This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: AOLqrPCohDw/ZYzbron+qxO8pJm9JZBStuYYxOOxgn4= Subject key identifier: F9:06:A3:CC:B1:63:9F:A2:7A:AC:74:D1:05:48:DB:09:7E:82:C1:F8 Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 043E Signing time: Mon 22 Dec 2025 23:20:24 +0000 Manifest this update: Mon 22 Dec 2025 23:20:24 +0000 Manifest next update: Mon 29 Dec 2025 23:20:24 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: i5hoT76+HqTRsYHtXAQ/mYIhKQCahnu6Q8IIbxoSs/g=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: Dec 22 23:20:24 2025 GMT Not After : Dec 29 23:20:24 2025 GMT Subject: CN=6949d238-27fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:a6:03:61:da:7a:d4:3f:c7:40:af:10:f8: d9:53:8d:88:fc:ea:68:04:c3:ba:80:72:70:93:94: 6d:bc:1d:67:1c:85:d7:fd:f1:4a:3a:84:c5:23:3c: b2:0f:46:70:80:78:e8:2c:9f:8d:b7:60:ae:5a:91: aa:b1:18:79:74:c2:c8:e7:ca:70:f4:e7:ec:96:57: a8:8b:3a:9b:73:7d:de:b6:e2:fa:a8:df:2a:84:fc: a9:94:65:ba:cc:28:6a:d9:df:ad:31:03:e1:96:3d: ce:0d:cf:f3:d0:78:51:1c:f3:64:4e:7a:1f:68:7e: af:84:fc:67:d0:85:d7:56:8f:b3:d1:a8:5c:f7:40: 0f:45:d7:e3:6b:d1:32:0c:0a:8c:dd:a9:f8:3d:0b: 90:20:2d:15:74:38:df:fc:27:8c:3c:cc:2a:04:8f: 69:19:70:28:21:ed:70:d7:df:20:fb:c9:58:be:b5: 41:6e:7c:34:f0:06:50:ec:9a:3c:63:06:cd:43:cd: 0d:13:1b:7c:2f:5f:f3:3c:98:94:fa:98:71:db:52: 46:91:a0:5a:74:8c:52:37:69:69:50:e3:8f:d8:2d: b3:1d:a9:b0:8d:12:16:47:95:00:72:4a:9a:ca:10: 58:26:ff:b9:8a:ef:0c:f6:2a:69:c5:3a:4e:ee:3d: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:A3:CC:B1:63:9F:A2:7A:AC:74:D1:05:48:DB:09:7E:82:C1:F8 X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c8:5a:d0:39:d9:2e:e8:d9:c3:37:bb:90:c5:a4:85:4b:20: cb:a5:94:e5:2f:bf:54:3b:cf:4e:21:88:e7:67:c5:b9:98:8f: 48:19:2f:fe:63:a4:30:bf:ed:f1:51:88:cf:11:ed:a9:ab:9c: a0:2b:63:ac:17:c2:15:21:68:41:17:15:56:38:cf:b1:c2:c2: a2:ad:9e:e2:9a:c9:ce:cf:36:0f:32:92:5a:d9:9a:4f:e8:2f: 13:d3:42:0c:fe:6e:b4:f9:15:f8:a0:48:59:76:da:a2:b2:09: 77:d2:c1:71:9b:ed:cf:77:87:ee:86:d7:79:87:e2:25:e9:92: 29:82:52:0b:f5:f0:ce:55:b3:e3:86:a4:4d:5f:aa:d6:5c:ff: 8f:ac:9e:a3:4d:19:29:8e:be:93:a6:a8:af:37:54:8a:20:da: ac:5b:87:9e:8c:99:99:90:c9:ce:15:b3:73:73:94:bd:4d:45: 72:db:e1:fc:de:9f:8f:8a:b0:3d:76:77:98:cb:1f:a2:c8:1d: 29:4b:05:06:f1:56:22:fe:c0:89:ef:27:0a:21:ec:95:96:70: 8a:f1:84:75:61:ae:6f:ad:1d:d1:9f:0f:50:be:8c:c2:53:b5: 92:5e:b1:2a:4c:ee:3f:ef:59:7f:99:56:51:7b:72:ae:47:53: 53:65:6c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjUxMjIyMjMyMDI0WhcNMjUxMjI5MjMyMDI0WjAYMRYwFAYD VQQDDA02OTQ5ZDIzOC0yN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxumA2HaetQ/x0CvEPjZU42I/OpoBMO6gHJwk5RtvB1nHIXX/fFKOoTFIzyy D0ZwgHjoLJ+Nt2CuWpGqsRh5dMLI58pw9Ofslleoizqbc33etuL6qN8qhPyplGW6 zChq2d+tMQPhlj3ODc/z0HhRHPNkTnofaH6vhPxn0IXXVo+z0ahc90APRdfja9Ey DAqM3an4PQuQIC0VdDjf/CeMPMwqBI9pGXAoIe1w198g+8lYvrVBbnw08AZQ7Jo8 YwbNQ80NExt8L1/zPJiU+phx21JGkaBadIxSN2lpUOOP2C2zHamwjRIWR5UAckqa yhBYJv+5iu8M9ippxTpO7j1CAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkGo8yx Y5+ieqx00QVI2wl+gsH4MB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEyFrQOdku6NnDN7uQxaSFSyDLpZTlL79UO89OIYjnZ8W5mI9IGS/+ Y6Qwv+3xUYjPEe2pq5ygK2OsF8IVIWhBFxVWOM+xwsKirZ7imsnOzzYPMpJa2ZpP 6C8T00IM/m60+RX4oEhZdtqisgl30sFxm+3Pd4fuhtd5h+Il6ZIpglIL9fDOVbPj hqRNX6rWXP+PrJ6jTRkpjr6TpqivN1SKINqsW4eejJmZkMnOFbNzc5S9TUVy2+H8 3p+PirA9dneYyx+iyB0pSwUG8VYi/sCJ7ycKIeyVlnCK8YR1Ya5vrR3Rnw9QvozC U7WSXrEqTO4/71l/mVZRe3KuR1NTZWzg -----END CERTIFICATE-----Generated at Tue Dec 23 00:33:01 2025 by rpki-client