This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: BPCh6nziFDmnmEXHMq/HCHsYAPY0c23q8B/6Whv2bLc= Subject key identifier: AF:FA:54:10:93:21:C5:57:17:26:04:50:39:8A:2D:89:6D:91:48:A3 Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 55FF Signing time: Fri 26 Dec 2025 14:49:15 +0000 Manifest this update: Fri 26 Dec 2025 14:49:15 +0000 Manifest next update: Fri 02 Jan 2026 14:49:15 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: dkFtpig0onMMq1+VbaEgiHEivELkCSY9UKL0pi/MUoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 14:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Validity Not Before: Dec 26 14:49:15 2025 GMT Not After : Jan 2 14:49:15 2026 GMT Subject: CN=694ea06b-ef91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:22:94:88:d4:4e:6c:7c:40:a3:62:73:ac: b2:50:3e:67:0d:55:a6:46:23:2a:37:de:dd:10:b9: 15:70:c2:a9:75:2f:8c:b8:0c:89:10:25:36:54:c0: d5:9d:a8:92:57:88:09:ad:4a:27:28:d4:01:4f:12: f9:a1:65:08:59:7b:c3:8c:8a:aa:58:fd:d8:86:61: 66:72:bd:9d:c1:d8:47:96:e6:d8:f1:f0:06:e7:59: 9f:14:8f:ab:68:55:c2:0a:d9:6a:d1:7c:9c:79:f1: 3c:cd:23:79:13:61:32:60:57:1d:d4:e3:9b:2d:54: ce:37:cd:3e:9c:88:b5:76:7a:ac:da:2f:78:bf:aa: 79:ef:39:3e:10:5a:17:be:0b:ca:a4:d1:79:da:2d: 04:0f:1a:88:83:bf:54:6c:68:56:9b:d7:09:34:2f: f5:29:88:93:82:ec:47:9b:f0:ac:fa:2b:0d:5b:48: 47:5e:9a:76:aa:f4:49:d8:31:5c:40:a9:62:e9:97: ce:0e:6f:ec:d9:7a:bb:d4:6c:d3:0c:61:35:38:c3: 51:83:cb:7d:2d:61:01:2f:a2:26:9a:7c:60:db:56: 25:72:22:d9:f3:f1:b5:02:e6:75:d9:f4:d2:18:53: 54:9b:23:99:17:3a:c8:6c:9a:51:44:25:4c:d7:2a: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FA:54:10:93:21:C5:57:17:26:04:50:39:8A:2D:89:6D:91:48:A3 X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:71:d6:a4:ff:f2:fd:84:84:0d:5c:da:77:41:39:03:58:dd: f2:43:3e:c5:bd:90:02:ff:9e:4d:09:e2:bd:54:6c:ad:9e:ff: 06:86:ba:c8:ad:90:a4:6f:2e:25:cc:c2:c7:1f:78:cc:6c:cf: ec:c8:05:f8:f7:2a:7f:ed:2f:ae:fd:bc:17:36:23:a0:c9:57: 33:ac:45:22:b3:73:fa:18:bb:7d:ec:f5:30:c0:f8:ac:25:d6: b5:e5:cf:fd:de:c8:ae:90:35:2d:9c:ef:e6:48:18:4e:7f:3d: 0a:f2:79:12:e6:fc:16:23:88:c0:35:ea:3b:bb:4f:0d:63:99: c3:bd:82:f5:31:73:65:a2:6d:98:75:79:cd:5d:d4:00:51:10: 46:a8:41:ca:6a:a1:24:fe:f3:11:1e:3d:96:c8:6a:a2:d9:18: 0f:f7:2c:63:54:4a:ae:51:33:38:42:94:84:78:8e:d6:ff:13: d1:36:7a:25:2f:bb:81:5c:b5:29:d2:16:9a:6c:a2:60:47:dc: c9:3e:0c:f1:de:73:c5:f8:21:5e:66:31:2b:8f:30:69:a1:99: 57:1c:d2:e9:d8:ae:f2:c1:ff:c6:5b:2a:c8:93:7c:5e:15:ed: d4:2a:b4:72:07:c4:c0:64:7f:eb:b6:67:a3:92:fa:65:c8:23: c1:83:85:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjUxMjI2MTQ0OTE1WhcNMjYwMTAyMTQ0OTE1WjAYMRYwFAYD VQQDDA02OTRlYTA2Yi1lZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuEilIjUTmx8QKNic6yyUD5nDVWmRiMqN97dELkVcMKpdS+MuAyJECU2VMDV naiSV4gJrUonKNQBTxL5oWUIWXvDjIqqWP3YhmFmcr2dwdhHlubY8fAG51mfFI+r aFXCCtlq0XycefE8zSN5E2EyYFcd1OObLVTON80+nIi1dnqs2i94v6p57zk+EFoX vgvKpNF52i0EDxqIg79UbGhWm9cJNC/1KYiTguxHm/Cs+isNW0hHXpp2qvRJ2DFc QKli6ZfODm/s2Xq71GzTDGE1OMNRg8t9LWEBL6Immnxg21YlciLZ8/G1AuZ12fTS GFNUmyOZFzrIbJpRRCVM1ypZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/6VBCT IcVXFyYEUDmKLYltkUijMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPcdak//L9hIQNXNp3QTkDWN3yQz7FvZAC/55NCeK9VGytnv8GhrrI rZCkby4lzMLHH3jMbM/syAX49yp/7S+u/bwXNiOgyVczrEUis3P6GLt97PUwwPis Jda15c/93siukDUtnO/mSBhOfz0K8nkS5vwWI4jANeo7u08NY5nDvYL1MXNlom2Y dXnNXdQAURBGqEHKaqEk/vMRHj2WyGqi2RgP9yxjVEquUTM4QpSEeI7W/xPRNnol L7uBXLUp0haabKJgR9zJPgzx3nPF+CFeZjErjzBpoZlXHNLp2K7ywf/GWyrIk3xe Fe3UKrRyB8TAZH/rtmejkvplyCPBg4VZ -----END CERTIFICATE-----Generated at Sat Dec 27 06:37:23 2025 by rpki-client