This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: umwGoe6bKgwnm5dh7E3s9W9rtzoXdHMZqL+4847xxQI= Subject key identifier: 88:DE:3B:A6:E0:AF:C7:8D:BA:8A:68:0F:43:01:DE:EC:69:53:1F:3D Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: D1 Signing time: Tue 23 Dec 2025 04:38:39 +0000 Manifest this update: Tue 23 Dec 2025 04:38:38 +0000 Manifest next update: Tue 30 Dec 2025 04:38:38 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: YOMczAwQX/0tOwmSvIARtgfh0kphep34lL+ogl132Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Dec 23 04:38:38 2025 GMT Not After : Dec 30 04:38:38 2025 GMT Subject: CN=694a1ccf-6167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:9c:39:8e:93:0d:d9:12:6a:4b:59:88:0c: 55:1c:35:f7:5c:f1:18:47:6f:0f:96:ae:a1:97:55: 9b:c6:63:c2:47:2f:61:bc:24:85:9c:e3:a0:4f:d9: 9c:58:14:8f:72:e5:d7:19:4c:3e:c3:04:89:b7:d0: c1:a3:33:09:38:55:05:b1:cf:a0:17:6e:a2:b5:fd: 35:05:9b:94:09:e7:41:3b:e1:da:3b:de:a4:f2:8d: 53:3e:ab:12:26:f7:f4:a8:2d:22:d4:ff:97:f4:28: 48:81:29:31:b0:52:4c:4d:a9:80:52:a2:de:c5:5e: 03:d4:1f:47:95:98:e9:fa:84:40:09:e2:54:18:38: 0e:13:ce:9f:c7:ee:91:7c:38:e4:b8:f5:78:73:08: f7:83:06:41:68:9a:e7:72:d7:53:9e:32:89:d5:67: 0b:4e:c9:e9:96:6c:20:9d:87:89:41:2d:a5:6c:63: 61:23:12:61:25:07:cb:2d:08:4f:21:42:95:90:2c: 97:52:2b:02:95:53:63:24:c3:a7:ee:e6:ea:8c:38: ff:bb:a3:c5:77:b3:5e:02:bb:a9:94:35:fd:bf:e5: 35:02:2f:0d:b8:47:ac:e7:03:18:f9:1e:de:5e:92: 50:a0:ea:5a:90:f6:66:30:86:97:e5:e7:4d:63:dd: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DE:3B:A6:E0:AF:C7:8D:BA:8A:68:0F:43:01:DE:EC:69:53:1F:3D X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:01:56:1e:15:58:8c:ba:e6:08:01:78:1d:93:86:f9:d0:9c: 9b:2b:3a:4e:ce:85:6a:a0:05:f5:0e:b5:8a:a8:c0:f1:42:4a: 98:6b:3b:c5:c0:8c:bc:3e:cd:78:92:e4:64:c9:92:08:52:b8: 2b:2c:05:b5:58:05:b5:9e:9a:fd:db:2a:c4:19:eb:67:a0:a5: 20:e5:ae:e7:2a:84:44:ae:fa:be:8a:73:ca:5a:45:47:f7:52: 7e:69:9d:fd:94:87:8e:5b:76:cf:d7:33:dd:97:e6:49:61:fb: 32:d7:4a:80:7a:74:88:c8:0f:8d:cc:d7:19:9e:5d:00:5d:b3: 30:d6:2e:09:79:a3:e6:ca:57:69:4f:5d:69:eb:5d:22:28:56: 53:df:d2:3f:4e:bd:09:76:9b:34:fa:ab:29:50:c8:6a:40:fe: fa:bd:6d:40:79:f1:3e:b8:f2:88:2e:b7:4d:41:6a:27:d0:09: 44:05:88:5a:20:23:03:07:c2:bb:42:16:a4:b9:07:a7:30:ee: e8:c7:cb:1d:d5:09:27:31:a6:b8:a5:ce:24:0a:63:51:6e:64: 41:45:b6:b7:9a:35:6e:b4:e9:9b:c5:58:1e:f9:c4:f0:d0:dd: 67:6b:cd:d5:ce:45:6b:23:54:05:e7:dc:8f:de:df:92:7b:2f: aa:1b:12:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKDQ0Njg5QzY3MUZBRUYxOTY3Q0Y3QTlCMUEzMzY4RDhC OTE0QjdCQTcwHhcNMjUxMjIzMDQzODM4WhcNMjUxMjMwMDQzODM4WjAYMRYwFAYD VQQDDA02OTRhMWNjZi02MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvKcOY6TDdkSaktZiAxVHDX3XPEYR28Plq6hl1WbxmPCRy9hvCSFnOOgT9mc WBSPcuXXGUw+wwSJt9DBozMJOFUFsc+gF26itf01BZuUCedBO+HaO96k8o1TPqsS Jvf0qC0i1P+X9ChIgSkxsFJMTamAUqLexV4D1B9HlZjp+oRACeJUGDgOE86fx+6R fDjkuPV4cwj3gwZBaJrnctdTnjKJ1WcLTsnplmwgnYeJQS2lbGNhIxJhJQfLLQhP IUKVkCyXUisClVNjJMOn7ubqjDj/u6PFd7NeAruplDX9v+U1Ai8NuEes5wMY+R7e XpJQoOpakPZmMIaX5edNY91mEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjeO6bg r8eNuopoD0MB3uxpUx89MB8GA1UdIwQYMBaAFERonGcfrvGWfPepsaM2jYuRS3un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni8wN0FFN0E5NjlD RjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdThaWjg5Nm14b3phTmk1Rkxl NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni8wN0FFN0E5NjlDRjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdTha Wjg5Nm14b3phTmk1RkxlNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaAVYeFViMuuYIAXgdk4b50JybKzpOzoVqoAX1DrWKqMDxQkqYazvF wIy8Ps14kuRkyZIIUrgrLAW1WAW1npr92yrEGetnoKUg5a7nKoRErvq+inPKWkVH 91J+aZ39lIeOW3bP1zPdl+ZJYfsy10qAenSIyA+NzNcZnl0AXbMw1i4JeaPmyldp T11p610iKFZT39I/Tr0Jdps0+qspUMhqQP76vW1AefE+uPKILrdNQWon0AlEBYha ICMDB8K7QhakuQenMO7ox8sd1QknMaa4pc4kCmNRbmRBRba3mjVutOmbxVge+cTw 0N1na83VzkVrI1QF59yP3t+Sey+qGxJ7 -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:21 2025 by rpki-client