This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: ZLZ93SPojhNNcszrhdt7pPB8VDg9MqMlJROCOQeYfJY= Subject key identifier: 56:35:DA:30:0B:D5:63:5E:66:1C:C2:04:40:CF:6A:C3:2D:F9:2A:33 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 3502 Signing time: Sat 20 Dec 2025 14:21:51 +0000 Manifest this update: Sat 20 Dec 2025 14:21:51 +0000 Manifest next update: Sat 27 Dec 2025 14:21:51 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: CRrV2OKkdxMuWbAcEEpYH3c4V/h3PCLRKY4hxiFYgaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Dec 20 14:21:51 2025 GMT Not After : Dec 27 14:21:51 2025 GMT Subject: CN=6946b0ff-e10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0c:5c:da:3b:16:26:90:43:e9:47:c7:4d:0d: 14:c9:6a:b2:f8:42:72:38:34:24:99:d8:f6:9b:3f: f9:c6:cc:79:0f:96:1e:6e:67:d0:f6:d6:8d:4f:e3: 7c:53:02:06:fd:09:56:f3:9f:cf:14:ab:cb:58:82: 9a:e0:af:44:6a:b2:39:4e:58:a4:8f:2d:15:7a:28: 19:2f:ee:c4:02:21:62:9d:d5:34:43:06:32:8b:59: 49:92:5a:8d:4d:7d:8d:7c:9d:d3:0e:5c:51:c0:d2: e9:fe:1e:de:8d:ec:88:91:06:2e:e4:e2:db:9d:41: 73:ec:37:63:11:78:c4:8e:54:b9:6e:da:71:ef:24: dc:3b:43:bc:0d:d4:84:a1:49:de:a8:ac:7e:8b:2b: 24:4a:55:cc:f7:a5:17:6b:ff:1a:2c:0e:9a:c5:94: 80:64:5c:16:d9:0e:10:09:c2:e6:6c:f0:bb:0c:ee: 71:e9:a3:50:e5:a6:ee:bc:b6:d1:85:22:07:cc:8d: ac:3a:44:97:36:ec:0d:f2:a8:ed:df:f2:c7:5e:12: bd:0a:d0:8f:2f:30:b6:52:10:c6:32:d1:55:49:6d: d5:ad:ab:10:c9:59:e3:ae:66:7b:43:d1:5b:1d:2c: 34:6e:42:73:e7:50:ee:16:ea:db:06:98:30:b1:6b: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:35:DA:30:0B:D5:63:5E:66:1C:C2:04:40:CF:6A:C3:2D:F9:2A:33 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0e:aa:a1:4d:46:40:89:77:de:57:ff:d7:79:3e:01:37:f5: ed:0d:f8:af:e0:8d:26:42:a2:f6:5c:d4:89:f3:ce:98:2f:03: 7f:2d:e9:78:42:07:9e:fd:cd:de:0c:bb:60:86:60:af:4d:26: e6:b7:32:96:60:15:5d:52:b8:5e:f2:0e:5d:70:3e:a5:a5:7a: be:04:ac:39:56:97:49:1f:54:c4:1b:ec:15:c9:b1:3b:c8:70: 71:d1:d7:6a:8c:85:d3:a1:ca:45:12:c2:37:a2:4c:c3:96:7e: 29:ac:a0:55:37:01:15:10:9c:5e:14:d1:80:aa:7f:a9:66:ea: bd:41:08:ce:01:80:de:45:a7:df:ac:10:49:e9:e4:05:72:ff: 97:c5:3e:40:c4:e2:9e:85:bf:32:3f:df:47:57:82:32:4b:2d: 1c:74:e0:91:b2:41:bc:5d:d3:8b:34:ff:88:da:e8:a0:b5:cc: c9:9c:95:77:fe:2d:57:dc:30:2c:15:16:ce:db:71:18:4f:3f: bd:8a:fd:43:5a:d0:53:d3:96:ba:ad:18:05:08:04:48:47:eb: 1b:b5:f3:55:b3:cf:22:88:41:9e:91:81:e1:be:d3:4c:42:8b: 48:02:8d:52:c6:71:50:9d:15:b4:ee:15:dc:0e:8b:f6:2c:57: ca:27:e7:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUxMjIwMTQyMTUxWhcNMjUxMjI3MTQyMTUxWjAYMRYwFAYD VQQDDA02OTQ2YjBmZi1lMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Qxc2jsWJpBD6UfHTQ0UyWqy+EJyODQkmdj2mz/5xsx5D5YebmfQ9taNT+N8 UwIG/QlW85/PFKvLWIKa4K9EarI5Tlikjy0VeigZL+7EAiFindU0QwYyi1lJklqN TX2NfJ3TDlxRwNLp/h7ejeyIkQYu5OLbnUFz7DdjEXjEjlS5btpx7yTcO0O8DdSE oUneqKx+iyskSlXM96UXa/8aLA6axZSAZFwW2Q4QCcLmbPC7DO5x6aNQ5abuvLbR hSIHzI2sOkSXNuwN8qjt3/LHXhK9CtCPLzC2UhDGMtFVSW3VrasQyVnjrmZ7Q9Fb HSw0bkJz51DuFurbBpgwsWskQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFY12jAL 1WNeZhzCBEDPasMt+SozMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzDqqhTUZAiXfeV//XeT4BN/XtDfiv4I0mQqL2XNSJ886YLwN/Lel4 Qgee/c3eDLtghmCvTSbmtzKWYBVdUrhe8g5dcD6lpXq+BKw5VpdJH1TEG+wVybE7 yHBx0ddqjIXTocpFEsI3okzDln4prKBVNwEVEJxeFNGAqn+pZuq9QQjOAYDeRaff rBBJ6eQFcv+XxT5AxOKehb8yP99HV4IySy0cdOCRskG8XdOLNP+I2uigtczJnJV3 /i1X3DAsFRbO23EYTz+9iv1DWtBT05a6rRgFCARIR+sbtfNVs88iiEGekYHhvtNM QotIAo1SxnFQnRW07hXcDov2LFfKJ+fr -----END CERTIFICATE-----Generated at Sun Dec 21 12:16:21 2025 by rpki-client