This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: dhw8dJlLUg8+zdM1jehDHZfvCLXGAIr/to0djyHw/TY= Subject key identifier: DD:CF:1C:72:D5:92:EA:2A:A3:4C:D7:9C:29:20:D0:A0:63:A9:FA:22 Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 55FD Signing time: Wed 24 Dec 2025 14:49:48 +0000 Manifest this update: Wed 24 Dec 2025 14:49:47 +0000 Manifest next update: Wed 31 Dec 2025 14:49:47 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: VlrsS9tWqZakpZcPVUen790GD8iXXgyYJhTkacYKCqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Validity Not Before: Dec 24 14:49:47 2025 GMT Not After : Dec 31 14:49:47 2025 GMT Subject: CN=694bfd8c-4a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:cd:d6:da:97:32:03:43:d7:e6:67:ba:e2: 14:fb:5e:e7:e9:7f:7f:5b:e3:35:e5:94:75:34:b0: 2a:73:cf:9a:18:a1:0a:3d:ce:f6:e6:34:17:f7:24: a3:57:80:e7:79:af:d1:29:06:af:1e:64:e8:f7:ee: 08:35:80:b3:a7:aa:02:b8:ec:93:c6:0f:84:2d:24: 39:1b:9a:54:c4:f1:34:dc:17:d3:0c:4c:7f:cb:73: 98:6f:25:22:83:b3:e2:35:6b:c0:87:95:50:64:14: 72:25:9a:56:23:71:15:24:6a:eb:29:e4:e7:4d:5e: 31:ce:53:31:32:fd:82:78:a1:b7:61:ec:9b:4a:3a: 01:d5:43:05:fd:2c:f0:cb:06:6b:c8:51:98:73:1e: af:62:9d:69:f9:fd:66:cf:27:cb:bb:02:17:96:dc: 37:ec:d2:6d:d9:b2:6a:61:02:0c:ff:72:e0:6a:04: 15:e2:4d:5b:4e:00:2b:55:a1:fd:ca:eb:c7:e4:06: c4:15:dd:35:5b:e6:30:8a:65:e1:25:c9:4e:ee:cb: 39:30:c3:83:32:40:81:ce:11:df:00:5d:81:26:3b: ce:bd:f1:3c:be:21:0a:d6:d7:fa:82:d8:62:5c:ed: 26:19:6c:63:94:02:4a:41:2f:e9:e4:4f:71:df:f9: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CF:1C:72:D5:92:EA:2A:A3:4C:D7:9C:29:20:D0:A0:63:A9:FA:22 X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e1:ca:3a:0e:6e:1c:94:14:0b:2f:94:57:c2:3f:d1:22:f4: 64:77:13:30:e7:ab:c4:a0:6d:5e:a8:56:27:b8:08:5e:4a:89: 8e:21:37:1b:1b:9b:bd:37:56:16:bd:75:81:7e:4f:11:24:47: 52:ac:52:ca:95:a2:4f:1f:72:73:df:4d:44:f5:ea:11:ed:e6: 57:41:65:99:ce:cb:3d:66:6c:6e:81:80:c1:22:08:73:25:1b: 8b:c0:2f:97:66:3e:33:b8:4f:46:9f:5f:f7:26:c8:81:23:25: cd:d1:a1:64:90:b1:7b:51:04:da:14:c4:96:c8:b6:cf:2a:aa: f9:3d:3a:4e:00:55:c9:66:71:c3:04:f3:c3:b1:70:74:55:ec: 2f:93:02:2c:da:fd:fa:4f:c2:f9:5e:4d:a9:28:ec:6c:a4:f2: 7c:2c:9a:5c:a4:50:e3:9a:0e:e7:1a:65:1a:c0:cf:a0:f4:69: a2:a6:dc:77:1f:8d:7f:a1:6b:5f:5c:ad:01:1a:62:9d:a0:7f: 04:35:d5:4d:9b:d4:d7:25:4e:8d:1c:8f:bd:34:1d:bd:23:3a: 04:84:ac:d6:85:1b:fe:07:1e:b6:53:33:23:67:b0:45:9d:9b: f5:5f:92:4f:02:cb:44:3e:1d:48:66:73:7a:be:a7:a2:8f:02: a5:4d:b3:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjUxMjI0MTQ0OTQ3WhcNMjUxMjMxMTQ0OTQ3WjAYMRYwFAYD VQQDDA02OTRiZmQ4Yy00YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T7N1tqXMgND1+ZnuuIU+17n6X9/W+M15ZR1NLAqc8+aGKEKPc725jQX9ySj V4Dnea/RKQavHmTo9+4INYCzp6oCuOyTxg+ELSQ5G5pUxPE03BfTDEx/y3OYbyUi g7PiNWvAh5VQZBRyJZpWI3EVJGrrKeTnTV4xzlMxMv2CeKG3YeybSjoB1UMF/Szw ywZryFGYcx6vYp1p+f1mzyfLuwIXltw37NJt2bJqYQIM/3LgagQV4k1bTgArVaH9 yuvH5AbEFd01W+YwimXhJclO7ss5MMODMkCBzhHfAF2BJjvOvfE8viEK1tf6gthi XO0mGWxjlAJKQS/p5E9x3/kDNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3PHHLV kuoqo0zXnCkg0KBjqfoiMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM4co6Dm4clBQLL5RXwj/RIvRkdxMw56vEoG1eqFYnuAheSomOITcb G5u9N1YWvXWBfk8RJEdSrFLKlaJPH3Jz301E9eoR7eZXQWWZzss9ZmxugYDBIghz JRuLwC+XZj4zuE9Gn1/3JsiBIyXN0aFkkLF7UQTaFMSWyLbPKqr5PTpOAFXJZnHD BPPDsXB0VewvkwIs2v36T8L5Xk2pKOxspPJ8LJpcpFDjmg7nGmUawM+g9Gmiptx3 H41/oWtfXK0BGmKdoH8ENdVNm9TXJU6NHI+9NB29IzoEhKzWhRv+Bx62UzMjZ7BF nZv1X5JPAstEPh1IZnN6vqeijwKlTbMc -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:54 2025 by rpki-client