This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: 2HpoL6alG0kqUQnyLz/q6p8w/O3wQ8GtMNk2nzjTzOc= Subject key identifier: AB:C3:D5:A2:FE:DF:8C:AF:F2:08:E2:4F:10:6D:05:B1:92:F1:C7:1C Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 0895 Signing time: Sat 20 Dec 2025 19:57:07 +0000 Manifest this update: Sat 20 Dec 2025 19:57:07 +0000 Manifest next update: Sat 27 Dec 2025 19:57:07 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: aopTjtWkgLnEwMFNpDDNwjREntCaPZJLkGs0q/G/cv4=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: UaoBno6EmWaBFcw5TBVRPYFiWGMBoSDzhu3pQGtDygg=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: 4fGi9gJaC/oEbDcGBoBEInsd7LIWjlkoV1ytai5f/QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Dec 20 19:57:07 2025 GMT Not After : Dec 27 19:57:07 2025 GMT Subject: CN=6946ff93-6586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:8b:50:16:4e:73:3a:1b:2c:1b:2f:17:7a: 60:b9:f9:87:2f:53:5d:9e:a5:4b:a8:83:05:60:c7: 0f:59:7e:a0:9a:53:43:37:7f:bf:d2:08:75:eb:2a: c9:6a:3f:51:0c:13:cd:82:8b:9c:19:5d:e7:45:47: 28:88:66:14:28:b1:3e:ce:69:09:eb:63:30:7c:20: 8d:ec:28:b9:93:02:fa:62:b5:f0:2d:6d:3b:77:c6: 2f:a8:75:e0:90:2e:fb:34:55:08:2f:b5:4a:5a:43: 24:ab:76:c6:e8:40:4e:39:cd:d9:50:8c:da:9b:c4: 69:dc:01:82:23:e6:c9:cf:fb:bf:2b:3d:c0:17:b8: 03:cc:17:8c:bf:65:3d:36:bf:a4:08:82:c5:65:2c: 92:59:a4:d7:8d:ce:2f:c4:e4:42:74:33:2b:f7:80: b5:c6:8b:bd:7d:28:dd:02:f8:85:67:71:a3:0e:f4: 7c:79:0c:ea:85:18:99:55:6b:f6:04:9a:68:01:45: 5b:04:e1:1c:df:7a:36:3c:e8:2d:17:9a:50:68:bf: a2:d5:6e:3e:b4:2f:71:66:ea:ed:f5:3d:64:68:57: 6e:36:25:74:fc:63:5e:22:de:76:cc:22:41:a9:89: b9:1b:03:07:5b:a5:ce:d0:b9:f9:54:a8:c5:2f:37: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C3:D5:A2:FE:DF:8C:AF:F2:08:E2:4F:10:6D:05:B1:92:F1:C7:1C X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:10:f3:7d:12:96:d2:19:b7:ab:17:3a:36:7e:37:6f:db:08: 03:74:5e:89:7c:be:15:42:a6:df:b2:a5:c9:79:fb:f7:aa:5a: a0:26:b4:82:b1:71:c4:e0:68:97:1a:4f:2d:32:e2:f1:2b:69: fd:7b:9a:9f:6c:a9:dd:b1:cc:65:62:a6:80:ad:b9:e8:2d:0e: 4b:6a:e8:1c:84:46:1b:94:16:d4:34:db:47:1b:dd:e5:52:08: 55:09:95:e5:ac:b0:07:5f:b6:40:3c:52:33:cc:b4:40:2a:20: 9b:18:9a:29:cd:b5:ba:cc:31:63:c8:29:e9:11:9f:31:bd:9e: 00:11:f8:85:38:c0:73:82:1f:ee:84:de:70:29:25:b5:d7:4e: ff:45:0d:cf:ae:f1:9e:b8:2b:31:93:1a:fd:40:f0:cc:ba:43: c5:b4:21:ae:ea:2d:9b:14:e2:f4:63:b7:f1:4a:78:2f:dd:35: cc:71:78:c2:f0:2a:fb:40:7c:79:8c:02:66:c5:90:a8:05:eb: 68:12:8f:11:8c:5b:44:77:be:66:08:8a:6f:27:08:86:c5:d9: 92:a6:e1:30:a7:c2:d7:a4:2d:a6:26:a6:b8:86:3f:3a:60:56: bc:a4:40:5a:45:22:45:53:57:1e:c4:af:40:99:03:5b:1d:5c: 92:ed:25:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUxMjIwMTk1NzA3WhcNMjUxMjI3MTk1NzA3WjAYMRYwFAYD VQQDDA02OTQ2ZmY5My02NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobCLUBZOczobLBsvF3pgufmHL1NdnqVLqIMFYMcPWX6gmlNDN3+/0gh16yrJ aj9RDBPNgoucGV3nRUcoiGYUKLE+zmkJ62MwfCCN7Ci5kwL6YrXwLW07d8YvqHXg kC77NFUIL7VKWkMkq3bG6EBOOc3ZUIzam8Rp3AGCI+bJz/u/Kz3AF7gDzBeMv2U9 Nr+kCILFZSySWaTXjc4vxORCdDMr94C1xou9fSjdAviFZ3GjDvR8eQzqhRiZVWv2 BJpoAUVbBOEc33o2POgtF5pQaL+i1W4+tC9xZurt9T1kaFduNiV0/GNeIt52zCJB qYm5GwMHW6XO0Ln5VKjFLzfnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvD1aL+ 34yv8gjiTxBtBbGS8cccMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9EPN9EpbSGberFzo2fjdv2wgDdF6JfL4VQqbfsqXJefv3qlqgJrSC sXHE4GiXGk8tMuLxK2n9e5qfbKndscxlYqaArbnoLQ5LaugchEYblBbUNNtHG93l UghVCZXlrLAHX7ZAPFIzzLRAKiCbGJopzbW6zDFjyCnpEZ8xvZ4AEfiFOMBzgh/u hN5wKSW1107/RQ3PrvGeuCsxkxr9QPDMukPFtCGu6i2bFOL0Y7fxSngv3TXMcXjC 8Cr7QHx5jAJmxZCoBetoEo8RjFtEd75mCIpvJwiGxdmSpuEwp8LXpC2mJqa4hj86 YFa8pEBaRSJFU1cexK9AmQNbHVyS7SVe -----END CERTIFICATE-----Generated at Sun Dec 21 09:54:14 2025 by rpki-client