This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json) Hash identifier: +gdZORiM47IAaszbjs1Es6xbFf4pmXcItYturh/bp+g= Subject key identifier: 6A:4A:D0:6F:15:C6:DE:0C:E8:97:0B:23:A6:5D:C1:E6:C6:BC:0B:CF Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft Manifest number: 13 Signing time: Wed 17 Dec 2025 07:32:56 +0000 Manifest this update: Wed 17 Dec 2025 07:32:56 +0000 Manifest next update: Wed 24 Dec 2025 07:32:56 +0000 Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: eEWcQQbs9Ay0c2NxaFCdpUCQzOyjS2mytllSbJA0fyw=) 2: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: hcI2ayTq5n9AjyRx6mflcA+1XXsKr8j4yfxoIjjFWMw=) 3: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: iU9xhgwk7BF9Dw1LyEZZJRsmd4voHButrjrmIYckRSU=) 4: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: hAJTg6RB5BjX/CgestHJguPeFSKIh+Dv7A8Bm8CwO60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Validity Not Before: Dec 17 07:32:56 2025 GMT Not After : Dec 24 07:32:56 2025 GMT Subject: CN=69425ca8-b380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:ee:ea:da:f4:a1:f0:f5:ed:d0:79:ad:ee: 81:e7:45:10:8c:a1:c1:5a:0f:22:6f:59:42:35:8c: 1c:5d:2d:b0:2b:05:1b:a7:90:c0:47:72:dd:9c:35: a7:76:b7:6d:bd:29:2e:c5:d2:b8:60:1d:e0:89:c2: ca:3e:96:25:7b:a5:dc:18:c8:0d:84:12:73:4d:4b: 32:03:12:ff:8a:7b:93:56:b5:b2:7b:f0:51:c1:e4: fb:9c:40:4b:23:e6:b9:a0:d8:c1:b8:72:2c:e2:01: e4:d1:ac:cd:f2:c0:0b:ac:32:34:ca:bc:d0:b1:35: 99:a6:b1:bc:3c:07:b6:c2:7c:c7:48:2d:38:08:43: 4e:f8:6f:4f:ea:1b:b1:ef:5f:2e:26:46:56:99:f3: fe:dd:b2:62:33:5d:ed:2c:b0:59:bf:e8:a6:a4:e2: 51:5a:99:fa:95:13:c7:6f:5e:3a:ee:88:ed:07:bb: eb:7b:05:4b:b1:b4:66:e5:48:1b:7e:dd:e3:fa:45: 01:6a:2d:e2:50:ae:c5:f7:25:38:4d:45:55:54:49: 8f:66:9d:b7:03:6e:19:86:49:da:7b:b4:59:ba:9c: bc:f1:6d:0e:b7:25:3a:c5:91:ec:f0:42:6e:06:cd: 59:f1:6f:c6:72:d2:0c:35:0c:9a:55:78:bb:52:92: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:D0:6F:15:C6:DE:0C:E8:97:0B:23:A6:5D:C1:E6:C6:BC:0B:CF X509v3 Authority Key Identifier: keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:d8:0b:fc:03:d1:c8:5e:6e:b2:4f:69:24:fe:e7:81:9f: b1:c8:00:7d:0d:48:f7:71:fe:8f:67:99:80:a9:aa:9f:1f:5b: 23:1d:8d:6b:64:9b:96:a1:78:ac:b7:d8:a3:16:13:b1:7d:a5: bf:39:92:65:e9:39:27:a4:a1:cd:5b:6e:1e:c6:bd:da:1e:10: 3c:f8:2a:68:c9:23:36:c8:dc:fd:34:bf:e5:e7:ee:30:31:3d: d1:11:bd:88:b0:ae:0a:3f:1d:f8:1d:58:f2:f3:c0:fc:ca:8a: 61:8d:5f:5c:d7:08:7f:4b:e5:2d:67:6b:1c:a8:8e:a3:60:75: 62:d8:af:e3:fc:89:86:38:8e:b0:a6:01:b0:e5:f4:1d:6a:1a: a7:5e:b4:5b:ad:48:58:2a:94:43:29:81:e1:b7:5c:57:ec:52: 8e:a1:a8:23:fb:aa:11:84:6a:c0:ba:b6:92:00:2b:e2:85:ff: b4:64:1a:3f:df:ff:ea:b4:80:1e:74:2a:14:e7:76:92:c4:a8: 48:f5:81:a5:6c:8d:36:98:64:90:e9:fe:7f:41:e3:42:45:d3: 4f:77:6f:46:5e:4c:5b:d3:95:54:6e:4a:f0:a8:ec:eb:3c:6f: 02:03:15:75:71:b7:c2:62:c3:09:e5:f7:ec:10:60:20:0b:f8: 40:61:7b:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1Qjk0NEZFNkY5 QzYzRTIyMDAeFw0yNTEyMTcwNzMyNTZaFw0yNTEyMjQwNzMyNTZaMBgxFjAUBgNV BAMMDTY5NDI1Y2E4LWIzODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRPe7q2vSh8PXt0Hmt7oHnRRCMocFaDyJvWUI1jBxdLbArBRunkMBHct2cNad2 t229KS7F0rhgHeCJwso+liV7pdwYyA2EEnNNSzIDEv+Ke5NWtbJ78FHB5PucQEsj 5rmg2MG4ciziAeTRrM3ywAusMjTKvNCxNZmmsbw8B7bCfMdILTgIQ074b0/qG7Hv Xy4mRlaZ8/7dsmIzXe0ssFm/6Kak4lFamfqVE8dvXjruiO0Hu+t7BUuxtGblSBt+ 3eP6RQFqLeJQrsX3JThNRVVUSY9mnbcDbhmGSdp7tFm6nLzxbQ63JTrFkezwQm4G zVnxb8Zy0gw1DJpVeLtSkno7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUakrQbxXG 3gzolwsjpl3B5sa8C88wHwYDVR0jBBgwFoAUGlsAWXyNe2H7vv7FuUT+b5xj4iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0FFODgzNjY4QzhF QzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2xzQVdYeU5lMkg3dnY3RnVVVC1iNXhqNGlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0FFODgzNjY4QzhFQzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJI N3Z2N0Z1VVQtYjV4ajRpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANm2Av8A9HIXm6yT2kk/ueBn7HIAH0NSPdx/o9nmYCpqp8fWyMdjWtk m5aheKy32KMWE7F9pb85kmXpOSekoc1bbh7GvdoeEDz4KmjJIzbI3P00v+Xn7jAx PdERvYiwrgo/HfgdWPLzwPzKimGNX1zXCH9L5S1naxyojqNgdWLYr+P8iYY4jrCm AbDl9B1qGqdetFutSFgqlEMpgeG3XFfsUo6hqCP7qhGEasC6tpIAK+KF/7RkGj/f /+q0gB50KhTndpLEqEj1gaVsjTaYZJDp/n9B40JF0093b0ZeTFvTlVRuSvCo7Os8 bwIDFXVxt8Jiwwnl9+wQYCAL+EBhe88= -----END CERTIFICATE-----Generated at Wed Dec 17 12:57:36 2025 by rpki-client