f:ba:5c: 93:25:dd:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODQyRTExMC8GA1UEBRMoMTlBMDQzODE5OUZERkUyNERDRjg1NjYyQTQ4QkRCNTc1 MUUxQjVEOTAeFw0yNTEyMjMwNjA0MjBaFw0yNTEyMzAwNjA0MjBaMBgxFjAUBgNV BAMMDTY5NGEzMGU1LTYwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqyBYXdJzWGdyCl9p+L21T7VIwKSz5yhAg9hBV7SY7lMsZGNkWf/Qo7lkPll+v uz8e8z9CL4Dp4yj5Um8YJDNr7Gf6EyNjPqtCN8QsEulQSZ4YFSg2l1whCo0taN+l NTiVDjCauvJK3sW/PmpcVCSkse7ZCgS5vOtGTMopdzVv97htn7gaI8+5JgWABeNv 48epLo0hDgl8UEUyB7oBhx2MYefgrxjSeyiMZaMXCAlr0gU4NKxquA1fD/YuZcIF apLV+5TVgcKoMMMnKTU1dcu/gpg2Y47C6rBD+DMM8v/qBIkg+dK7DHcBzoo9VI5z m8GY3tyiICgO0uC6VPrGPh1xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOvmc0W/x NfYxwqpaMFgxj28v+vIwHwYDVR0jBBgwFoAUGaBDgZn9/iTc+FZipIvbV1Hhtdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NDJFLzYxOTlCRDU0NURF RTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2FCRGdabjlfaVRjLUZaaXBJdmJWMUhodGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NDJFLzYxOTlCRDU0NURFRTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lU Yy1GWmlwSXZiVjFIaHRkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJ3846v6ZRtuZtsl7scBVDBKHrfIJL/MDBQvnKqMeXb9B3eX/e9/bjh MPe+JnJjHspOX5VcNvx6aOcj3p/QSSvxVWHw5R6XqrhFqzCIyqHD5FS3BGK/98q0 cHO+Ta0eIUiKFABhivmcNm+OBeawC7967VQIjjGNQCjs/DZ3mOFWwSqklJ3+JEwE o5FPBnKsNxF5PWUR14thrmRAXv6YfkuGL9VXAR6sGLUAm14Xaufg5Lb9FR2UX2Mv DYan71pU0N8UQ5JygZYtU1ghX9kKJEAC0mVWQ1dhAacqEEQvYOqTJMEvgw8/cSOP bwnvcXHTQo5QsxoILXnMbj+6XJMl3Xc= -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:39 2025 by rpki-client