This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json) Hash identifier: qHtPg1IJ+BIjMFPvfbUkebyT/5vTgJie8GiBLg8n3s8= Subject key identifier: 8B:A5:CC:89:55:4C:EB:0A:6C:DE:B5:9B:40:2E:7F:54:58:74:E2:18 Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 0808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft Manifest number: 0802 Signing time: Thu 18 Dec 2025 20:30:52 +0000 Manifest this update: Thu 18 Dec 2025 20:30:52 +0000 Manifest next update: Thu 25 Dec 2025 20:30:52 +0000 Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: hKV1OjQhe5Phjlkx769i6kBqtXofRC74epqBQ9J246Q=) 2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: ClScTJuNUI3ehn5b9ACaV/F/3LpPsKfynlYEv83kYE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: Dec 18 20:30:52 2025 GMT Not After : Dec 25 20:30:52 2025 GMT Subject: CN=6944647c-8895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:7a:de:7a:dd:22:17:02:20:b6:69:8b:98: 47:26:14:c5:d0:54:78:26:3a:20:57:0e:e5:4a:4c: de:68:e2:57:93:05:45:84:d3:4c:97:72:f4:2c:ec: bd:64:9e:56:1b:a4:fe:55:0a:11:5e:53:73:fe:0e: 78:52:28:8c:76:56:33:a0:40:0f:24:7f:52:7c:ef: 73:83:ce:75:30:e3:cb:6e:ca:ef:9f:75:9b:90:c0: 9b:35:3b:86:55:e6:84:8f:15:f0:89:90:f1:df:55: d3:89:bb:ed:e7:e2:74:0a:41:79:5d:7c:64:ff:33: 8b:94:c7:fb:0d:80:2f:09:e6:a0:54:af:55:99:47: 3c:98:aa:01:a0:2b:43:72:1f:12:e6:c3:bf:9f:57: 9a:34:f9:09:23:73:e4:ba:ea:67:a8:9e:95:0e:d6: d0:2e:a2:e4:84:5f:8a:8c:19:44:2d:f7:af:65:3e: 14:58:4e:8c:c1:69:77:b4:8b:89:73:1e:16:82:20: d1:09:31:c6:6b:8e:15:ed:c8:9f:eb:67:3f:6a:9f: 7d:d5:93:2c:dd:b2:e0:6e:70:42:f1:bb:fa:9b:4c: 50:31:9e:25:7a:de:93:74:a1:32:6c:db:19:58:68: bd:41:6b:45:81:ce:2c:b6:de:88:6e:e1:c4:42:1e: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A5:CC:89:55:4C:EB:0A:6C:DE:B5:9B:40:2E:7F:54:58:74:E2:18 X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ef:87:bc:06:4a:dd:42:04:70:6f:38:f9:71:6c:94:76:61: 76:0b:a2:36:d3:58:63:e8:15:cd:de:a8:6e:2a:7b:8b:d8:4a: ab:48:0d:20:c8:b2:fe:14:29:c5:86:3c:83:09:8b:39:5f:51: 17:fa:cd:11:7e:6f:c2:da:23:38:34:f1:6d:32:74:01:d0:1e: 44:c3:f3:87:c0:0b:a1:59:5f:7f:0b:5b:7e:93:cc:03:ef:35: ca:ca:fa:f4:35:0c:94:27:dd:81:48:28:92:9a:a7:17:67:24: f6:aa:66:a6:cc:de:93:b4:bd:5f:35:00:25:15:10:fe:5f:bc: a9:42:a7:ad:0c:41:23:03:31:1a:2c:0e:c0:08:e5:2c:de:bd: 83:2e:f4:fc:4c:46:f7:58:f8:1b:fe:ca:cd:73:a2:6a:fd:9b: bb:23:cf:68:7a:14:dd:c8:15:70:f1:21:75:b0:78:1a:80:38: 98:82:96:b1:1d:13:57:e6:3a:a7:a2:d8:cb:f8:e5:40:94:65: 90:62:98:37:ab:99:e8:a3:47:cd:55:da:e4:fd:75:04:dc:ad: 23:7d:f8:19:cb:aa:11:da:8a:ed:57:d9:25:63:32:07:5f:e1: bd:84:38:91:bc:71:d2:ad:40:21:be:23:ac:c8:d8:31:a1:cf: c3:86:ae:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjUxMjE4MjAzMDUyWhcNMjUxMjI1MjAzMDUyWjAYMRYwFAYD VQQDDA02OTQ0NjQ3Yy04ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEN63nrdIhcCILZpi5hHJhTF0FR4JjogVw7lSkzeaOJXkwVFhNNMl3L0LOy9 ZJ5WG6T+VQoRXlNz/g54UiiMdlYzoEAPJH9SfO9zg851MOPLbsrvn3WbkMCbNTuG VeaEjxXwiZDx31XTibvt5+J0CkF5XXxk/zOLlMf7DYAvCeagVK9VmUc8mKoBoCtD ch8S5sO/n1eaNPkJI3PkuupnqJ6VDtbQLqLkhF+KjBlELfevZT4UWE6MwWl3tIuJ cx4WgiDRCTHGa44V7cif62c/ap991ZMs3bLgbnBC8bv6m0xQMZ4let6TdKEybNsZ WGi9QWtFgc4stt6IbuHEQh4AkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIulzIlV TOsKbN61m0Auf1RYdOIYMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUY5Ni8wRjg2RTYwRTA2Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3 WW5oRDIxbjZRYS1uODdmRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD74e8BkrdQgRwbzj5cWyUdmF2C6I201hj6BXN3qhuKnuL2EqrSA0g yLL+FCnFhjyDCYs5X1EX+s0Rfm/C2iM4NPFtMnQB0B5Ew/OHwAuhWV9/C1t+k8wD 7zXKyvr0NQyUJ92BSCiSmqcXZyT2qmamzN6TtL1fNQAlFRD+X7ypQqetDEEjAzEa LA7ACOUs3r2DLvT8TEb3WPgb/srNc6Jq/Zu7I89oehTdyBVw8SF1sHgagDiYgpax HRNX5jqnotjL+OVAlGWQYpg3q5noo0fNVdrk/XUE3K0jffgZy6oR2ortV9klYzIH X+G9hDiRvHHSrUAhviOsyNgxoc/Dhq5+ -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:01 2025 by rpki-client