This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: PCSO3uFttba7l1tN3nn0YrerS6ewgUFxg2L3QPIASco= Subject key identifier: 08:AF:42:18:6F:36:6A:FA:12:3E:0A:DB:6C:18:74:60:FF:00:92:5F Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0CD3 Signing time: Mon 22 Dec 2025 17:49:13 +0000 Manifest this update: Mon 22 Dec 2025 17:49:12 +0000 Manifest next update: Mon 29 Dec 2025 17:49:12 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: 3xrUrg7dcT+3XCWa2RqBc8+p0PswBj/xPUTZ2sRD3qM=) 2: A0632940737D11F091340126C4F9AE02.roa (hash: A9CfvWHo8wQog2ij+U4wMZKQtVK7NG2gnZm4ccTlh58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Dec 22 17:49:12 2025 GMT Not After : Dec 29 17:49:12 2025 GMT Subject: CN=69498498-1539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:d7:af:c2:9e:bf:39:d2:cc:a4:fa:a1:66: 38:c8:03:e0:0b:93:86:32:94:86:72:ad:87:8c:72: ae:29:c3:ae:67:c3:f0:8d:77:67:3d:b4:c3:41:46: b2:d9:51:7f:60:33:1e:36:31:d1:d6:ec:b1:3e:a8: 57:a2:28:9e:cc:6a:e0:25:c5:23:d1:67:5e:68:86: 1b:1b:58:87:db:66:99:3a:ec:23:0a:ec:b4:c7:3c: b4:c9:47:5a:17:19:d3:29:cf:42:67:98:62:dc:fd: 4b:b5:e8:b7:6c:62:69:d3:96:19:78:d4:27:47:de: 7f:2c:95:c7:83:f5:0b:65:77:ce:3a:a4:eb:42:64: b2:be:ec:31:45:f3:5c:84:42:a1:d5:7f:36:fd:15: c0:3b:6f:2d:ca:55:2a:44:65:e4:4f:35:89:57:92: ec:8f:b7:43:b6:d0:ce:6d:8b:8b:6e:57:23:49:6c: f3:47:b4:7c:c1:42:2c:b3:3d:07:27:08:7b:38:81: 51:35:5c:40:e4:e7:88:d0:bd:ed:0d:ac:27:d6:17: af:cd:1e:87:00:e7:68:52:37:b6:44:39:48:5f:ae: 59:c5:5f:8c:bb:4d:0a:5e:e3:d3:87:e2:1f:1f:85: 15:62:0e:79:fc:67:cd:05:c5:06:ef:7a:40:55:7e: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:42:18:6F:36:6A:FA:12:3E:0A:DB:6C:18:74:60:FF:00:92:5F X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c2:99:e8:a4:9e:40:c2:29:d9:a6:41:29:40:18:47:3c:c0: ae:2d:58:12:55:79:4a:55:b5:dd:f6:5c:17:e0:12:e0:e2:7c: 3d:f7:f9:be:81:d2:a7:5a:66:98:01:1f:0e:4a:71:3f:93:05: 1a:82:34:d3:3c:ff:93:00:84:21:0f:e1:25:e3:30:d4:7d:41: 86:d1:d5:a4:41:1a:0c:ee:31:2f:7a:7a:6c:07:15:2d:b1:b0: 8d:cd:a9:54:16:4e:be:d0:00:c0:44:b7:a5:39:00:0e:86:7d: 51:d2:c8:63:07:21:c3:b8:ff:1f:1f:b5:51:2e:46:ca:ae:18: 28:d3:d9:b3:bf:ac:8b:fb:ff:61:cb:7d:d1:c5:2e:de:54:46: 2f:a8:68:dc:b9:f7:9d:39:66:cc:75:c6:4a:88:75:d7:11:01: 64:ac:f5:57:8e:9e:c2:ac:bd:a2:34:79:7a:c1:98:87:ae:68: 4f:3d:1b:06:79:35:1c:fe:d8:6f:3b:4e:84:da:09:ad:fc:8e: 0a:c5:70:5b:99:8e:9c:31:ab:1c:56:87:06:27:04:e3:69:db: 80:53:bf:1e:9c:01:05:a9:47:78:04:f9:7a:96:44:b4:f9:5d: 06:84:71:a2:f9:81:b7:75:e0:a9:79:b2:6b:29:48:7e:01:9f: e1:b4:ef:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjUxMjIyMTc0OTEyWhcNMjUxMjI5MTc0OTEyWjAYMRYwFAYD VQQDDA02OTQ5ODQ5OC0xNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumvXr8KevznSzKT6oWY4yAPgC5OGMpSGcq2HjHKuKcOuZ8PwjXdnPbTDQUay 2VF/YDMeNjHR1uyxPqhXoiiezGrgJcUj0WdeaIYbG1iH22aZOuwjCuy0xzy0yUda FxnTKc9CZ5hi3P1Ltei3bGJp05YZeNQnR95/LJXHg/ULZXfOOqTrQmSyvuwxRfNc hEKh1X82/RXAO28tylUqRGXkTzWJV5Lsj7dDttDObYuLblcjSWzzR7R8wUIssz0H Jwh7OIFRNVxA5OeI0L3tDawn1hevzR6HAOdoUje2RDlIX65ZxV+Mu00KXuPTh+If H4UVYg55/GfNBcUG73pAVX7RrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAivQhhv Nmr6Ej4K22wYdGD/AJJfMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcwpnopJ5AwinZpkEpQBhHPMCuLVgSVXlKVbXd9lwX4BLg4nw99/m+ gdKnWmaYAR8OSnE/kwUagjTTPP+TAIQhD+El4zDUfUGG0dWkQRoM7jEvenpsBxUt sbCNzalUFk6+0ADARLelOQAOhn1R0shjByHDuP8fH7VRLkbKrhgo09mzv6yL+/9h y33RxS7eVEYvqGjcufedOWbMdcZKiHXXEQFkrPVXjp7CrL2iNHl6wZiHrmhPPRsG eTUc/thvO06E2gmt/I4KxXBbmY6cMascVocGJwTjaduAU78enAEFqUd4BPl6lkS0 +V0GhHGi+YG3deCpebJrKUh+AZ/htO9C -----END CERTIFICATE-----Generated at Tue Dec 23 22:27:57 2025 by rpki-client