This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: f2RX2nf+4t9ilEXUyJketJkr90nCGOnOZr2tcfyvSyE= Subject key identifier: 2A:24:54:64:C3:0A:82:FD:4A:51:B2:51:BA:E7:59:42:FD:43:7F:9D Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 037D Signing time: Wed 24 Dec 2025 23:58:13 +0000 Manifest this update: Wed 24 Dec 2025 23:58:12 +0000 Manifest next update: Wed 31 Dec 2025 23:58:12 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: yiPnL97aeYhw4f7ZlgcMRYIoD8dkb9j7ualqgEWLY5E=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 23:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Dec 24 23:58:12 2025 GMT Not After : Dec 31 23:58:12 2025 GMT Subject: CN=694c7e14-e15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:75:9d:66:2a:1d:eb:fd:e8:67:b1:52:f1: ff:96:f7:e4:c8:67:ec:b6:2b:9b:29:30:e5:ec:c9: 31:06:a3:41:0b:81:a2:40:9b:4f:71:dc:ad:18:26: 8c:40:d4:43:db:69:8c:e8:cf:d6:e8:d0:9f:53:7f: e3:24:1d:8a:7c:ac:70:1f:6d:7c:b7:58:9a:22:37: a9:42:3a:29:19:ba:9a:50:1d:30:6f:85:a4:87:4e: 9b:63:2b:02:c5:0d:62:e1:82:19:35:0d:c9:a0:e4: dc:ea:e7:ae:00:fe:b2:1b:cd:7e:d1:71:e8:0b:bd: 45:80:1a:12:76:ba:9d:7d:e7:2e:69:23:6f:45:16: 5c:d7:0d:61:65:cc:6c:bd:eb:a5:37:62:84:35:ca: 23:2e:a6:63:8b:36:bf:b8:4c:26:b6:04:a0:24:12: 47:9a:b8:48:55:57:16:e1:d4:7e:9e:6f:67:d5:7a: aa:a7:f6:ef:7f:dc:97:a1:13:e1:bc:8a:6a:f3:fb: 69:68:81:3f:f5:70:01:7e:ac:4e:8b:96:06:9d:d1: b2:22:cb:8c:8d:de:c7:dc:08:f1:cd:d0:1c:99:51: 83:9c:c0:f6:77:80:fa:36:3f:bb:49:90:dd:6d:73: 9c:b6:85:a3:cf:28:08:2d:48:d7:e6:66:7e:73:2c: 9a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:24:54:64:C3:0A:82:FD:4A:51:B2:51:BA:E7:59:42:FD:43:7F:9D X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:1a:83:ef:8b:1f:e4:f4:85:e6:6d:25:10:f8:94:b0:e1:cf: 82:fa:4f:4d:b4:57:75:fc:0c:f0:83:67:a5:be:b0:86:1b:8d: a5:26:6f:12:fa:e3:92:84:fd:23:56:67:50:19:bb:1c:65:3a: 22:b8:15:c9:c8:1c:22:fd:2d:78:9e:3f:d7:bb:28:cc:4d:5e: d1:f1:f4:32:13:9a:15:68:b4:86:a6:bc:08:4a:80:8b:97:7c: c1:79:8d:b9:1b:85:b2:48:3d:05:6d:b6:a6:87:21:c0:27:09: fc:eb:0e:c4:70:2d:8d:13:cb:69:d3:b0:d1:a2:68:47:52:55: d8:90:98:d8:92:88:89:e7:96:f1:75:f5:9b:bc:ce:df:d0:48: b1:4b:44:24:5e:55:1a:eb:45:cd:be:e4:20:40:38:bc:12:e9: 54:90:86:1d:03:88:25:77:64:b4:ea:ed:a0:0e:69:19:55:30: ee:1f:89:54:7f:0d:05:03:44:47:05:38:6d:23:9b:b3:c3:36: fd:3e:09:d0:f2:08:09:88:30:a0:f8:70:03:ad:13:d4:b4:0e: ed:ca:e0:4a:eb:fe:dc:89:08:13:ae:f9:64:90:0d:2f:4d:52: f2:8f:80:88:8e:d7:fc:b7:a2:52:54:d1:91:c0:01:0a:e1:6e: e2:ee:2e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUxMjI0MjM1ODEyWhcNMjUxMjMxMjM1ODEyWjAYMRYwFAYD VQQDDA02OTRjN2UxNC1lMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsV1nWYqHev96GexUvH/lvfkyGfstiubKTDl7MkxBqNBC4GiQJtPcdytGCaM QNRD22mM6M/W6NCfU3/jJB2KfKxwH218t1iaIjepQjopGbqaUB0wb4Wkh06bYysC xQ1i4YIZNQ3JoOTc6ueuAP6yG81+0XHoC71FgBoSdrqdfecuaSNvRRZc1w1hZcxs veulN2KENcojLqZjiza/uEwmtgSgJBJHmrhIVVcW4dR+nm9n1Xqqp/bvf9yXoRPh vIpq8/tpaIE/9XABfqxOi5YGndGyIsuMjd7H3AjxzdAcmVGDnMD2d4D6Nj+7SZDd bXOctoWjzygILUjX5mZ+cyyaYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCokVGTD CoL9SlGyUbrnWUL9Q3+dMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChGoPvix/k9IXmbSUQ+JSw4c+C+k9NtFd1/Azwg2elvrCGG42lJm8S +uOShP0jVmdQGbscZToiuBXJyBwi/S14nj/XuyjMTV7R8fQyE5oVaLSGprwISoCL l3zBeY25G4WySD0FbbamhyHAJwn86w7EcC2NE8tp07DRomhHUlXYkJjYkoiJ55bx dfWbvM7f0EixS0QkXlUa60XNvuQgQDi8EulUkIYdA4gld2S06u2gDmkZVTDuH4lU fw0FA0RHBThtI5uzwzb9PgnQ8ggJiDCg+HADrRPUtA7tyuBK6/7ciQgTrvlkkA0v TVLyj4CIjtf8t6JSVNGRwAEK4W7i7i7r -----END CERTIFICATE-----Generated at Thu Dec 25 17:11:34 2025 by rpki-client