This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: eEow0/YBvIncX4OHoyicHbSrsFMKrRbg/YI2fDsOrXY= Subject key identifier: 71:DC:77:FA:77:6D:1F:4E:7A:8B:31:30:F9:5B:E3:06:F4:E1:D4:2A Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B59 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B59 Signing time: Tue 16 Dec 2025 15:35:10 +0000 Manifest this update: Tue 16 Dec 2025 15:35:10 +0000 Manifest next update: Tue 23 Dec 2025 15:35:10 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: SiRDuOr1OHO/exuMNU6l18DqS6R3TGp0QsUJmFBJAFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Dec 16 15:35:10 2025 GMT Not After : Dec 23 15:35:10 2025 GMT Subject: CN=69417c2e-dc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:5e:dc:c2:4e:46:75:3b:6a:6f:83:b8:36: bf:84:6e:ef:8a:50:df:76:4c:db:96:cf:55:d6:68: 32:17:f3:25:5e:1d:37:73:b5:4f:ba:e4:86:60:e9: ec:f0:0b:9e:42:95:4d:a3:8f:38:4d:91:86:96:1e: 87:9f:c2:f7:61:49:bc:bb:95:c0:fe:16:f2:83:81: 9b:1f:1f:9a:de:7c:d8:71:a9:7d:ff:0b:0a:ad:19: c1:4a:b4:e6:67:4a:b3:ba:81:56:23:a1:ce:01:9d: 0f:23:b2:0b:13:a2:3f:cd:79:2b:b5:0d:1b:dd:54: 74:e6:24:f1:93:c5:7b:7f:00:c5:b6:3d:e4:80:a6: 31:34:a1:f1:31:8f:af:d0:cf:98:90:81:21:83:bb: 97:62:81:6d:3b:43:eb:da:db:5a:cb:86:3a:43:ef: 3f:21:5c:89:ca:f6:87:97:63:0b:09:08:87:ca:20: 4c:bc:ba:b0:5a:a7:e6:d4:e0:e9:82:6b:2c:2a:65: 75:97:3e:63:4a:73:b3:69:8c:55:db:e0:a9:40:08: 63:27:ce:d2:97:99:23:cd:de:a0:fb:56:25:35:f2: 45:1b:e9:19:7c:5b:7f:52:a1:f8:3b:d5:bf:8d:27: 1c:a1:cf:7b:5f:d2:b5:92:06:dd:dd:c3:41:81:86: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DC:77:FA:77:6D:1F:4E:7A:8B:31:30:F9:5B:E3:06:F4:E1:D4:2A X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a5:f2:f3:a3:b7:ec:9d:a7:c7:a9:38:5e:80:6e:1a:c2:3c: 60:8e:05:f2:e7:6a:8a:31:ce:0d:53:1a:8b:c4:cf:b3:ff:12: bf:fb:1e:89:bb:ec:25:7c:ed:5c:d0:a4:70:04:77:7b:60:b2: 26:6f:36:7d:29:ad:1d:9b:16:6d:c9:0a:4e:71:a7:ec:15:dc: 7c:67:6b:a2:08:53:aa:72:e3:ad:cc:5f:86:91:50:0e:26:96: 35:f3:eb:3d:78:3d:0e:ad:6c:c5:b5:bd:12:4a:2b:e2:be:79: 5e:77:25:da:01:1a:cb:fa:2d:ba:d0:53:71:fc:d5:70:7b:6c: 02:1d:a7:ce:a4:37:0f:58:4e:c3:c1:5d:4e:78:53:91:f0:fb: 38:7f:20:cd:27:d4:d4:60:7a:39:be:47:ad:60:84:a9:95:32: db:fd:e8:3c:d3:9d:70:fa:11:4b:a5:3b:d1:79:de:95:8f:d7: fb:fc:f7:44:30:5a:29:11:82:b7:38:d9:8b:aa:d3:a7:4d:e8: 54:82:92:30:82:e2:fe:79:44:02:0e:31:56:00:3e:59:1d:bf: 15:3d:ff:1f:7a:bc:e1:df:7d:f6:6c:99:10:6b:c3:b5:6b:93: cb:b2:ff:d9:c4:6c:1f:f4:bd:c9:62:9c:f2:1a:81:c8:41:ea: 4a:94:78:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUxMjE2MTUzNTEwWhcNMjUxMjIzMTUzNTEwWjAYMRYwFAYD VQQDDA02OTQxN2MyZS1kYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaNe3MJORnU7am+DuDa/hG7vilDfdkzbls9V1mgyF/MlXh03c7VPuuSGYOns 8AueQpVNo484TZGGlh6Hn8L3YUm8u5XA/hbyg4GbHx+a3nzYcal9/wsKrRnBSrTm Z0qzuoFWI6HOAZ0PI7ILE6I/zXkrtQ0b3VR05iTxk8V7fwDFtj3kgKYxNKHxMY+v 0M+YkIEhg7uXYoFtO0Pr2ttay4Y6Q+8/IVyJyvaHl2MLCQiHyiBMvLqwWqfm1ODp gmssKmV1lz5jSnOzaYxV2+CpQAhjJ87Sl5kjzd6g+1YlNfJFG+kZfFt/UqH4O9W/ jSccoc97X9K1kgbd3cNBgYY4TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHcd/p3 bR9OeosxMPlb4wb04dQqMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCopfLzo7fsnafHqThegG4awjxgjgXy52qKMc4NUxqLxM+z/xK/+x6J u+wlfO1c0KRwBHd7YLImbzZ9Ka0dmxZtyQpOcafsFdx8Z2uiCFOqcuOtzF+GkVAO JpY18+s9eD0OrWzFtb0SSivivnledyXaARrL+i260FNx/NVwe2wCHafOpDcPWE7D wV1OeFOR8Ps4fyDNJ9TUYHo5vketYISplTLb/eg8051w+hFLpTvRed6Vj9f7/PdE MFopEYK3ONmLqtOnTehUgpIwguL+eUQCDjFWAD5ZHb8VPf8ferzh3332bJkQa8O1 a5PLsv/ZxGwf9L3JYpzyGoHIQepKlHg2 -----END CERTIFICATE-----Generated at Thu Dec 18 13:41:10 2025 by rpki-client