This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: oVv/lo6zo0Z+6lI/ooIa/qzy1fqGKdUbXKEVH9UTfmo= Subject key identifier: E4:99:8B:BD:4D:BA:49:33:DC:43:4A:4D:8D:F5:5E:70:FD:52:B4:7E Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 07B8 Signing time: Sat 20 Dec 2025 20:45:02 +0000 Manifest this update: Sat 20 Dec 2025 20:45:02 +0000 Manifest next update: Sat 27 Dec 2025 20:45:02 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: F5qDZiUXDA4HEH6WRmm07sQghLhwGA9SIaUQhapwNu4=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Dec 20 20:45:02 2025 GMT Not After : Dec 27 20:45:02 2025 GMT Subject: CN=69470ace-ffe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:44:4d:74:ed:c0:91:9f:21:18:6f:c5:f6: 6c:1c:39:3f:3e:47:58:45:91:a1:af:ad:b1:2a:f2: f3:35:09:fb:44:c2:ed:a7:e7:89:6a:70:1a:91:f5: 54:ca:c5:59:0d:84:19:24:17:d7:02:bc:86:4f:58: e5:e5:17:aa:ad:9a:60:e7:31:7f:a6:9c:8c:15:89: 25:22:c0:ab:b6:9b:50:aa:c6:3f:73:c7:59:f6:c7: 3b:0e:dd:7c:d7:35:c9:e0:75:da:62:f4:7f:c8:3c: 10:aa:15:ff:d4:c0:08:9e:11:3b:0d:35:ed:af:75: 51:21:1c:2b:e1:d2:fc:62:83:5f:14:b1:e1:36:75: 21:c5:6e:b9:54:03:e4:4c:f9:b5:d2:6c:2e:c0:1c: c7:20:4c:86:08:40:46:57:92:26:cb:5a:3e:e4:40: 9f:7c:6e:c5:2b:36:99:8b:b3:d1:52:45:e0:57:f8: ff:e0:83:6d:1d:62:fa:ed:71:e8:38:7c:2c:ef:2a: 88:c8:64:35:7c:6e:f8:eb:04:ad:50:66:18:e7:9d: 56:d9:ea:1c:b7:35:54:45:ca:82:9b:df:ae:b3:7f: 6d:76:b6:ac:94:20:8d:c6:d4:7c:51:70:0b:49:6a: 43:1e:d7:e9:0b:af:17:fc:31:19:2a:03:b3:ec:58: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:99:8B:BD:4D:BA:49:33:DC:43:4A:4D:8D:F5:5E:70:FD:52:B4:7E X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e9:e4:48:5f:71:e0:b8:23:0a:f5:8e:c2:fc:a4:b7:98:22: a2:1d:df:e4:cc:5f:fc:07:ef:d0:72:d5:e2:3f:05:25:34:44: 72:f4:87:85:31:cc:ef:cf:d2:8c:5c:1c:c3:52:f5:f1:fd:a2: 77:a6:33:83:7b:ec:c1:4f:aa:22:98:95:b2:b8:bd:85:ac:23: e2:d8:a7:a8:ae:39:81:22:e9:25:b4:fb:7b:0d:e8:14:0d:a3: 60:c0:b5:20:03:98:25:7a:37:23:73:99:c6:7c:51:36:6e:96: da:b1:64:39:61:5d:d5:71:79:69:1a:7d:fb:55:c4:57:a9:03: 63:96:00:e7:68:7a:62:59:c3:96:15:14:f9:01:be:6f:ea:43: 44:81:0c:11:26:e7:56:4a:b2:22:7a:30:64:25:5a:79:7a:93: 4a:23:11:4a:7f:c0:76:d1:0c:d0:d9:26:65:06:30:8c:64:a4: f9:e2:98:02:31:c3:69:cd:b9:97:9b:5f:88:b2:32:a0:db:bc: ea:3b:e0:80:24:85:64:33:f8:a5:c5:43:d2:c4:4c:88:ff:47: c2:94:d1:79:81:a1:58:ba:b5:c5:7f:b8:3e:a9:1a:f6:02:db: c3:77:bc:4e:ae:60:a2:34:cc:0c:db:58:c8:db:52:d5:50:54: 63:43:f9:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUxMjIwMjA0NTAyWhcNMjUxMjI3MjA0NTAyWjAYMRYwFAYD VQQDDA02OTQ3MGFjZS1mZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfxETXTtwJGfIRhvxfZsHDk/PkdYRZGhr62xKvLzNQn7RMLtp+eJanAakfVU ysVZDYQZJBfXAryGT1jl5ReqrZpg5zF/ppyMFYklIsCrtptQqsY/c8dZ9sc7Dt18 1zXJ4HXaYvR/yDwQqhX/1MAInhE7DTXtr3VRIRwr4dL8YoNfFLHhNnUhxW65VAPk TPm10mwuwBzHIEyGCEBGV5Imy1o+5ECffG7FKzaZi7PRUkXgV/j/4INtHWL67XHo OHws7yqIyGQ1fG746wStUGYY551W2eoctzVURcqCm9+us39tdraslCCNxtR8UXAL SWpDHtfpC68X/DEZKgOz7FjK0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSZi71N ukkz3ENKTY31XnD9UrR+MB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl6eRIX3HguCMK9Y7C/KS3mCKiHd/kzF/8B+/QctXiPwUlNERy9IeF Mczvz9KMXBzDUvXx/aJ3pjODe+zBT6oimJWyuL2FrCPi2KeorjmBIukltPt7DegU DaNgwLUgA5glejcjc5nGfFE2bpbasWQ5YV3VcXlpGn37VcRXqQNjlgDnaHpiWcOW FRT5Ab5v6kNEgQwRJudWSrIiejBkJVp5epNKIxFKf8B20QzQ2SZlBjCMZKT54pgC McNpzbmXm1+IsjKg27zqO+CAJIVkM/ilxUPSxEyI/0fClNF5gaFYurXFf7g+qRr2 AtvDd7xOrmCiNMwM21jI21LVUFRjQ/kk -----END CERTIFICATE-----Generated at Sun Dec 21 22:54:08 2025 by rpki-client