This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: KSwYcE/v67GQ79HZ+htk04VtRyoWKHGKLxQfc7/NBB4= Subject key identifier: FC:A6:AB:16:27:96:03:7C:E5:B5:D0:35:5A:A7:13:5E:8C:C9:DC:F8 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 088D Signing time: Thu 04 Dec 2025 19:41:51 +0000 Manifest this update: Thu 04 Dec 2025 19:41:50 +0000 Manifest next update: Thu 11 Dec 2025 19:41:50 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: zWpv0kuIFRW8McwnaK0mEizYFx9/CDJk5aEsAstfeII=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: UaoBno6EmWaBFcw5TBVRPYFiWGMBoSDzhu3pQGtDygg=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: 4fGi9gJaC/oEbDcGBoBEInsd7LIWjlkoV1ytai5f/QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Dec 4 19:41:50 2025 GMT Not After : Dec 11 19:41:50 2025 GMT Subject: CN=6931e3ff-7b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:bb:73:ca:64:f4:3f:dd:fa:75:02:92:9e: e4:66:1d:b8:37:06:56:8e:19:62:21:db:63:9e:62: ee:ac:24:69:f5:f2:f3:11:61:16:cc:91:c5:64:20: 2b:90:ad:cd:0a:58:2e:a8:48:80:2d:a7:39:b4:0c: ce:be:62:c4:3a:c0:15:13:d0:00:08:2e:e2:4e:3e: ef:7a:67:d5:ca:4d:55:e4:0f:ee:40:09:a4:1a:ba: 1d:f1:0e:df:d4:8c:eb:cf:a1:37:21:87:75:2d:f6: 25:8b:02:c7:55:0d:86:12:6a:34:35:89:be:a0:ae: 4b:a0:01:ef:73:e0:40:b4:e4:02:85:2d:d8:a4:dd: fa:21:d5:1e:4f:45:15:38:1f:74:15:49:15:03:0d: e8:4e:7b:5a:b6:07:39:40:9d:8b:38:b3:68:da:ad: 3a:b7:ab:d9:c4:bf:39:5b:ca:45:4a:82:44:17:86: d8:20:ce:55:3c:d8:71:ff:c2:95:e1:c3:a3:74:78: d2:b5:2f:ad:06:2b:ab:14:dc:06:c2:d0:2c:aa:b3: b8:81:55:43:78:0a:e2:ef:f8:e9:5b:be:8f:59:2d: 14:97:a9:dd:27:6a:13:cd:e2:c4:98:36:a3:dc:7d: 92:e3:4d:86:3e:5f:da:f8:bd:7f:eb:79:8b:02:b7: 28:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:AB:16:27:96:03:7C:E5:B5:D0:35:5A:A7:13:5E:8C:C9:DC:F8 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:1f:05:64:44:a2:34:62:dd:55:52:f5:7d:79:e2:48:5a:4a: 05:1a:e0:f5:cb:4a:8e:3f:79:65:0b:3a:d6:6e:98:33:a7:6b: 95:c4:bf:77:1e:58:ad:b5:34:77:95:0f:5a:37:62:60:4e:36: 42:28:67:f9:dc:88:32:57:b5:42:1d:c1:ac:a9:7b:0f:00:42: 37:77:6b:e8:2c:33:2a:a4:4d:69:a8:2d:3b:19:c6:ef:1c:5f: 1b:a7:9d:dd:85:34:38:72:db:8a:44:3e:a7:2b:8a:e2:fd:a4: 1b:ec:47:fc:2f:ce:ad:97:3d:a7:e3:61:7a:16:0a:fc:3c:e1: 55:e0:24:8c:66:c8:4b:56:2c:6e:9d:95:05:c2:54:f5:1d:ac: 12:69:ef:03:f9:22:1d:82:3a:1b:86:63:cb:68:8c:9c:f9:89: 60:03:d2:7a:d0:92:76:ff:cd:af:73:d6:15:0d:df:3b:42:17: b6:74:96:57:df:12:0f:cb:64:29:1d:5f:26:2d:fa:d0:8b:96: 09:30:22:5c:04:44:84:73:2f:c0:b4:57:05:ed:2a:f7:b5:a6: bf:61:15:a5:fd:2d:98:cc:e9:c0:e9:60:17:34:07:19:39:39: 58:e4:23:35:a6:15:f9:59:27:49:3e:f6:23:d2:7b:9f:08:c9: 89:97:e4:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUxMjA0MTk0MTUwWhcNMjUxMjExMTk0MTUwWjAYMRYwFAYD VQQDEw02OTMxZTNmZi03YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIO7c8pk9D/d+nUCkp7kZh24NwZWjhliIdtjnmLurCRp9fLzEWEWzJHFZCAr kK3NClguqEiALac5tAzOvmLEOsAVE9AACC7iTj7vemfVyk1V5A/uQAmkGrod8Q7f 1Izrz6E3IYd1LfYliwLHVQ2GEmo0NYm+oK5LoAHvc+BAtOQChS3YpN36IdUeT0UV OB90FUkVAw3oTntatgc5QJ2LOLNo2q06t6vZxL85W8pFSoJEF4bYIM5VPNhx/8KV 4cOjdHjStS+tBiurFNwGwtAsqrO4gVVDeAri7/jpW76PWS0Ul6ndJ2oTzeLEmDaj 3H2S402GPl/a+L1/63mLArco2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPymqxYn lgN85bXQNVqnE16Mydz4MB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzHwVkRKI0Yt1VUvV9eeJIWkoFGuD1y0qOP3llCzrWbpgzp2uVxL93 HlittTR3lQ9aN2JgTjZCKGf53IgyV7VCHcGsqXsPAEI3d2voLDMqpE1pqC07Gcbv HF8bp53dhTQ4ctuKRD6nK4ri/aQb7Ef8L86tlz2n42F6Fgr8POFV4CSMZshLVixu nZUFwlT1HawSae8D+SIdgjobhmPLaIyc+YlgA9J60JJ2/82vc9YVDd87Qhe2dJZX 3xIPy2QpHV8mLfrQi5YJMCJcBESEcy/AtFcF7Sr3taa/YRWl/S2YzOnA6WAXNAcZ OTlY5CM1phX5WSdJPvYj0nufCMmJl+SF -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:46 2025 by rpki-client