This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json) Hash identifier: UIqy0PRGqME+43EMQNwk95fp+g1ZAF3QZ8TR2FnTzgs= Subject key identifier: C1:67:3C:C8:F3:74:5B:87:54:B3:FA:6F:F7:51:BB:72:BE:12:CC:35 Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft Manifest number: 4F Signing time: Fri 05 Dec 2025 05:08:02 +0000 Manifest this update: Fri 05 Dec 2025 05:08:02 +0000 Manifest next update: Fri 12 Dec 2025 05:08:02 +0000 Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: jq3WSh1h7k9HMZ5SgVbchCxcMvI121dmwMqsDX3smsQ=) 2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: BfA3s4/uFwS/+pxJ7ydc7p+vBZQ3SLc68WxBr74xpL8=) 3: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: c9l4QPfF5HgbdK2wjGcEEf1Z5xYqEsv1DWpNYE3IzBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Validity Not Before: Dec 5 05:08:02 2025 GMT Not After : Dec 12 05:08:02 2025 GMT Subject: CN=693268b2-2ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:68:e2:a2:e5:cc:8d:45:6e:5b:cd:1e:e6: c8:ea:83:1b:e4:f5:e2:45:b5:d7:7e:33:b7:66:5a: 08:51:3d:08:b9:9f:0f:56:27:8e:a6:62:60:0d:c4: d1:78:53:d8:06:8c:6a:c9:6e:04:5b:74:25:d1:f9: d4:16:2c:0e:fb:bb:26:ba:31:94:0f:0d:03:09:25: 3b:86:ad:06:81:0e:4e:78:a1:03:9c:65:a0:3f:8c: c2:78:a0:88:da:03:6a:9e:49:51:fc:03:7a:fa:0d: 34:1c:b2:33:ff:7c:2a:a4:2f:ee:36:8e:24:2d:fa: 16:d9:48:a7:f1:c4:23:51:33:22:e8:3a:49:cc:6d: 30:0e:05:d2:95:d3:f7:a1:79:cb:3a:ec:be:56:46: 82:28:ea:db:59:69:e2:59:9a:2d:79:5c:10:cb:f7: 1f:e2:1f:ec:2b:8e:dd:56:f2:7b:15:76:0f:86:99: 8d:e0:f5:d8:f6:7a:d9:ea:33:eb:1e:38:44:9c:15: 2c:35:e2:9e:1d:6a:c6:d8:f5:da:9f:3b:60:17:4f: 2c:43:cc:4c:dd:9b:f4:11:84:43:c7:0f:cc:25:04: cd:6c:0a:19:19:e2:2b:ca:b3:36:19:a7:59:42:47: e5:22:05:16:ee:66:b2:3a:06:72:b2:d3:01:35:ac: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:67:3C:C8:F3:74:5B:87:54:B3:FA:6F:F7:51:BB:72:BE:12:CC:35 X509v3 Authority Key Identifier: keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d9:7b:92:f3:10:0d:af:6f:eb:05:e4:1e:5f:2a:d8:3a:1a: 34:a8:9f:b5:54:6b:da:fe:60:bf:c4:be:be:97:4f:55:28:f2: e2:07:6c:cd:ad:b7:2c:3e:81:ec:46:ac:e0:10:07:85:6e:a9: 9c:ee:8a:c8:cd:c5:bc:17:8d:db:de:d7:b7:2c:87:6d:02:54: 57:df:ae:06:ef:a3:56:46:e6:f3:b5:23:72:b0:25:86:b7:45: 3e:39:41:00:c9:2f:74:5f:d0:73:21:ad:b4:a6:74:a2:18:e0: 24:37:8b:9e:31:75:05:6d:48:c2:11:b1:67:1b:3b:34:b5:8d: 15:3b:50:34:1f:2a:2d:c8:b8:36:5b:74:e5:3d:b7:9a:fd:aa: 7a:59:2a:42:a7:ec:a4:50:56:1e:77:97:7a:e2:26:32:3c:39: 54:c9:c1:cf:eb:d3:bf:18:65:66:e9:cf:3f:77:42:19:b1:e5: a5:d8:a0:a0:8e:c6:98:93:85:c3:c9:80:33:9f:0d:7d:08:8a: 59:73:93:a8:12:4f:bb:9d:52:d8:55:ee:da:73:29:02:34:03: 86:d5:84:2e:51:a7:fe:a0:d1:67:3d:c6:7b:1c:15:ea:41:d6: 16:e3:fc:da:a6:a1:f8:02:bb:48:58:fc:72:68:0b:b0:9e:ba: da:fd:86:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoMUJENjMzNkI5Nzg2OEMyRjU0RUIzRDk0NzhEMzlFNDE3 MzFENDQ4NzAeFw0yNTEyMDUwNTA4MDJaFw0yNTEyMTIwNTA4MDJaMBgxFjAUBgNV BAMTDTY5MzI2OGIyLTJlZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG5mjiouXMjUVuW80e5sjqgxvk9eJFtdd+M7dmWghRPQi5nw9WJ46mYmANxNF4 U9gGjGrJbgRbdCXR+dQWLA77uya6MZQPDQMJJTuGrQaBDk54oQOcZaA/jMJ4oIja A2qeSVH8A3r6DTQcsjP/fCqkL+42jiQt+hbZSKfxxCNRMyLoOknMbTAOBdKV0/eh ecs67L5WRoIo6ttZaeJZmi15XBDL9x/iH+wrjt1W8nsVdg+GmY3g9dj2etnqM+se OEScFSw14p4dasbY9dqfO2AXTyxDzEzdm/QRhEPHD8wlBM1sChkZ4ivKszYZp1lC R+UiBRbuZrI6BnKy0wE1rPUXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwWc8yPN0 W4dUs/pv91G7cr4SzDUwHwYDVR0jBBgwFoAUG9Yza5eGjC9U6z2UeNOeQXMdRIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2LzZENUU2QTU0NUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzlZemE1ZUdqQzlVNnoyVWVOT2VRWE1kUkljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2LzZENUU2QTU0NUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5 VTZ6MlVlTk9lUVhNZFJJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGXZe5LzEA2vb+sF5B5fKtg6GjSon7VUa9r+YL/Evr6XT1Uo8uIHbM2t tyw+gexGrOAQB4VuqZzuisjNxbwXjdve17csh20CVFffrgbvo1ZG5vO1I3KwJYa3 RT45QQDJL3Rf0HMhrbSmdKIY4CQ3i54xdQVtSMIRsWcbOzS1jRU7UDQfKi3IuDZb dOU9t5r9qnpZKkKn7KRQVh53l3riJjI8OVTJwc/r078YZWbpzz93Qhmx5aXYoKCO xpiThcPJgDOfDX0Iillzk6gST7udUthV7tpzKQI0A4bVhC5Rp/6g0Wc9xnscFepB 1hbj/NqmofgCu0hY/HJoC7Ceutr9hog= -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:27 2025 by rpki-client