This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: gW1u5uyxip0vuk6k+9hR54R7jZRvRm/kkriZr5vTQ1g= Subject key identifier: 83:00:58:0B:7A:6D:52:A5:D8:A2:2C:85:54:18:F7:18:F3:87:EB:01 Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: 011E Signing time: Fri 19 Dec 2025 03:53:08 +0000 Manifest this update: Fri 19 Dec 2025 03:53:07 +0000 Manifest next update: Fri 26 Dec 2025 03:53:07 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: cHhfwbpJ/+RNBNdoJRLapIuiGw/5KWnk+Gnqyhvq/G4=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: Dec 19 03:53:07 2025 GMT Not After : Dec 26 03:53:07 2025 GMT Subject: CN=6944cc24-dfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:86:2d:ef:e0:1f:53:3f:3b:fc:ea:94:e4: 8d:48:b4:b6:2c:bf:3f:87:86:d1:b8:cf:40:a2:ba: ff:5c:71:30:23:cf:25:55:8f:b3:bd:e3:58:f2:68: 3d:a6:8a:0f:87:fe:ff:86:d8:ae:d5:ec:e1:c2:cb: 2f:de:60:50:7c:90:d0:a1:8b:98:ea:1b:8b:a6:3c: 5e:4f:c7:19:6c:e6:c1:9a:21:14:74:05:8c:9b:2d: ca:60:22:d2:3f:0c:5e:b1:55:83:66:aa:cf:62:27: 10:1e:a4:f8:f8:57:99:15:e0:63:d4:29:36:a3:a4: 25:c9:9c:54:a6:74:8f:65:f3:08:a5:be:74:1d:3b: fd:b4:1b:21:82:39:1c:e0:00:85:6c:c7:cb:86:47: b4:6f:fa:07:ac:05:e6:57:7f:00:c1:26:1c:7c:ce: 80:3f:b3:d2:c1:96:9d:9e:89:7c:2c:e9:41:8b:ff: a3:06:bb:0d:52:41:dc:e6:57:f8:d5:8a:7f:79:20: 28:b6:63:a8:e4:96:bf:4a:bf:3c:0e:41:db:2a:15: 58:0a:99:bd:dd:f3:74:7e:3e:73:31:df:c4:52:94: 49:a3:c4:db:35:92:9d:4c:c7:be:6a:73:9c:5b:9f: c1:a6:b6:f4:9d:dc:4d:8d:5f:18:9a:e3:98:31:74: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:00:58:0B:7A:6D:52:A5:D8:A2:2C:85:54:18:F7:18:F3:87:EB:01 X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:eb:63:61:91:f0:9f:03:20:e3:71:a3:71:0f:3b:46:00:b4: 9a:a3:00:67:44:c8:68:84:20:b1:a4:a8:5c:78:ba:07:34:8e: d9:6f:3f:70:a2:e7:23:f9:5e:58:85:b0:85:fb:92:4e:b8:15: c2:d0:3d:2f:8b:e7:e4:9d:ab:51:a8:88:af:f3:17:c7:cf:e4: 99:bc:3e:04:c1:cd:b7:23:e3:0b:42:14:a3:9d:0f:2c:83:9e: 2c:83:b3:0b:00:33:71:f8:38:74:82:14:6d:47:09:5f:14:6f: a4:03:b5:db:bd:2f:29:8a:d7:3e:36:9a:a0:98:51:5a:0b:e1: f4:bb:58:c0:0d:7b:c2:a9:15:fe:4b:a8:ad:be:0d:34:78:33: ad:9e:5f:c4:d2:06:76:a9:63:ef:a1:f5:65:f9:fd:7f:eb:e8: c1:f0:fc:ca:88:c4:01:a4:77:8e:c9:1e:55:9e:5c:5e:68:83: 48:76:f7:25:50:4e:84:0f:e2:79:49:26:5e:b8:f3:1d:81:03: 54:03:72:cb:aa:99:cd:af:8d:da:1d:d9:57:62:41:69:c2:b8: bc:14:e9:1a:90:39:fa:5a:b5:21:35:6f:91:b5:2c:f5:af:ef: 95:40:b4:64:20:78:ed:95:5d:49:f3:8e:dc:68:93:23:3c:2f: 47:67:64:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUxMjE5MDM1MzA3WhcNMjUxMjI2MDM1MzA3WjAYMRYwFAYD VQQDDA02OTQ0Y2MyNC1kZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRCGLe/gH1M/O/zqlOSNSLS2LL8/h4bRuM9Aorr/XHEwI88lVY+zveNY8mg9 pooPh/7/htiu1ezhwssv3mBQfJDQoYuY6huLpjxeT8cZbObBmiEUdAWMmy3KYCLS PwxesVWDZqrPYicQHqT4+FeZFeBj1Ck2o6QlyZxUpnSPZfMIpb50HTv9tBshgjkc 4ACFbMfLhke0b/oHrAXmV38AwSYcfM6AP7PSwZadnol8LOlBi/+jBrsNUkHc5lf4 1Yp/eSAotmOo5Ja/Sr88DkHbKhVYCpm93fN0fj5zMd/EUpRJo8TbNZKdTMe+anOc W5/Bprb0ndxNjV8YmuOYMXSw4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMAWAt6 bVKl2KIshVQY9xjzh+sBMB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV62NhkfCfAyDjcaNxDztGALSaowBnRMhohCCxpKhceLoHNI7Zbz9w oucj+V5YhbCF+5JOuBXC0D0vi+fknatRqIiv8xfHz+SZvD4Ewc23I+MLQhSjnQ8s g54sg7MLADNx+Dh0ghRtRwlfFG+kA7XbvS8pitc+NpqgmFFaC+H0u1jADXvCqRX+ S6itvg00eDOtnl/E0gZ2qWPvofVl+f1/6+jB8PzKiMQBpHeOyR5VnlxeaINIdvcl UE6ED+J5SSZeuPMdgQNUA3LLqpnNr43aHdlXYkFpwri8FOkakDn6WrUhNW+RtSz1 r++VQLRkIHjtlV1J847caJMjPC9HZ2TP -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:59 2025 by rpki-client