This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json) Hash identifier: LkWLh6tJH207HO7FtABn88frQOO3u3vAZXZaAgWGXdY= Subject key identifier: C4:C8:7A:30:CA:9C:91:52:06:34:B1:B3:99:48:DF:8C:70:1A:C0:D8 Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft Manifest number: 5B Signing time: Wed 31 Dec 2025 06:06:22 +0000 Manifest this update: Wed 31 Dec 2025 06:06:21 +0000 Manifest next update: Wed 07 Jan 2026 06:06:21 +0000 Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: DpCMD2V1kOfemKuJVISSBCqWVzZE0zo26CnCOcioAtc=) 2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: 92wZUBl6JW7t9Lz6VY8NqyCC30dn+5kR/99dMirbOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 06:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Validity Not Before: Dec 31 06:06:21 2025 GMT Not After : Jan 7 06:06:21 2026 GMT Subject: CN=6954bd5e-9569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:48:e9:1d:ba:26:44:ea:43:6a:ca:aa:43: 4d:0a:37:42:18:b0:df:af:9d:c6:2f:f1:22:57:da: e6:e1:10:24:79:0e:e8:9f:be:cc:89:53:23:04:e5: 0a:ae:d9:c0:b4:db:bf:fc:f5:fd:a3:01:a2:f1:c9: 52:d7:28:09:69:e5:4a:e6:b2:ed:72:d6:20:d6:92: f6:d7:4f:f1:9c:f0:b6:9b:99:ff:0e:4b:80:e9:31: e5:f1:e5:40:cd:c6:1a:67:f8:6a:53:d1:d4:1f:ad: 07:00:21:28:b6:76:56:ac:16:46:85:76:4e:bc:8b: 3c:e2:f4:a8:55:32:1c:9b:d8:62:cc:76:3c:01:d4: 9a:5a:24:71:b4:8f:50:0e:4f:25:94:a9:f1:af:12: 0d:8e:f7:9c:44:cc:a6:f1:76:ab:a6:80:bb:db:00: fc:47:4d:14:8c:c2:36:25:73:6b:07:88:d8:61:32: ba:72:f1:d4:63:9f:e1:16:8c:9a:dd:4f:bc:b5:9e: 8a:11:17:e7:01:3a:cb:bb:1e:29:4e:22:f5:00:43: 62:bc:4a:e1:ae:f5:dd:7c:9a:ab:83:a8:06:71:ed: ae:4c:07:97:c4:14:fd:4c:8b:09:c8:bf:42:62:67: c8:b3:73:94:fc:59:23:eb:9b:a1:68:1f:4b:95:b5: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:7A:30:CA:9C:91:52:06:34:B1:B3:99:48:DF:8C:70:1A:C0:D8 X509v3 Authority Key Identifier: keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4f:db:18:c7:9a:2c:ce:10:7a:7b:f7:7a:00:2c:b7:a9:ff: 75:0b:40:ff:36:f6:5a:c0:5c:96:6a:7f:eb:72:eb:03:88:9d: f8:d3:cb:6d:4d:5e:02:c5:e1:74:0c:28:4f:59:8d:91:88:93: fb:08:51:61:46:2e:0c:92:1c:d6:ea:3f:a5:ff:48:9b:c0:08: 80:aa:aa:89:61:2c:96:22:dd:fe:45:ba:fe:4c:2b:9e:ac:49: 2d:c4:b3:98:f5:27:21:2f:ad:f3:fd:bb:16:59:68:5e:9c:4c: 91:8b:7d:4e:54:24:e3:c6:84:61:54:e1:6a:ea:d1:b5:1e:10: 10:d1:04:1e:af:d2:c2:37:56:c8:02:5a:c1:05:a0:a7:35:b5: ab:6f:59:f3:ef:1f:9a:f2:a7:b6:3d:ca:76:dd:3d:91:6b:c1: ca:fd:a0:79:e7:79:82:f0:45:7d:54:7a:36:30:70:b7:23:f0: cd:99:8d:d9:2c:a1:f2:1f:8d:9e:81:e0:5f:11:f3:f1:b2:36: d9:df:4a:4f:d9:84:b8:ba:aa:97:cf:c8:46:89:bb:cb:6b:35: ea:cc:9b:e7:cb:e1:46:87:77:a1:33:dd:ce:79:be:c9:4f:a9: 71:fb:92:e1:8e:00:dd:af:23:fe:71:85:ef:eb:a0:6a:3a:9d: 10:c5:36:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoMUExNkEzOTFEMzI1MTcwQjdCODVDNEJGQzc4NTVBMTc3 RDM0N0I2RTAeFw0yNTEyMzEwNjA2MjFaFw0yNjAxMDcwNjA2MjFaMBgxFjAUBgNV BAMMDTY5NTRiZDVlLTk1NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxjUjpHbomROpDasqqQ00KN0IYsN+vncYv8SJX2ubhECR5DuifvsyJUyME5Qqu 2cC027/89f2jAaLxyVLXKAlp5Urmsu1y1iDWkvbXT/Gc8Labmf8OS4DpMeXx5UDN xhpn+GpT0dQfrQcAISi2dlasFkaFdk68izzi9KhVMhyb2GLMdjwB1JpaJHG0j1AO TyWUqfGvEg2O95xEzKbxdqumgLvbAPxHTRSMwjYlc2sHiNhhMrpy8dRjn+EWjJrd T7y1nooRF+cBOsu7HilOIvUAQ2K8SuGu9d18mquDqAZx7a5MB5fEFP1MiwnIv0Ji Z8izc5T8WSPrm6FoH0uVte+tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxMh6MMqc kVIGNLGzmUjfjHAawNgwHwYDVR0jBBgwFoAUGhajkdMlFwt7hcS/x4VaF300e24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzE4ODJEMEU2NUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0N2hjU194NFZhRjMwMGUy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2hhamtkTWxGd3Q3aGNTX3g0VmFGMzAwZTI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzE4ODJEMEU2NUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0 N2hjU194NFZhRjMwMGUyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpP2xjHmizOEHp793oALLep/3ULQP829lrAXJZqf+ty6wOInfjTy21N XgLF4XQMKE9ZjZGIk/sIUWFGLgySHNbqP6X/SJvACICqqolhLJYi3f5Fuv5MK56s SS3Es5j1JyEvrfP9uxZZaF6cTJGLfU5UJOPGhGFU4Wrq0bUeEBDRBB6v0sI3VsgC WsEFoKc1tatvWfPvH5ryp7Y9ynbdPZFrwcr9oHnneYLwRX1UejYwcLcj8M2Zjdks ofIfjZ6B4F8R8/GyNtnfSk/ZhLi6qpfPyEaJu8trNerMm+fL4UaHd6Ez3c55vslP qXH7kuGOAN2vI/5xhe/roGo6nRDFNhQ= -----END CERTIFICATE-----Generated at Thu Jan 1 00:28:07 2026 by rpki-client