This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: hjmh8Crryw7dS5peAcf8QURZ7QQX7Fu7We2T6TgB8Hc= Subject key identifier: 83:37:2E:6D:6B:BC:2D:34:A3:79:61:0D:F0:A6:51:02:52:49:FA:CE Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 085D Signing time: Sat 20 Dec 2025 20:07:34 +0000 Manifest this update: Sat 20 Dec 2025 20:07:34 +0000 Manifest next update: Sat 27 Dec 2025 20:07:34 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: sxoKbqw6OFuSXqJvllzKgczLV4EK/vZfo6SkSDImsys=) 2: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 3: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 6: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 7: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Dec 20 20:07:34 2025 GMT Not After : Dec 27 20:07:34 2025 GMT Subject: CN=69470206-5669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:88:af:cf:9f:f3:a0:00:28:68:33:e0:27: 2c:dd:8c:3f:9d:eb:be:ba:0f:44:4e:6a:23:a3:0f: a1:33:06:1f:5a:ff:b2:b5:88:f1:ad:fe:a8:21:c2: 8d:f3:7b:e2:1a:b6:d5:5e:b3:a7:f5:20:b0:16:ba: 60:c7:38:8f:4e:84:3e:e7:8b:a1:98:13:b6:9b:dc: 5d:d1:22:d1:c3:24:39:8e:1d:f5:d6:d8:7a:cf:b2: a0:fe:ec:82:52:68:f1:2b:6d:32:c2:99:9c:58:83: cf:29:08:01:57:a4:64:1e:5a:d1:b0:10:4d:91:05: 69:af:ab:cd:96:86:bc:c3:ee:52:0b:5e:54:4b:ee: cf:f7:00:9f:bd:68:27:b1:88:67:17:c1:26:8a:d6: 2f:3f:77:d7:1a:c8:0e:fb:d7:59:57:a3:4c:37:bb: d1:4a:a6:72:c6:c4:8e:c3:6e:c9:df:9a:3a:a5:ad: a7:56:b8:06:7c:66:17:9b:88:d5:c9:c7:a9:31:5d: 29:7a:04:43:e0:5f:e9:e8:5a:eb:e1:0d:ae:2c:cd: 21:e7:b8:68:31:0e:96:99:78:90:f2:91:91:97:77: fa:84:a3:7b:e8:c8:b3:66:21:5c:13:b6:a4:10:68: 3b:e0:39:0b:b2:23:ed:81:0f:7c:c9:97:1c:64:ee: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:37:2E:6D:6B:BC:2D:34:A3:79:61:0D:F0:A6:51:02:52:49:FA:CE X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0e:99:08:ef:49:e3:a2:e6:de:b3:c1:9f:3a:65:f1:ee:ce: 1e:81:f6:e5:8a:d3:c5:22:08:bf:4b:7f:31:71:05:8d:10:39: 37:f5:2e:00:73:82:6a:ca:13:29:c4:5b:62:fa:a5:68:4d:dd: 9b:c5:f8:cd:f3:88:43:df:e8:18:17:19:62:df:5d:fd:35:c6: 9b:72:a5:a1:dd:23:73:ed:31:24:7a:05:d0:1e:7b:a2:98:9b: 79:9e:5c:e8:47:66:2b:cc:fd:43:79:d3:16:3d:7e:6a:b6:7a: af:c0:b2:0b:46:c0:e7:a6:b2:eb:d6:82:29:fa:2a:30:31:40: cc:38:60:02:e1:d9:40:d5:f2:76:4e:55:81:c2:ad:8a:fb:d8: 40:0c:65:2b:9f:4f:c4:0e:5a:2f:e6:8f:d1:56:ea:23:22:8f: 27:7d:03:3f:ae:6c:58:e9:7a:43:00:0f:dc:dc:14:fd:8f:27: 00:37:51:9c:d2:96:73:79:0d:99:9a:a0:8a:5c:40:08:8c:82: 27:35:a0:de:c4:59:2d:63:1a:0d:8d:08:f0:b7:cc:a9:a1:fb: 87:af:67:49:c1:12:5d:7c:84:27:04:8a:74:b7:bc:19:01:2c: 28:8e:87:31:1d:64:31:35:96:8d:88:2d:72:86:dd:d4:b3:22: ec:ef:88:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUxMjIwMjAwNzM0WhcNMjUxMjI3MjAwNzM0WjAYMRYwFAYD VQQDDA02OTQ3MDIwNi01NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdaIr8+f86AAKGgz4Ccs3Yw/neu+ug9ETmojow+hMwYfWv+ytYjxrf6oIcKN 83viGrbVXrOn9SCwFrpgxziPToQ+54uhmBO2m9xd0SLRwyQ5jh311th6z7Kg/uyC UmjxK20ywpmcWIPPKQgBV6RkHlrRsBBNkQVpr6vNloa8w+5SC15US+7P9wCfvWgn sYhnF8EmitYvP3fXGsgO+9dZV6NMN7vRSqZyxsSOw27J35o6pa2nVrgGfGYXm4jV ycepMV0pegRD4F/p6Frr4Q2uLM0h57hoMQ6WmXiQ8pGRl3f6hKN76MizZiFcE7ak EGg74DkLsiPtgQ98yZccZO7XzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM3Lm1r vC00o3lhDfCmUQJSSfrOMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPDpkI70njoubes8GfOmXx7s4egfblitPFIgi/S38xcQWNEDk39S4A c4JqyhMpxFti+qVoTd2bxfjN84hD3+gYFxli3139NcabcqWh3SNz7TEkegXQHnui mJt5nlzoR2YrzP1DedMWPX5qtnqvwLILRsDnprLr1oIp+iowMUDMOGAC4dlA1fJ2 TlWBwq2K+9hADGUrn0/EDlov5o/RVuojIo8nfQM/rmxY6XpDAA/c3BT9jycAN1Gc 0pZzeQ2ZmqCKXEAIjIInNaDexFktYxoNjQjwt8ypofuHr2dJwRJdfIQnBIp0t7wZ ASwojocxHWQxNZaNiC1yht3UsyLs74hM -----END CERTIFICATE-----Generated at Sun Dec 21 10:47:56 2025 by rpki-client