This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: YTztrMGuc89d9trgeJui+R5ceTbbDecU57SfSq/Ipiw= Subject key identifier: 71:C7:4F:37:9C:63:9F:81:A1:47:E1:D0:9F:F5:64:3F:B4:72:7B:8F Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: B4 Signing time: Tue 23 Dec 2025 05:00:52 +0000 Manifest this update: Tue 23 Dec 2025 05:00:52 +0000 Manifest next update: Tue 30 Dec 2025 05:00:52 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: E2O6Ot8DVyaiReALXQ/AQZNMw1C7dVPCwBRqQ6jFP6g=) 2: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: aBWrylStgB8UpPGQsd4Khtzv8Z8tqWdm+knkAVWtLuU=) 3: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: DF7CNfyNaFKpDVnLxStQDZlI02OuUbS/a5OtdycSWIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: Dec 23 05:00:52 2025 GMT Not After : Dec 30 05:00:52 2025 GMT Subject: CN=694a2204-232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:9c:54:98:c2:37:08:5c:7f:05:a8:22:ae: 0f:d9:ea:76:2c:ea:99:31:0f:72:c2:ab:cf:78:4d: 1f:d9:6a:ac:de:f2:a2:e6:8f:1f:c7:51:51:60:cb: 1f:12:6d:db:ec:77:5d:95:8b:36:15:ce:82:92:65: 9c:f3:77:95:1a:87:a4:e5:b3:eb:82:f3:92:7f:8f: 84:95:2b:17:50:11:bc:4a:23:38:22:35:cc:74:e1: 2d:d9:a2:c6:ba:dd:7e:8f:e9:8a:fe:9e:bb:5d:fc: dc:67:3e:22:7e:3b:aa:12:14:37:56:f5:8f:8e:ac: 0c:d9:b0:9b:ea:9c:ee:37:4f:fd:49:25:a8:e9:34: 75:d8:fc:19:bd:ce:e8:23:c0:f8:71:c3:26:69:4e: 6c:b2:ea:8a:ab:08:30:25:5e:e3:ff:22:5f:e3:58: 57:35:0e:00:ce:e4:d7:14:cf:3d:24:56:c3:ba:ca: 89:24:8f:bd:12:b4:1b:b6:8c:15:a8:4c:c6:3f:fe: b3:7c:16:cd:6a:57:d0:90:c5:68:f1:da:bb:eb:ae: c8:b9:43:46:03:2a:e5:e6:89:74:70:ac:e4:d4:c9: b1:49:9a:d3:ab:b5:8c:7d:ab:76:d6:fc:fc:5a:b5: a7:bb:bd:d1:a5:2f:e4:6d:83:06:16:38:11:37:47: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C7:4F:37:9C:63:9F:81:A1:47:E1:D0:9F:F5:64:3F:B4:72:7B:8F X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9f:30:85:bd:cc:5f:00:33:93:15:20:e6:cb:20:e8:51:c3: 1e:a0:ac:9d:a8:18:6e:c3:e8:16:7f:dd:71:92:aa:2e:e8:92: cc:42:40:aa:3b:a2:42:96:42:35:13:6b:21:a6:00:8b:32:79: 88:9a:6e:85:95:ed:69:3b:f4:2b:00:73:f4:a5:42:22:0d:51: ec:ee:5a:08:63:1c:f0:45:19:07:01:ea:d0:dd:b6:bb:78:d7: 4a:60:c9:d0:c1:90:19:56:ac:7a:ea:b4:cc:8b:38:8c:63:97: 05:ab:4d:bd:0f:90:58:af:1c:c6:4a:27:3c:76:76:61:ef:69: 21:0a:1d:9e:e4:21:a3:95:74:37:1f:65:5f:ae:c0:4d:24:06: 89:ef:38:73:e1:94:9a:47:29:38:ee:34:c2:03:6d:01:3b:21: 36:a8:39:71:9b:6b:fa:cd:27:e0:a4:2b:b2:d8:b5:4b:b2:00: 6e:4c:81:0b:9e:65:da:ed:3a:6d:5b:e5:d3:ab:e6:ac:2b:ea: df:ad:0e:02:ed:c2:59:db:15:92:b8:7d:44:7f:75:cd:05:c4: c3:7b:65:b1:3b:c7:c0:d7:25:b7:07:46:51:62:3f:a7:70:ec: 1c:dd:ef:b8:8d:8c:14:81:d7:c2:03:cd:4b:e6:58:db:71:cd: bf:00:a6:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyMjIxMTAvBgNVBAUTKDgyMDVFOTc5NkVDNjlBMEM3M0RDM0I1QjNDRTEyQzQ4 MTkyQjQ1NzcwHhcNMjUxMjIzMDUwMDUyWhcNMjUxMjMwMDUwMDUyWjAYMRYwFAYD VQQDDA02OTRhMjIwNC0yMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3KcVJjCNwhcfwWoIq4P2ep2LOqZMQ9ywqvPeE0f2Wqs3vKi5o8fx1FRYMsf Em3b7HddlYs2Fc6CkmWc83eVGoek5bPrgvOSf4+ElSsXUBG8SiM4IjXMdOEt2aLG ut1+j+mK/p67XfzcZz4ifjuqEhQ3VvWPjqwM2bCb6pzuN0/9SSWo6TR12PwZvc7o I8D4ccMmaU5ssuqKqwgwJV7j/yJf41hXNQ4AzuTXFM89JFbDusqJJI+9ErQbtowV qEzGP/6zfBbNalfQkMVo8dq7667IuUNGAyrl5ol0cKzk1MmxSZrTq7WMfat21vz8 WrWnu73RpS/kbYMGFjgRN0cHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHHTzec Y5+BoUfh0J/1ZD+0cnuPMB8GA1UdIwQYMBaAFIIF6XluxpoMc9w7WzzhLEgZK0V3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDIyMi84NzY0NDg5Q0NE N0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21neHozRHRiUE9Fc1NCa3JS WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDIyMi84NzY0NDg5Q0NEN0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21n eHozRHRiUE9Fc1NCa3JSWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATnzCFvcxfADOTFSDmyyDoUcMeoKydqBhuw+gWf91xkqou6JLMQkCq O6JClkI1E2shpgCLMnmImm6Fle1pO/QrAHP0pUIiDVHs7loIYxzwRRkHAerQ3ba7 eNdKYMnQwZAZVqx66rTMiziMY5cFq029D5BYrxzGSic8dnZh72khCh2e5CGjlXQ3 H2VfrsBNJAaJ7zhz4ZSaRyk47jTCA20BOyE2qDlxm2v6zSfgpCuy2LVLsgBuTIEL nmXa7TptW+XTq+asK+rfrQ4C7cJZ2xWSuH1Ef3XNBcTDe2WxO8fA1yW3B0ZRYj+n cOwc3e+4jYwUgdfCA81L5ljbcc2/AKYE -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:17 2025 by rpki-client