This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: 9OrAqgD3q0NNFl2ZBgTEIZSFQHrhRtQRtYU1UFP+bxU= Subject key identifier: 40:70:1C:71:43:51:DB:49:3C:63:FD:4B:AC:F9:3E:66:45:FB:D9:BB Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 108C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 1083 Signing time: Sat 20 Dec 2025 17:05:29 +0000 Manifest this update: Sat 20 Dec 2025 17:05:28 +0000 Manifest next update: Sat 27 Dec 2025 17:05:28 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: iOM4T8VbPpGynTy19XHURMQwwT4Y0p7fR4bzBuylpNQ=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: bskjGki25S2tjkA4uEDOBCllOjX3cMsximD4ACjwrOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4236 (0x108c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Dec 20 17:05:28 2025 GMT Not After : Dec 27 17:05:28 2025 GMT Subject: CN=6946d759-e95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:f0:e8:39:92:90:63:12:6a:6b:43:67:b2: 1f:d3:61:e8:9c:8b:ef:c7:e0:99:a1:e3:04:2b:a3: e8:21:b7:73:4c:d0:e0:f3:18:c0:00:64:78:c6:87: f4:04:b1:ca:20:58:7d:81:8e:9b:d5:a7:7b:b7:1c: 35:f5:6d:8c:3d:04:96:2f:81:c1:25:0d:e4:3d:9b: 14:e6:14:6f:ab:05:17:fc:7c:1e:8a:95:00:1f:b4: 6f:95:28:9b:d5:d6:4a:3a:9b:68:e8:ac:2f:35:d3: 3e:6f:57:16:05:39:fb:76:ad:65:ba:23:52:bc:0f: b8:0b:28:57:55:93:dd:47:2f:44:3c:6b:01:11:a3: 66:76:f1:e4:e0:70:b9:dc:bc:7a:09:34:25:4a:1b: 7e:9b:ed:0c:dc:23:3d:06:49:63:2c:ff:21:7b:07: 1a:0b:5e:d1:d3:9d:54:62:4f:a7:7c:eb:01:af:27: 56:cf:34:e0:44:e3:6a:f1:43:12:3a:b5:e8:9c:b9: 12:38:53:9e:c8:a2:0c:42:01:95:63:8f:22:b8:d9: e4:f9:91:14:f6:4f:4b:30:c9:81:05:63:de:24:c8: 89:f7:a7:8e:fe:79:f8:5d:d7:64:e2:73:86:4e:e8: b8:5f:5a:0e:78:fd:52:bf:91:d4:73:c3:c9:44:85: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:1C:71:43:51:DB:49:3C:63:FD:4B:AC:F9:3E:66:45:FB:D9:BB X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ff:41:0e:3e:e5:17:f2:f2:b8:1e:15:50:6f:e8:5f:f7:fc: ef:b5:7c:4a:f6:e3:7c:73:f1:c7:d1:0d:3e:73:53:19:84:65: f7:3e:df:e0:b2:d9:cd:13:e8:37:34:e6:3c:ba:95:0c:6d:74: 59:65:b0:66:ce:72:27:2c:d7:fb:e0:2a:5b:dd:99:9b:9e:43: ac:21:15:f2:e3:2f:69:bb:bb:e0:89:d8:93:d9:ba:68:71:1a: d1:48:66:a4:a7:0c:23:a3:42:f7:c6:80:fd:ee:6d:b7:14:40: fb:24:de:22:2f:54:f5:4a:94:ec:a9:a2:c9:51:f0:69:b9:4e: ec:30:84:02:37:be:59:16:18:6b:fc:f9:8a:7e:02:9d:d9:d2: 28:ee:76:e6:71:e2:f0:18:af:c8:6b:8a:01:aa:97:6e:61:8b: 28:1f:a0:4b:73:79:d4:f6:2f:d9:e7:ea:5e:3b:18:8a:31:c1: ce:69:d2:5f:68:e9:e5:9e:57:22:dc:c6:b5:23:3a:0c:4f:aa: 22:86:64:3f:b3:3b:77:48:74:48:33:79:be:ba:69:70:75:6e: e6:b1:11:f0:88:40:9e:26:0c:5b:96:f6:e6:cd:28:08:ea:0c: 27:c6:7b:c0:85:dc:b7:fc:95:be:44:4e:48:55:ad:9a:ae:1f: 81:6b:f9:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUxMjIwMTcwNTI4WhcNMjUxMjI3MTcwNTI4WjAYMRYwFAYD VQQDDA02OTQ2ZDc1OS1lOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrnw6DmSkGMSamtDZ7If02HonIvvx+CZoeMEK6PoIbdzTNDg8xjAAGR4xof0 BLHKIFh9gY6b1ad7txw19W2MPQSWL4HBJQ3kPZsU5hRvqwUX/HweipUAH7RvlSib 1dZKOpto6KwvNdM+b1cWBTn7dq1luiNSvA+4CyhXVZPdRy9EPGsBEaNmdvHk4HC5 3Lx6CTQlSht+m+0M3CM9BkljLP8hewcaC17R051UYk+nfOsBrydWzzTgRONq8UMS OrXonLkSOFOeyKIMQgGVY48iuNnk+ZEU9k9LMMmBBWPeJMiJ96eO/nn4Xddk4nOG Tui4X1oOeP1Sv5HUc8PJRIXfLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBwHHFD UdtJPGP9S6z5PmZF+9m7MB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/0EOPuUX8vK4HhVQb+hf9/zvtXxK9uN8c/HH0Q0+c1MZhGX3Pt/g stnNE+g3NOY8upUMbXRZZbBmznInLNf74Cpb3ZmbnkOsIRXy4y9pu7vgidiT2bpo cRrRSGakpwwjo0L3xoD97m23FED7JN4iL1T1SpTsqaLJUfBpuU7sMIQCN75ZFhhr /PmKfgKd2dIo7nbmceLwGK/Ia4oBqpduYYsoH6BLc3nU9i/Z5+peOxiKMcHOadJf aOnlnlci3Ma1IzoMT6oihmQ/szt3SHRIM3m+umlwdW7msRHwiECeJgxblvbmzSgI 6gwnxnvAhdy3/JW+RE5IVa2arh+Ba/lo -----END CERTIFICATE-----Generated at Sun Dec 21 05:21:21 2025 by rpki-client