This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: l5RwbgCgLB/qQake6DxWNT3e+1e7p+faTYwhXcAWJ/U= Subject key identifier: CB:D1:FF:DF:EC:B3:DF:03:D8:67:77:64:18:FB:F7:1F:49:67:6D:30 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0373 Signing time: Thu 04 Dec 2025 23:18:26 +0000 Manifest this update: Thu 04 Dec 2025 23:18:25 +0000 Manifest next update: Thu 11 Dec 2025 23:18:25 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: hpcIBGFHCUgBltmSp2SKLwBIeoY1QdP1q0C0RNTnl9w=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Dec 4 23:18:25 2025 GMT Not After : Dec 11 23:18:25 2025 GMT Subject: CN=693216c1-64cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:7e:d0:61:01:8e:fd:1c:c2:73:f7:59:37: 6d:62:77:f9:85:8b:7d:0b:1b:f2:b2:3f:47:2c:a2: 11:b8:51:7a:ff:ca:d1:fd:11:8e:43:8e:50:13:21: fc:2b:28:92:10:a2:a1:23:53:9c:56:31:7a:f1:02: 2b:d6:83:9c:77:83:c6:39:be:e2:52:bf:dc:5e:c8: f2:60:a5:23:88:e6:26:65:c8:9e:5d:59:be:30:4e: 88:47:66:fb:02:2d:95:80:f8:a3:1f:9d:2a:71:46: 71:25:09:56:4b:fa:7d:30:41:25:6a:6c:85:b8:37: 56:16:96:1f:d5:84:be:df:a6:38:b6:71:14:46:be: 4d:52:ae:1b:6a:0b:e9:b6:82:eb:1e:59:da:27:06: 69:81:ca:bd:f0:fc:86:3a:c8:b2:63:fb:f8:1d:4f: 66:1c:e2:5d:65:21:d8:81:2e:45:e4:ef:30:85:18: 91:ac:cd:2d:0a:dc:46:31:50:6c:3a:38:3d:d6:0c: 5b:fa:08:24:e4:d6:4c:8b:bf:87:f0:28:eb:99:78: c5:1b:5c:a9:1b:bd:a1:f1:52:ec:d0:f6:10:d0:b5: 04:7e:af:94:96:ff:c1:cb:4e:26:06:eb:52:a0:9a: 28:22:dc:00:ef:d5:b5:2b:78:b6:40:e4:dc:50:ac: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D1:FF:DF:EC:B3:DF:03:D8:67:77:64:18:FB:F7:1F:49:67:6D:30 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:df:1a:a0:ce:1e:f5:0f:6a:d1:32:d7:87:7c:84:e6:77:d7: e5:92:9a:43:6d:9c:24:40:fc:6c:6b:71:d0:1c:f3:b5:c4:27: 6d:a3:55:05:83:11:34:8d:85:4e:59:fe:33:6f:98:11:c7:ca: 72:ae:37:d3:b9:2a:cd:c0:53:4f:a0:0d:99:01:04:44:d7:05: 26:df:0a:33:f6:38:08:54:aa:ee:54:17:d6:6d:dd:cf:0a:01: 6b:03:57:6a:30:ca:63:9d:5c:e7:2e:3a:43:1c:27:7e:20:f4: fa:b9:41:54:92:93:f9:b8:6b:d3:97:db:50:63:d5:e1:93:d2: 9a:4f:66:2f:6e:b7:f4:ff:ad:8a:a1:7a:39:c9:a7:a6:58:29: 2a:54:e5:25:f9:45:ed:4b:d1:2a:d2:be:8f:b1:6f:88:2a:cc: 08:48:30:15:6e:f5:0c:45:67:81:1f:a2:c0:e4:db:7d:5c:d4: 87:0f:61:59:16:e4:64:02:4b:63:c1:3e:b0:28:79:1c:e1:78: a0:cd:ce:d7:4b:b7:9a:1b:f8:78:f9:04:8e:89:18:a7:c1:56: af:9f:14:c5:9d:c9:56:7e:94:6d:b7:a7:7f:c0:25:39:8d:66: f3:a3:c1:80:1f:32:6d:ae:6a:97:08:5c:2f:bc:11:c8:24:31: 4a:8e:e9:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUxMjA0MjMxODI1WhcNMjUxMjExMjMxODI1WjAYMRYwFAYD VQQDEw02OTMyMTZjMS02NGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAp+0GEBjv0cwnP3WTdtYnf5hYt9Cxvysj9HLKIRuFF6/8rR/RGOQ45QEyH8 KyiSEKKhI1OcVjF68QIr1oOcd4PGOb7iUr/cXsjyYKUjiOYmZcieXVm+ME6IR2b7 Ai2VgPijH50qcUZxJQlWS/p9MEElamyFuDdWFpYf1YS+36Y4tnEURr5NUq4bagvp toLrHlnaJwZpgcq98PyGOsiyY/v4HU9mHOJdZSHYgS5F5O8whRiRrM0tCtxGMVBs Ojg91gxb+ggk5NZMi7+H8CjrmXjFG1ypG72h8VLs0PYQ0LUEfq+Ulv/By04mButS oJooItwA79W1K3i2QOTcUKy7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvR/9/s s98D2Gd3ZBj79x9JZ20wMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz3xqgzh71D2rRMteHfITmd9flkppDbZwkQPxsa3HQHPO1xCdto1UF gxE0jYVOWf4zb5gRx8pyrjfTuSrNwFNPoA2ZAQRE1wUm3woz9jgIVKruVBfWbd3P CgFrA1dqMMpjnVznLjpDHCd+IPT6uUFUkpP5uGvTl9tQY9Xhk9KaT2Yvbrf0/62K oXo5yaemWCkqVOUl+UXtS9Eq0r6PsW+IKswISDAVbvUMRWeBH6LA5Nt9XNSHD2FZ FuRkAktjwT6wKHkc4Xigzc7XS7eaG/h4+QSOiRinwVavnxTFnclWfpRtt6d/wCU5 jWbzo8GAHzJtrmqXCFwvvBHIJDFKjulk -----END CERTIFICATE-----Generated at Sat Dec 6 18:05:56 2025 by rpki-client