This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: gwKuI4x9Pi+CJT4BIEcLnh270Qo1XJhEtmihZjd12xs= Subject key identifier: 6E:B7:D7:5A:90:F1:AF:F0:83:77:CD:F8:B0:B6:19:E6:41:84:BC:8C Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 1524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1503 Signing time: Sat 20 Dec 2025 16:35:54 +0000 Manifest this update: Sat 20 Dec 2025 16:35:54 +0000 Manifest next update: Sat 27 Dec 2025 16:35:54 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: Fcs8f+0e3r73LzX0789s8ZT9KCNU+kpn6vH28hqC4Oo=) 2: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: xOWh/5c3MDcOPKKPOs5E2JDhcK3EitSd5z0mZVQAmn4=) 3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: UtrqO+yyN3jQsZkVGkE+EUMbuUP0oNyEiC15gg1DC58=) 4: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: MomDGDWZ7/59k4xIjitSMBPT+iM+rJRkaviOBJD4QO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5412 (0x1524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Dec 20 16:35:54 2025 GMT Not After : Dec 27 16:35:54 2025 GMT Subject: CN=6946d06a-59bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:80:a4:91:d0:24:4a:81:54:d1:da:c4:6d: c3:3b:85:e3:e6:cb:0e:7e:45:59:c9:75:74:13:da: 4f:60:1b:15:86:4f:58:91:a0:c7:4b:9b:b9:56:6f: b6:15:02:c8:25:bc:9b:f4:31:ab:29:f1:47:5f:46: ad:81:87:bd:03:8f:22:88:a7:3b:de:8f:3f:92:e7: 53:96:e2:2e:27:41:b0:62:4d:bc:1d:37:8e:cc:3c: 35:12:14:ed:cb:d1:92:2e:3b:78:82:9a:4f:e8:92: 4e:d5:85:e6:b8:df:26:f0:67:e2:28:b9:0e:7e:5f: 4e:df:ae:ad:ab:8f:5f:b6:7b:04:3d:f2:fd:e1:91: 4f:28:87:ee:f1:d3:6a:09:9c:9e:ec:30:f4:5b:ae: 9a:4c:7b:9c:ed:f2:77:58:6a:e3:d7:e0:c5:4a:73: e5:58:d2:f4:b0:a7:f4:43:ab:2a:ab:29:c7:08:2a: 4d:53:05:34:09:a3:fd:34:98:35:79:df:1c:ac:aa: b0:4f:32:53:89:72:4a:00:77:28:a1:17:9f:97:80: e8:b5:46:fa:5e:67:fc:51:7e:45:9b:13:15:66:24: d5:fb:23:7e:2b:0c:80:f4:65:4e:40:fd:a2:b7:fa: c1:ff:09:b9:33:0d:de:8d:0d:21:91:ba:00:7f:ec: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:D7:5A:90:F1:AF:F0:83:77:CD:F8:B0:B6:19:E6:41:84:BC:8C X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e0:1a:ba:66:7f:d1:0d:29:41:ad:ef:e2:d1:98:cc:98:83: f3:a1:ed:b0:c5:29:ce:24:67:77:dc:bf:18:15:a6:81:5b:22: 57:48:f7:69:d2:f7:52:bc:3a:f3:6f:87:59:18:19:08:14:9c: c9:ac:48:5c:2d:6e:d2:b7:a2:85:8e:1a:b7:d3:70:1c:f4:e9: 21:94:68:12:4e:86:ec:72:57:61:09:5f:7e:89:ac:82:c7:b0: 03:03:0c:21:5e:20:df:74:81:54:f2:da:9f:0f:ae:9f:d6:36: c0:2b:de:5c:84:64:b8:91:e6:4b:74:31:08:2c:9c:cc:b5:99: bf:d2:c7:3c:85:1f:27:d0:a3:c2:96:13:b0:5b:bd:9e:54:37: d3:d4:3d:f3:d7:e3:e1:e5:69:4d:f0:ba:18:4c:4d:03:e6:5e: 11:4f:e0:0d:80:ec:04:bd:f8:1d:bd:41:59:30:1c:31:36:a3: 36:8a:fc:cc:48:af:b1:ea:c2:5e:4b:d5:f7:41:ad:8f:83:74: 4c:6f:7e:76:ca:67:eb:ac:41:5c:aa:6b:d3:c0:e7:2c:b7:11: 2e:4d:74:1e:34:b2:a0:48:cc:1e:72:8a:20:b8:c5:eb:c4:59: 42:52:30:9f:c1:2a:ef:05:97:dd:f8:b7:a0:9d:b4:8f:e1:65: 33:cc:bf:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUxMjIwMTYzNTU0WhcNMjUxMjI3MTYzNTU0WjAYMRYwFAYD VQQDDA02OTQ2ZDA2YS01OWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRmApJHQJEqBVNHaxG3DO4Xj5ssOfkVZyXV0E9pPYBsVhk9YkaDHS5u5Vm+2 FQLIJbyb9DGrKfFHX0atgYe9A48iiKc73o8/kudTluIuJ0GwYk28HTeOzDw1EhTt y9GSLjt4gppP6JJO1YXmuN8m8GfiKLkOfl9O366tq49ftnsEPfL94ZFPKIfu8dNq CZye7DD0W66aTHuc7fJ3WGrj1+DFSnPlWNL0sKf0Q6sqqynHCCpNUwU0CaP9NJg1 ed8crKqwTzJTiXJKAHcooRefl4DotUb6Xmf8UX5FmxMVZiTV+yN+KwyA9GVOQP2i t/rB/wm5Mw3ejQ0hkboAf+wvlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6311qQ 8a/wg3fN+LC2GeZBhLyMMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt4Bq6Zn/RDSlBre/i0ZjMmIPzoe2wxSnOJGd33L8YFaaBWyJXSPdp 0vdSvDrzb4dZGBkIFJzJrEhcLW7St6KFjhq303Ac9OkhlGgSTobscldhCV9+iayC x7ADAwwhXiDfdIFU8tqfD66f1jbAK95chGS4keZLdDEILJzMtZm/0sc8hR8n0KPC lhOwW72eVDfT1D3z1+Ph5WlN8LoYTE0D5l4RT+ANgOwEvfgdvUFZMBwxNqM2ivzM SK+x6sJeS9X3Qa2Pg3RMb352ymfrrEFcqmvTwOcstxEuTXQeNLKgSMwecooguMXr xFlCUjCfwSrvBZfd+LegnbSP4WUzzL/t -----END CERTIFICATE-----Generated at Sun Dec 21 16:02:21 2025 by rpki-client