This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: 7v4Ih9LAkqgCGTqzGIePgNwy8AFfwxeiF4Zd5A+hsO4= Subject key identifier: FE:C3:95:C4:05:60:98:64:01:6C:D2:56:6B:FE:45:9A:73:22:E0:16 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0D0E Signing time: Sat 20 Dec 2025 17:59:01 +0000 Manifest this update: Sat 20 Dec 2025 17:59:00 +0000 Manifest next update: Sat 27 Dec 2025 17:59:00 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: l47lHUjIP/rj2p7+37GJoXgm4ePVDngVN7BnVBLPyGg=) 2: 6BD78854828411F099E2E925C4F9AE02.roa (hash: 9j0RVXeWOTqtCIIu8pRWvFaGzaYiOgKNK4oM1aL4Rcw=) 3: 566800AE193C11F094773636C4F9AE02.roa (hash: 1GIm3Ne8e/QReZ+/M7q01zVU9MV2YeadgnBRwRzgQrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Dec 20 17:59:00 2025 GMT Not After : Dec 27 17:59:00 2025 GMT Subject: CN=6946e3e5-07c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dd:59:ae:aa:a6:b5:b6:c0:16:94:a0:f4:34: 2d:28:39:2b:a6:82:07:1c:b0:d9:7f:48:eb:c0:5b: 68:a9:9b:c0:da:35:30:28:bf:26:19:90:9c:6c:29: 93:87:0a:fa:3f:ca:ae:11:7a:f4:87:fa:3c:ba:88: 29:b2:2f:50:62:5b:fb:9d:c6:20:43:66:ef:e6:0e: 34:5b:a1:7e:05:98:eb:74:60:99:c8:d6:04:6a:81: 92:f7:48:37:f4:ec:ae:e4:fe:3a:03:43:14:d9:3c: 25:8d:66:b9:71:90:57:74:c4:04:6e:02:9c:73:5b: e4:db:3f:e6:5a:b0:12:64:27:2d:53:a6:72:05:d8: dc:13:78:b0:6c:11:b7:85:ce:fc:93:48:41:b2:89: 34:8a:33:b6:74:53:37:79:3c:03:5b:99:22:69:89: fb:34:84:35:93:73:d9:ea:c8:9e:ad:11:4e:ac:22: ff:0a:07:74:59:ec:59:c3:6b:80:b1:f8:78:ea:3b: d9:47:87:24:0f:cc:c0:e9:99:c3:b7:07:c4:6f:17: 2e:ad:81:79:b4:76:63:f0:6a:db:a3:e1:61:24:f9: 1e:45:7d:08:ac:24:c3:fc:bb:20:33:df:8b:1f:62: 7b:d8:eb:16:79:16:26:39:1a:9c:e6:b8:3c:bc:f9: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C3:95:C4:05:60:98:64:01:6C:D2:56:6B:FE:45:9A:73:22:E0:16 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:9f:e4:91:c3:a6:5c:b8:d5:e8:9b:6a:81:fc:4d:aa:84:1c: 10:f6:61:d0:eb:7b:ff:06:51:4e:32:10:b5:de:09:84:74:2e: 38:97:f2:64:56:e1:18:36:4c:5f:3e:63:c9:05:15:62:77:49: 15:e8:b9:b6:c2:e3:6e:0d:87:4f:74:c2:a1:a7:c3:0a:b6:76: 6c:be:6d:0c:cc:00:4d:29:8a:70:81:5f:47:d5:75:1c:cd:a1: d9:f8:c8:ca:2a:cd:78:34:fa:6e:46:f3:0d:66:39:6c:ff:1c: cd:2e:46:ab:5f:a9:b5:e9:9e:17:73:c2:2a:98:aa:97:79:3a: 54:d0:31:1b:43:02:c4:2d:f1:f3:ba:32:4b:23:1b:49:3e:f9: d5:0f:ef:af:09:14:72:a1:a3:ba:6f:4d:ad:ce:83:1a:dd:3f: 35:b3:c2:a8:f9:4f:5e:87:4b:c0:90:37:c9:ee:99:9b:5c:4f: 75:6d:a6:23:99:e1:98:79:df:bc:46:c3:27:8d:3e:c8:76:13: f7:0a:cf:23:11:44:e3:e8:b3:af:3a:d1:4f:57:a3:d7:a2:5c: f5:f7:e7:1d:81:db:d7:e9:1c:b2:27:23:37:c5:9c:df:01:95: 05:ea:22:14:5b:09:2f:28:e6:b6:e5:21:47:cd:5a:c2:35:a9: 11:7e:67:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjUxMjIwMTc1OTAwWhcNMjUxMjI3MTc1OTAwWjAYMRYwFAYD VQQDDA02OTQ2ZTNlNS0wN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA591ZrqqmtbbAFpSg9DQtKDkrpoIHHLDZf0jrwFtoqZvA2jUwKL8mGZCcbCmT hwr6P8quEXr0h/o8uogpsi9QYlv7ncYgQ2bv5g40W6F+BZjrdGCZyNYEaoGS90g3 9Oyu5P46A0MU2TwljWa5cZBXdMQEbgKcc1vk2z/mWrASZCctU6ZyBdjcE3iwbBG3 hc78k0hBsok0ijO2dFM3eTwDW5kiaYn7NIQ1k3PZ6sierRFOrCL/Cgd0WexZw2uA sfh46jvZR4ckD8zA6ZnDtwfEbxcurYF5tHZj8Grbo+FhJPkeRX0IrCTD/LsgM9+L H2J72OsWeRYmORqc5rg8vPlBkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7DlcQF YJhkAWzSVmv+RZpzIuAWMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUn+SRw6ZcuNXom2qB/E2qhBwQ9mHQ63v/BlFOMhC13gmEdC44l/Jk VuEYNkxfPmPJBRVid0kV6Lm2wuNuDYdPdMKhp8MKtnZsvm0MzABNKYpwgV9H1XUc zaHZ+MjKKs14NPpuRvMNZjls/xzNLkarX6m16Z4Xc8IqmKqXeTpU0DEbQwLELfHz ujJLIxtJPvnVD++vCRRyoaO6b02tzoMa3T81s8Ko+U9eh0vAkDfJ7pmbXE91baYj meGYed+8RsMnjT7IdhP3Cs8jEUTj6LOvOtFPV6PXolz19+cdgdvX6RyyJyM3xZzf AZUF6iIUWwkvKOa25SFHzVrCNakRfmer -----END CERTIFICATE-----Generated at Mon Dec 22 05:34:03 2025 by rpki-client