This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: hTdZGZqcIo5qNLynxxDpQTcOPK99W0pyi8BDuvb/WtU= Subject key identifier: 7C:D9:B8:25:0A:7D:ED:D3:25:CB:BB:73:88:5C:82:B1:F4:63:CF:B7 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 025C Signing time: Fri 19 Dec 2025 00:52:14 +0000 Manifest this update: Fri 19 Dec 2025 00:52:14 +0000 Manifest next update: Fri 26 Dec 2025 00:52:14 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: 6Tdw/Qz+Ul7CTpFQKfq282fbIBze1vCbvVaQ+Co95oc=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: TvztujTH0aF+f3+QnJDK+OdcTc4zPAtby3BUe4w8JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Dec 19 00:52:14 2025 GMT Not After : Dec 26 00:52:14 2025 GMT Subject: CN=6944a1be-8e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:d3:af:81:d0:66:78:c5:99:ec:54:6f:ec: ef:5d:35:d7:c2:ca:47:c6:2a:5c:52:08:c3:c1:42: 70:24:bc:b6:83:38:de:58:71:70:be:8a:8b:20:e7: 57:78:f7:e1:a4:d6:a6:61:15:66:10:f9:35:52:d6: 3a:60:24:6c:85:89:d0:bc:3c:85:ec:df:7c:30:3c: e9:c7:17:dc:8d:92:da:8a:3b:f0:21:a0:d9:52:43: 74:79:b2:ab:14:52:db:10:c9:b6:13:14:ee:f4:cd: 07:dc:cd:9d:1a:33:01:f7:b3:6b:68:b9:2c:50:d8: 40:22:24:3a:ea:4c:20:60:6f:1b:c7:e4:42:8b:8d: e4:75:eb:e0:95:54:7a:a3:e7:d9:e2:4e:26:92:78: 2c:58:b0:cb:a3:dd:15:55:11:ce:6c:8b:5c:33:6e: ad:c3:76:fa:27:49:24:ba:6d:e9:1e:b8:d9:18:1e: 4a:1f:8d:9b:c4:75:4e:89:89:7e:b0:71:fb:01:66: c4:6b:ff:f1:4b:76:de:26:ba:29:44:6e:cf:b4:b9: 22:29:51:d1:a6:3d:f3:7e:2a:f8:ab:ad:64:d5:5f: 6a:79:dc:11:11:04:91:1d:a5:a9:ea:f0:f7:8d:51: e7:5d:dc:64:35:9d:c3:52:c6:92:63:ff:87:7d:3e: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D9:B8:25:0A:7D:ED:D3:25:CB:BB:73:88:5C:82:B1:F4:63:CF:B7 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fa:95:c2:ed:2e:6e:18:23:5d:f2:06:74:1a:ea:49:3a:f6: f4:08:7e:69:04:c6:44:af:67:40:f0:7d:58:89:51:bb:81:f5: 44:d1:22:e7:d7:c4:32:d2:05:4a:31:1c:df:cf:d8:f6:ae:80: ef:41:cc:f1:ce:e1:b4:6a:ed:34:d3:49:88:11:11:a1:f0:92: 18:d4:62:ad:ba:6d:68:2b:73:86:65:88:b1:c6:1f:3b:c3:fa: 8a:5c:d7:4e:e4:76:fc:dd:92:38:50:60:06:45:21:0a:9f:30: bf:51:d6:a8:5d:79:5a:0b:64:be:ac:a1:8f:9b:c6:1b:e3:ad: 0c:f4:8a:87:7a:1a:1a:b2:cf:94:62:63:61:0b:e8:81:84:3d: a6:18:6b:86:d8:14:42:cf:66:e0:5b:6a:48:97:05:a1:a6:fa: b9:31:0e:c3:f8:e6:d5:bc:f2:79:af:3d:31:5a:2c:93:7e:de: 10:50:1d:94:1b:d5:0d:67:56:f5:66:6c:b3:32:d2:55:a6:90: 35:31:ac:bd:2a:94:c1:64:da:6c:4a:30:d3:d5:fd:96:47:58: ed:a0:c4:30:d3:5e:72:ce:a2:3a:0d:ee:cc:11:81:10:b3:c8: e2:5c:aa:0b:78:6c:8c:a6:0e:83:92:7e:d2:88:7f:ed:4f:d9: f9:b3:f1:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUxMjE5MDA1MjE0WhcNMjUxMjI2MDA1MjE0WjAYMRYwFAYD VQQDDA02OTQ0YTFiZS04ZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWDTr4HQZnjFmexUb+zvXTXXwspHxipcUgjDwUJwJLy2gzjeWHFwvoqLIOdX ePfhpNamYRVmEPk1UtY6YCRshYnQvDyF7N98MDzpxxfcjZLaijvwIaDZUkN0ebKr FFLbEMm2ExTu9M0H3M2dGjMB97NraLksUNhAIiQ66kwgYG8bx+RCi43kdevglVR6 o+fZ4k4mkngsWLDLo90VVRHObItcM26tw3b6J0kkum3pHrjZGB5KH42bxHVOiYl+ sHH7AWbEa//xS3beJropRG7PtLkiKVHRpj3zfir4q61k1V9qedwREQSRHaWp6vD3 jVHnXdxkNZ3DUsaSY/+HfT4P6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzZuCUK fe3TJcu7c4hcgrH0Y8+3MB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK+pXC7S5uGCNd8gZ0GupJOvb0CH5pBMZEr2dA8H1YiVG7gfVE0SLn 18Qy0gVKMRzfz9j2roDvQczxzuG0au0000mIERGh8JIY1GKtum1oK3OGZYixxh87 w/qKXNdO5Hb83ZI4UGAGRSEKnzC/UdaoXXlaC2S+rKGPm8Yb460M9IqHehoass+U YmNhC+iBhD2mGGuG2BRCz2bgW2pIlwWhpvq5MQ7D+ObVvPJ5rz0xWiyTft4QUB2U G9UNZ1b1ZmyzMtJVppA1May9KpTBZNpsSjDT1f2WR1jtoMQw015yzqI6De7MEYEQ s8jiXKoLeGyMpg6Dkn7SiH/tT9n5s/Hr -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:12 2025 by rpki-client