This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: aAYtJ+G8ld06pG995eXFcr+jaufYLb5G2wzRySSGPOg= Subject key identifier: DF:82:44:2E:D7:02:8E:77:13:81:14:5C:35:11:AC:A8:EA:67:64:5D Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 037E Signing time: Fri 26 Dec 2025 23:53:19 +0000 Manifest this update: Fri 26 Dec 2025 23:53:19 +0000 Manifest next update: Fri 02 Jan 2026 23:53:19 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: GJUibioRSwhlAKh8pQ0tsqmvXNV3yvJZTqDnbYlru8k=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Dec 26 23:53:19 2025 GMT Not After : Jan 2 23:53:19 2026 GMT Subject: CN=694f1fef-a2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:58:f0:ed:60:9d:7c:59:ae:e1:77:4b:90: 6a:6b:17:af:64:0e:9a:7f:25:e1:9f:96:e5:e6:d5: 9f:49:a9:7b:e4:5c:62:0d:01:52:7e:c0:86:de:85: a3:b6:32:23:87:05:59:cc:3d:a4:e6:52:87:7d:1c: 25:44:4d:d6:0e:8c:4d:df:4d:82:5b:d9:88:7f:54: e7:61:07:64:65:61:fc:f0:8e:77:c4:32:6f:2d:a9: 18:55:bd:4a:f3:8c:25:3f:84:7d:2d:f6:ee:ad:67: 15:73:cd:df:f0:d0:03:43:db:2c:06:bd:cb:99:70: 15:93:3b:87:bf:05:d1:3b:ad:11:6f:0f:b9:da:2e: 2f:4b:38:a4:e8:3f:1e:42:a5:03:86:a4:a5:38:a6: 6a:89:c9:80:60:1f:6b:31:7f:7b:31:ab:2c:ee:f4: e5:da:c9:07:33:52:97:e3:cb:df:4e:99:d4:b3:d0: 3a:3d:27:51:ff:fe:89:62:7e:0c:4f:66:99:92:28: 09:70:2a:95:0b:28:e9:89:7a:45:1a:fd:0c:b5:85: b1:4c:0b:89:8e:33:2e:9a:57:2a:05:1c:dd:3d:46: a7:02:89:cb:d7:37:c9:96:1d:a2:46:a8:ac:1d:8a: 07:09:51:9f:05:ce:42:cf:df:c4:23:07:28:04:77: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:82:44:2E:D7:02:8E:77:13:81:14:5C:35:11:AC:A8:EA:67:64:5D X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f5:68:f4:eb:2e:06:6c:d2:96:ec:d6:fe:07:8b:0f:a9:2a: 30:0a:a6:24:c5:80:73:11:bc:a4:2f:cf:64:ee:01:b2:fc:9a: 15:97:aa:0f:5b:78:e2:fd:f0:df:5c:c6:9c:23:01:72:50:7f: 04:40:15:2a:c9:c7:b4:ea:c8:54:dd:d2:e1:a3:09:ca:ab:01: 3c:0c:3b:18:9b:bf:5d:6c:b6:94:e2:54:41:e3:03:71:49:8c: 1e:3d:ba:aa:fe:63:68:e6:3b:e0:86:b9:fc:7a:c8:7e:8c:d7: 81:fd:35:41:1a:1d:8f:80:cf:1f:6f:2a:cd:c0:91:22:00:3e: a6:7c:79:c6:e5:04:88:bb:96:5f:7b:a1:b0:93:df:aa:e2:aa: 17:60:f0:45:a2:b2:0e:28:e4:ad:be:d9:36:7d:e6:ff:ce:32: 3a:bb:1e:21:e0:4c:70:0f:6b:f3:5f:69:12:e3:14:0c:ef:03: 67:f8:cc:57:b8:56:1c:ca:9c:62:60:d6:27:cc:4c:f9:63:83: f1:b8:d1:eb:b5:bc:ca:98:ba:fb:b6:ea:58:88:52:c6:53:45: 6a:ce:ba:49:c1:05:c1:4c:1e:f1:f5:49:eb:f1:7f:65:d3:73: 4b:56:2a:36:cd:7b:20:e5:13:0f:ce:1c:4f:ae:42:33:16:7a: b5:a0:79:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUxMjI2MjM1MzE5WhcNMjYwMTAyMjM1MzE5WjAYMRYwFAYD VQQDDA02OTRmMWZlZi1hMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmiFY8O1gnXxZruF3S5BqaxevZA6afyXhn5bl5tWfSal75FxiDQFSfsCG3oWj tjIjhwVZzD2k5lKHfRwlRE3WDoxN302CW9mIf1TnYQdkZWH88I53xDJvLakYVb1K 84wlP4R9LfburWcVc83f8NADQ9ssBr3LmXAVkzuHvwXRO60Rbw+52i4vSzik6D8e QqUDhqSlOKZqicmAYB9rMX97Mass7vTl2skHM1KX48vfTpnUs9A6PSdR//6JYn4M T2aZkigJcCqVCyjpiXpFGv0MtYWxTAuJjjMumlcqBRzdPUanAonL1zfJlh2iRqis HYoHCVGfBc5Cz9/EIwcoBHcVmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+CRC7X Ao53E4EUXDURrKjqZ2RdMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG9Wj06y4GbNKW7Nb+B4sPqSowCqYkxYBzEbykL89k7gGy/JoVl6oP W3ji/fDfXMacIwFyUH8EQBUqyce06shU3dLhownKqwE8DDsYm79dbLaU4lRB4wNx SYwePbqq/mNo5jvghrn8esh+jNeB/TVBGh2PgM8fbyrNwJEiAD6mfHnG5QSIu5Zf e6Gwk9+q4qoXYPBForIOKOStvtk2feb/zjI6ux4h4ExwD2vzX2kS4xQM7wNn+MxX uFYcypxiYNYnzEz5Y4PxuNHrtbzKmLr7tupYiFLGU0VqzrpJwQXBTB7x9Unr8X9l 03NLVio2zXsg5RMPzhxPrkIzFnq1oHny -----END CERTIFICATE-----Generated at Sat Dec 27 15:41:08 2025 by rpki-client