This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: sobwXPedwbrQVnQX22wYec48AzazkJPHWe9TD/W4VXo= Subject key identifier: 87:B8:91:5A:75:44:53:3C:94:98:F9:1B:18:6C:68:87:33:93:77:30 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 01D1 Signing time: Sun 21 Dec 2025 02:12:40 +0000 Manifest this update: Sun 21 Dec 2025 02:12:40 +0000 Manifest next update: Sun 28 Dec 2025 02:12:40 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: OTHBA86hflEUXo2zhrmq6ot+9ZlUmZVebjWeb7Fb07c=) 2: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: RetyQblwcd4ST+I6H1q28mp6Zq67zv2ACfTggQIeETs=) 3: 4ADADBB8C48011F08D2DA33DC4F9AE02.roa (hash: 8670TEfg83gHunVz4oJN8k2ojcMsTWOzQ8uTKh3Qr3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: Dec 21 02:12:40 2025 GMT Not After : Dec 28 02:12:40 2025 GMT Subject: CN=69475798-8ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:77:c7:2b:df:66:0a:41:6a:27:67:53:74: 90:2f:e7:fe:39:ad:1b:c6:a9:c2:81:03:c7:b1:84: 15:47:b8:80:f7:0d:2f:f4:1c:8e:ed:16:35:70:76: 88:19:a4:11:66:0e:7d:de:c0:f3:dc:9d:e6:ca:0f: 31:ea:a1:4c:67:85:3a:db:97:03:59:56:fa:a2:2c: 27:96:e7:2f:8b:ae:b9:f4:ef:a6:24:73:93:e1:79: 3e:8a:de:a3:d8:04:33:35:55:d5:99:df:dc:49:a0: 48:13:5d:fb:6d:88:fd:2d:87:90:e0:ec:6f:74:1e: 46:55:c4:18:be:0c:c2:17:d3:65:f1:30:6e:c2:61: 6e:77:72:30:59:7f:3d:a9:30:13:be:f9:06:72:15: c4:be:f9:e8:90:52:31:27:bc:9c:f6:13:e4:64:cb: 42:97:59:7d:2a:0c:8f:17:bf:ed:f5:77:22:57:1b: d4:ba:c0:bc:8a:e6:d9:1b:05:7a:39:75:f0:61:79: 17:df:2a:03:c0:d8:2f:27:84:0e:16:95:e7:12:6e: ee:82:55:bf:a0:07:d5:c2:5c:f6:21:e7:8f:cb:24: 3f:50:c6:4a:f9:bd:c5:29:7e:88:1e:3c:ae:90:09: 04:b0:99:a2:ff:03:60:3d:51:17:39:66:5f:6c:03: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B8:91:5A:75:44:53:3C:94:98:F9:1B:18:6C:68:87:33:93:77:30 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:72:db:64:39:26:05:e2:4e:30:f9:a8:0a:49:42:4f:c9:b9: 8e:7c:00:3e:e4:13:0a:43:60:80:b6:7f:10:53:82:a5:da:49: 97:f3:23:9e:8e:5a:65:f4:44:f3:15:31:2c:de:bf:da:c6:3d: 3e:84:6f:90:b3:8b:88:51:5e:6c:fc:3f:6a:6f:0a:c2:07:89: c8:83:0f:b2:a5:ba:1a:a2:fe:7e:35:ae:1f:a9:0e:88:d4:79: d0:96:89:c2:47:22:ac:83:25:b9:27:0e:09:83:f2:1a:92:0d: b6:a2:60:eb:7d:c2:98:f5:f9:8c:7d:61:e9:82:18:e1:69:18: 42:bb:0d:10:b5:89:46:f0:ce:37:8c:f1:9b:ee:5e:63:d4:3f: 79:77:d9:eb:04:e2:75:45:a5:9d:d7:00:68:76:48:a9:97:c9: ba:32:ea:11:15:95:1f:db:2f:54:19:f3:a0:1a:6c:e9:8e:82: ed:bb:41:b1:a3:31:b9:6e:63:08:0b:e6:23:0b:a2:42:46:ea: 74:1c:95:af:68:36:d2:a0:cf:a3:47:28:b3:8c:06:c1:aa:59: 4e:c3:3a:13:a6:8c:eb:90:ab:cd:a3:91:43:6b:25:05:5d:f9: fc:48:fd:24:a0:35:3a:0f:2f:a0:76:64:d6:6f:d2:6c:5b:3f: 6c:64:8d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjUxMjIxMDIxMjQwWhcNMjUxMjI4MDIxMjQwWjAYMRYwFAYD VQQDDA02OTQ3NTc5OC04YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRZ3xyvfZgpBaidnU3SQL+f+Oa0bxqnCgQPHsYQVR7iA9w0v9ByO7RY1cHaI GaQRZg593sDz3J3myg8x6qFMZ4U625cDWVb6oiwnlucvi6659O+mJHOT4Xk+it6j 2AQzNVXVmd/cSaBIE137bYj9LYeQ4OxvdB5GVcQYvgzCF9Nl8TBuwmFud3IwWX89 qTATvvkGchXEvvnokFIxJ7yc9hPkZMtCl1l9KgyPF7/t9XciVxvUusC8iubZGwV6 OXXwYXkX3yoDwNgvJ4QOFpXnEm7uglW/oAfVwlz2IeePyyQ/UMZK+b3FKX6IHjyu kAkEsJmi/wNgPVEXOWZfbAPpFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe4kVp1 RFM8lJj5GxhsaIczk3cwMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpcttkOSYF4k4w+agKSUJPybmOfAA+5BMKQ2CAtn8QU4Kl2kmX8yOe jlpl9ETzFTEs3r/axj0+hG+Qs4uIUV5s/D9qbwrCB4nIgw+ypboaov5+Na4fqQ6I 1HnQlonCRyKsgyW5Jw4Jg/Iakg22omDrfcKY9fmMfWHpghjhaRhCuw0QtYlG8M43 jPGb7l5j1D95d9nrBOJ1RaWd1wBodkipl8m6MuoRFZUf2y9UGfOgGmzpjoLtu0Gx ozG5bmMIC+YjC6JCRup0HJWvaDbSoM+jRyizjAbBqllOwzoTpozrkKvNo5FDayUF Xfn8SP0koDU6Dy+gdmTWb9JsWz9sZI0c -----END CERTIFICATE-----Generated at Mon Dec 22 14:20:13 2025 by rpki-client