This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: PlwM7lLzmg7iktmfk0qALvMZjjuAp8XPLrBqsiuSpxc= Subject key identifier: 2B:63:4E:57:EC:D3:6D:AC:59:98:31:D8:4B:AF:81:0A:F5:8E:5C:76 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: CF Signing time: Fri 19 Dec 2025 04:49:05 +0000 Manifest this update: Fri 19 Dec 2025 04:49:04 +0000 Manifest next update: Fri 26 Dec 2025 04:49:04 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: 9NyeevBVIe3WfaScWdfoAG34ggyNQOsZWKHH4lugD38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Dec 19 04:49:04 2025 GMT Not After : Dec 26 04:49:04 2025 GMT Subject: CN=6944d941-c59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:e2:27:00:93:3f:a7:0d:63:43:35:ff:58: 50:1f:fd:4e:8c:47:65:47:63:28:22:ad:ca:21:01: cb:02:f8:89:a3:66:d1:21:64:ab:fd:a1:f8:d7:45: fc:d2:a5:88:62:cf:d2:ab:ca:c7:86:9a:20:35:82: 0e:2e:46:7e:e9:e3:f0:f9:42:f7:1e:46:98:8b:19: f0:f2:da:b5:01:fb:f6:23:fd:d6:c9:5c:0e:fa:1b: 50:6b:fb:12:55:10:9c:21:65:dc:01:7e:1b:24:d5: 70:fa:e0:13:fd:80:f9:24:1d:09:98:f5:e0:2e:0f: 90:aa:71:2f:bc:29:00:df:d1:94:9b:5a:45:8d:cb: cc:91:f8:74:e3:22:f5:cb:22:36:c5:e4:1e:2f:4f: fb:d6:ab:d9:fc:a6:ce:f4:5d:a5:a4:75:96:1f:f4: c9:b3:38:4f:bc:d4:53:42:73:f5:72:35:8a:1f:91: 44:cc:73:76:40:7e:4d:44:26:a7:04:7c:b8:fa:bf: 01:50:31:0c:98:f6:41:c7:fe:70:24:50:d8:c0:49: 28:7b:78:67:70:2d:14:4a:c0:9e:c2:47:79:6e:78: 1b:a6:ce:13:aa:5b:d2:55:08:45:cf:c7:24:ac:e0: 37:c8:98:c6:2b:46:a1:8c:79:41:4a:d4:f7:86:f9: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:4E:57:EC:D3:6D:AC:59:98:31:D8:4B:AF:81:0A:F5:8E:5C:76 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:c0:87:6f:ef:75:9f:8a:8b:dc:b1:69:7e:46:97:d2:e2:6c: 88:55:9c:45:fe:cb:e3:ad:9d:66:35:90:f9:05:ac:4d:77:45: 70:64:09:72:bd:a7:29:46:dd:5f:58:d0:14:f4:e1:25:07:6a: db:49:5f:94:dc:a9:a3:f9:ad:c9:c4:d2:bb:11:00:6b:a8:b2: 02:5c:7f:17:3d:37:0a:1f:0e:ca:4f:d8:95:d7:16:26:1a:87: ef:14:56:f3:28:ad:96:3d:03:99:5e:a3:cb:1c:9a:bb:31:04: 80:65:25:08:db:fe:d6:5e:b8:a8:a1:49:99:0a:ba:8d:f1:8c: 6c:13:c4:b4:0a:f0:ed:32:f6:48:a1:40:55:b9:d6:7f:b9:61: 07:0a:9c:df:7e:b8:50:4a:9d:b4:e4:a3:30:4a:18:17:e5:9c: 94:97:c9:67:e3:e6:ed:1c:35:1a:6c:63:e8:80:7f:3d:fc:db: f6:cd:6c:75:bb:23:30:07:4f:05:24:ec:7a:e0:f9:61:54:32: 90:aa:60:a9:f1:87:bd:89:29:28:37:d5:ec:23:40:d2:56:1a: 1d:d7:7e:3b:c5:88:8d:b6:a8:29:f5:6d:cc:40:11:8a:1e:45: 90:d1:ba:c5:5d:68:a0:da:38:fb:4e:ab:4c:94:51:3b:e3:82: 7a:ed:ab:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKDQ0Njg5QzY3MUZBRUYxOTY3Q0Y3QTlCMUEzMzY4RDhC OTE0QjdCQTcwHhcNMjUxMjE5MDQ0OTA0WhcNMjUxMjI2MDQ0OTA0WjAYMRYwFAYD VQQDDA02OTQ0ZDk0MS1jNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqB7iJwCTP6cNY0M1/1hQH/1OjEdlR2MoIq3KIQHLAviJo2bRIWSr/aH410X8 0qWIYs/Sq8rHhpogNYIOLkZ+6ePw+UL3HkaYixnw8tq1Afv2I/3WyVwO+htQa/sS VRCcIWXcAX4bJNVw+uAT/YD5JB0JmPXgLg+QqnEvvCkA39GUm1pFjcvMkfh04yL1 yyI2xeQeL0/71qvZ/KbO9F2lpHWWH/TJszhPvNRTQnP1cjWKH5FEzHN2QH5NRCan BHy4+r8BUDEMmPZBx/5wJFDYwEkoe3hncC0USsCewkd5bngbps4TqlvSVQhFz8ck rOA3yJjGK0ahjHlBStT3hvlypQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtjTlfs 022sWZgx2EuvgQr1jlx2MB8GA1UdIwQYMBaAFERonGcfrvGWfPepsaM2jYuRS3un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni8wN0FFN0E5NjlD RjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdThaWjg5Nm14b3phTmk1Rkxl NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni8wN0FFN0E5NjlDRjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdTha Wjg5Nm14b3phTmk1RkxlNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNwIdv73WfiovcsWl+RpfS4myIVZxF/svjrZ1mNZD5BaxNd0VwZAly vacpRt1fWNAU9OElB2rbSV+U3Kmj+a3JxNK7EQBrqLICXH8XPTcKHw7KT9iV1xYm GofvFFbzKK2WPQOZXqPLHJq7MQSAZSUI2/7WXriooUmZCrqN8YxsE8S0CvDtMvZI oUBVudZ/uWEHCpzffrhQSp205KMwShgX5ZyUl8ln4+btHDUabGPogH89/Nv2zWx1 uyMwB08FJOx64PlhVDKQqmCp8Ye9iSkoN9XsI0DSVhod1347xYiNtqgp9W3MQBGK HkWQ0brFXWig2jj7TqtMlFE744J67auN -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:01 2025 by rpki-client