This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: csUevdyEerG90ZpCpYnQw2tMSgAEee3sjcDRrBTqOeY= Subject key identifier: 5B:53:56:39:48:BC:42:71:BA:91:2D:FA:5B:C9:A9:2B:F9:99:B3:C7 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 01D2 Signing time: Tue 23 Dec 2025 01:58:36 +0000 Manifest this update: Tue 23 Dec 2025 01:58:36 +0000 Manifest next update: Tue 30 Dec 2025 01:58:36 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: qQHaS5LM5j+fGp5SoGRevo2hA5B1W06VTj0e089u9dc=) 2: 4ADADBB8C48011F08D2DA33DC4F9AE02.roa (hash: 8670TEfg83gHunVz4oJN8k2ojcMsTWOzQ8uTKh3Qr3U=) 3: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: RetyQblwcd4ST+I6H1q28mp6Zq67zv2ACfTggQIeETs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: Dec 23 01:58:36 2025 GMT Not After : Dec 30 01:58:36 2025 GMT Subject: CN=6949f74c-b75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:22:61:cc:b7:3c:98:3e:6f:39:46:ec:cb: 6c:85:37:d5:88:a0:17:aa:f4:b2:a0:b2:e6:3a:e7: 7d:51:41:33:ed:1d:92:bf:37:d1:2d:e2:ca:27:6e: e6:57:25:c1:4c:1a:a1:d7:4d:b5:6e:f8:ad:c5:00: 2a:55:c4:87:90:77:fb:2a:55:1a:a2:6a:bd:8a:82: ae:28:ec:f9:6f:cc:71:32:91:5c:10:a5:4d:c4:b2: 30:de:15:7d:38:60:ca:69:73:7b:39:69:7f:f6:73: 8c:16:a6:d5:a7:40:46:a5:a7:2f:b5:bf:95:44:b4: fb:d4:77:22:a5:f4:4c:15:30:38:7a:8f:dd:cf:e0: 96:f9:34:2a:fc:3c:3b:fc:b9:01:88:f3:b8:13:e5: 15:89:c8:bf:8c:cb:5c:d8:6c:6f:62:d3:8a:7c:38: 6f:1c:50:15:9a:7a:b2:3c:c4:da:ff:98:8f:f2:c8: 0a:fd:d6:09:b8:47:db:75:d0:7a:07:ef:25:79:70: 2f:1f:65:f1:cc:cf:71:45:d6:dc:78:29:38:40:5b: ed:e5:38:36:8c:50:4e:7d:b4:b7:60:3a:c4:da:e1: 35:20:a3:29:c2:4d:8a:a2:84:20:c1:3e:7c:d5:16: 21:fd:69:14:64:31:78:67:5f:7e:d4:2c:ae:f7:72: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:53:56:39:48:BC:42:71:BA:91:2D:FA:5B:C9:A9:2B:F9:99:B3:C7 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:89:53:2f:c1:6f:41:7b:99:2e:06:f5:17:49:f8:56:46:b8: d6:60:26:24:6e:f8:3a:7a:2d:74:56:0b:8b:1f:6c:c0:35:51: 00:4f:02:60:4b:bc:5f:4e:e5:dd:88:26:ae:af:d1:28:45:5e: 29:14:db:8f:bf:b5:b8:87:0a:51:3a:07:df:c1:ae:97:3c:6f: c9:37:b6:5d:89:49:83:9c:e6:35:33:c2:b7:c1:9c:73:cb:a9: 98:19:e7:b2:b2:d4:d3:dd:83:1f:17:03:1d:e1:57:e1:0b:1d: 08:ae:46:29:33:0c:69:f4:b5:a4:6f:a2:4a:01:cc:39:33:f3: af:2a:a4:46:8c:49:fe:fb:d3:e6:97:5d:38:67:d7:9d:70:fb: 1e:46:6c:ec:aa:18:6e:d9:2d:c0:0f:a4:65:f0:16:a9:a3:4f: 0f:97:a0:c2:b3:31:fc:3d:20:45:7c:c7:29:16:87:12:8e:38: da:e3:35:4d:f4:e1:30:72:0c:cd:ee:3f:3f:3d:65:06:1c:7d: 26:d5:d7:18:2b:a6:44:fa:72:2e:a2:f2:7c:e2:8c:6b:7d:83: 56:97:bf:d4:ec:9c:e2:d2:93:48:72:f3:a6:d2:c8:38:ce:3f: e3:a2:db:2c:4b:53:8d:7e:24:39:18:eb:98:78:81:e7:9f:9d: da:77:2b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjUxMjIzMDE1ODM2WhcNMjUxMjMwMDE1ODM2WjAYMRYwFAYD VQQDDA02OTQ5Zjc0Yy1iNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswIiYcy3PJg+bzlG7MtshTfViKAXqvSyoLLmOud9UUEz7R2SvzfRLeLKJ27m VyXBTBqh1021bvitxQAqVcSHkHf7KlUaomq9ioKuKOz5b8xxMpFcEKVNxLIw3hV9 OGDKaXN7OWl/9nOMFqbVp0BGpacvtb+VRLT71HcipfRMFTA4eo/dz+CW+TQq/Dw7 /LkBiPO4E+UVici/jMtc2GxvYtOKfDhvHFAVmnqyPMTa/5iP8sgK/dYJuEfbddB6 B+8leXAvH2XxzM9xRdbceCk4QFvt5Tg2jFBOfbS3YDrE2uE1IKMpwk2KooQgwT58 1RYh/WkUZDF4Z19+1Cyu93Lv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtTVjlI vEJxupEt+lvJqSv5mbPHMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHiVMvwW9Be5kuBvUXSfhWRrjWYCYkbvg6ei10VguLH2zANVEATwJg S7xfTuXdiCaur9EoRV4pFNuPv7W4hwpROgffwa6XPG/JN7ZdiUmDnOY1M8K3wZxz y6mYGeeystTT3YMfFwMd4VfhCx0IrkYpMwxp9LWkb6JKAcw5M/OvKqRGjEn++9Pm l104Z9edcPseRmzsqhhu2S3AD6Rl8Bapo08Pl6DCszH8PSBFfMcpFocSjjja4zVN 9OEwcgzN7j8/PWUGHH0m1dcYK6ZE+nIuovJ84oxrfYNWl7/U7Jzi0pNIcvOm0sg4 zj/jotssS1ONfiQ5GOuYeIHnn53adyvF -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:29 2025 by rpki-client