This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: HlMa1XCEO3yfUo9iTIyHYL0bnBoCekta8iajXUrPi+I= Subject key identifier: 31:A0:46:49:2B:E8:7C:0D:3C:07:CB:6C:C0:C4:9D:5D:9B:5C:CE:9F Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 0454 Signing time: Thu 18 Dec 2025 23:37:35 +0000 Manifest this update: Thu 18 Dec 2025 23:37:35 +0000 Manifest next update: Thu 25 Dec 2025 23:37:35 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: iCFuwXvyuLbi7ei7+sZ3Nn6pGioBDCMo9l90jgWwiAY=) 2: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 3: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 4: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) 5: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 6: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 7: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 8: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 9: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Dec 18 23:37:35 2025 GMT Not After : Dec 25 23:37:35 2025 GMT Subject: CN=6944903f-e439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:31:19:eb:ac:07:f8:72:39:66:65:6b:30: e4:61:ed:e9:ad:55:f7:06:d4:15:c4:aa:70:db:81: e0:75:c6:a9:73:da:2d:a4:f9:97:b5:1b:1e:97:82: 80:67:63:96:b6:e1:7c:9d:53:46:f5:4e:be:99:e4: c0:02:64:a4:e7:8f:3e:44:d9:d7:9b:bb:68:9e:c3: 3e:cd:97:ea:99:aa:62:c5:10:f3:d4:83:a8:ab:37: 7a:3f:6d:74:e6:87:1c:a9:ae:31:2b:c2:8a:be:44: 10:16:e1:86:84:ac:a3:e1:02:ec:ea:48:a9:59:11: 79:43:6c:9a:3c:43:79:87:31:5c:f3:24:e2:6e:fd: d2:3d:73:31:79:75:0c:b8:44:14:d1:61:9f:66:00: 24:18:f9:27:e6:94:63:37:74:dd:30:cd:d9:ca:68: 44:78:73:02:dc:22:87:00:98:a6:26:13:3e:21:73: 92:6a:b0:84:15:12:8e:2a:c5:8e:1d:ba:ea:d0:a7: f0:38:d1:33:14:f2:c6:90:77:18:1a:83:91:30:a1: ba:13:d6:b2:9a:82:23:6b:1b:32:f9:40:a7:6b:95: d0:68:2f:f2:7b:09:52:c8:b9:c9:e3:01:aa:b8:93: 05:7a:53:e7:36:de:a8:b7:88:08:e2:3f:b2:05:f7: c7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A0:46:49:2B:E8:7C:0D:3C:07:CB:6C:C0:C4:9D:5D:9B:5C:CE:9F X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2e:17:34:0d:b3:6c:9d:ed:af:e9:4a:db:a4:d6:bb:e8:fd: 1a:99:67:78:31:cd:3a:51:c1:a7:ca:91:d2:f4:d0:da:73:c2: a9:ee:cd:d8:9a:4f:06:6c:a0:63:b0:26:dc:68:e2:ec:db:e4: 80:6b:04:92:1d:06:04:a5:dc:55:20:8b:f0:0e:13:f2:de:12: 5a:04:8f:f9:37:e5:8d:9d:8a:12:bf:3a:86:81:4c:63:50:45: 0c:40:64:ae:44:e5:2f:f1:61:42:e4:c0:c9:07:d0:6b:16:8a: 6a:6c:b8:58:9a:8f:3c:90:c0:93:e2:0d:a7:1c:c0:4c:af:8f: 9a:67:ba:95:eb:06:60:6e:7c:2b:df:48:bd:08:9c:65:53:99: 16:b5:0b:b8:09:6b:1b:1f:2b:4f:5c:15:f3:e5:59:88:b8:e7: 0b:2a:9f:94:9d:6f:b6:b0:e7:3b:a4:35:96:a1:28:69:82:92: 7e:dd:37:16:21:e6:61:14:f0:d7:eb:df:21:03:8c:a1:82:f2: 94:d0:07:49:9c:3f:d7:fa:6c:74:1d:1b:18:fc:b3:52:6d:31: ea:36:39:ad:94:f8:02:5a:a7:cb:6e:19:2a:c0:41:c8:9f:00: e9:aa:93:5b:cd:c6:e8:ad:fd:4b:e1:5a:8c:62:58:46:36:07: 87:5e:56:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUxMjE4MjMzNzM1WhcNMjUxMjI1MjMzNzM1WjAYMRYwFAYD VQQDDA02OTQ0OTAzZi1lNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ0xGeusB/hyOWZlazDkYe3prVX3BtQVxKpw24Hgdcapc9otpPmXtRsel4KA Z2OWtuF8nVNG9U6+meTAAmSk548+RNnXm7tonsM+zZfqmapixRDz1IOoqzd6P210 5occqa4xK8KKvkQQFuGGhKyj4QLs6kipWRF5Q2yaPEN5hzFc8yTibv3SPXMxeXUM uEQU0WGfZgAkGPkn5pRjN3TdMM3ZymhEeHMC3CKHAJimJhM+IXOSarCEFRKOKsWO Hbrq0KfwONEzFPLGkHcYGoORMKG6E9aymoIjaxsy+UCna5XQaC/yewlSyLnJ4wGq uJMFelPnNt6ot4gI4j+yBffHQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGgRkkr 6HwNPAfLbMDEnV2bXM6fMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Lhc0DbNsne2v6UrbpNa76P0amWd4Mc06UcGnypHS9NDac8Kp7s3Y mk8GbKBjsCbcaOLs2+SAawSSHQYEpdxVIIvwDhPy3hJaBI/5N+WNnYoSvzqGgUxj UEUMQGSuROUv8WFC5MDJB9BrFopqbLhYmo88kMCT4g2nHMBMr4+aZ7qV6wZgbnwr 30i9CJxlU5kWtQu4CWsbHytPXBXz5VmIuOcLKp+UnW+2sOc7pDWWoShpgpJ+3TcW IeZhFPDX698hA4yhgvKU0AdJnD/X+mx0HRsY/LNSbTHqNjmtlPgCWqfLbhkqwEHI nwDpqpNbzcborf1L4VqMYlhGNgeHXlba -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:39 2025 by rpki-client