This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: ydmW44M4iOS2IsvYaGXmPzJN4CQPlgTQe+51jBA8qLM= Subject key identifier: B4:E4:FE:16:D4:6E:A4:E4:58:F7:94:6B:4E:D6:E7:F2:B9:3D:16:B5 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 03EB Signing time: Thu 04 Dec 2025 23:00:38 +0000 Manifest this update: Thu 04 Dec 2025 23:00:37 +0000 Manifest next update: Thu 11 Dec 2025 23:00:37 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: b203QkDY6T3b7uwShSj0tX0ZD68kXsuRJdEg6mBnwM8=) 2: 888790B6CD3A11EF87D85012C4F9AE02.roa (hash: AvFxWnXdXVRW4gSsV2SM184h5qE1FtXhjp3kh4Swn5U=) 3: 38E23C8AACAE11EEAD36566EC4F9AE02.roa (hash: WV0++0ZN/bagS69tHu4GzxXJWra/B4BQBtuEVcU79xQ=) 4: 39B38CD6ACAE11EEAD36566EC4F9AE02.roa (hash: CVz2Xf9+JNVQc+OnMj39alF6Xn/77a8odRw6ivgbb84=) 5: 2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (hash: PSuOk5hKLAcVmpB6whliDPWrfFKAhRcAnnfVLoCffRg=) 6: 8CA353C4EF5E11EF9E61950EC4F9AE02.roa (hash: 5Blz9K5XE6h6oYg/gQUJxXMDOjmAua+CLgWpZB5MaIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Dec 4 23:00:37 2025 GMT Not After : Dec 11 23:00:37 2025 GMT Subject: CN=69321296-a148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:05:8a:49:78:c1:0f:9b:92:77:c8:5b:ca: ad:28:a7:cd:a9:b2:b5:ed:eb:10:c0:c0:19:92:e6: 72:02:8d:8c:70:83:ee:21:a2:6c:50:8e:d4:34:e7: bc:60:de:19:81:cc:39:03:59:da:30:13:0d:4f:87: f4:05:ef:c3:bf:89:7c:a1:0e:8d:62:06:6f:d1:7b: 1d:9c:85:10:81:af:6f:49:5c:b6:93:86:d0:d0:9d: c1:18:81:59:14:21:66:67:b2:9a:49:9e:a5:25:fa: b2:74:03:d1:a4:e3:e1:f2:d0:ff:24:a1:79:05:fe: 9c:b2:a3:15:b0:3c:e7:29:6c:9a:44:a5:df:67:a4: 8b:e7:26:e4:69:7a:f0:8e:64:5e:0d:cd:7a:fb:3e: dd:3b:14:7d:84:57:e5:dc:ab:57:fb:75:4d:61:87: 78:6f:2a:98:5a:eb:66:90:6c:8b:1e:92:d2:84:7b: a1:c8:7b:f5:45:6a:cd:0e:4c:81:76:8b:49:11:53: 4e:f0:f6:cf:48:6b:8e:d5:df:0d:39:a9:e9:53:43: ee:98:67:a1:8a:f7:fb:95:49:4f:63:27:9f:92:72: df:fd:2c:e3:6b:33:5a:49:f9:84:e2:dc:81:ca:bd: 42:39:05:4c:27:2a:ae:90:4d:6c:ed:09:49:9e:0b: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E4:FE:16:D4:6E:A4:E4:58:F7:94:6B:4E:D6:E7:F2:B9:3D:16:B5 X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:44:1e:ae:ab:e9:b3:22:2c:62:17:11:c4:ce:d4:85:de:7f: ce:72:13:6e:e3:d0:82:7d:7b:11:7a:08:c5:ed:00:dc:e2:af: 0a:a4:ac:96:ed:29:c1:f1:1f:ac:70:22:cc:6f:ae:e5:4f:36: ca:3d:0b:f9:2e:7b:01:8d:1f:ea:ea:ba:44:f8:51:60:6e:b3: 2f:2f:1f:5a:50:8e:a6:f0:dd:2c:a3:96:be:5e:9c:f7:81:f0: 01:2e:c3:6a:26:2d:71:e6:d4:71:88:c5:be:0c:7e:89:5f:3d: 57:ee:a5:f0:9c:4f:39:75:17:8c:52:f9:30:ec:65:23:97:eb: 20:58:79:7e:81:09:12:12:86:f0:f8:dc:d2:ae:4b:e6:a9:9c: 76:29:4b:0e:15:7d:e5:2a:f5:5d:58:36:c3:8b:00:35:c3:d4: 2e:d0:9a:07:6a:2c:e0:85:bd:79:d2:59:17:58:f2:b9:d2:ef: a9:ae:cf:c2:e3:26:22:cb:e8:3c:a7:64:75:55:c2:5e:2e:ed: ef:16:c8:07:76:6c:4b:2c:db:21:3d:5d:03:bb:50:46:d2:7d: f3:54:08:02:a0:51:a9:fc:6e:c5:9b:5c:07:19:c7:6e:65:b9: b3:59:96:97:07:72:fe:31:3a:f0:02:cb:d5:4b:8f:2c:7e:7c: 63:2b:8f:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUxMjA0MjMwMDM3WhcNMjUxMjExMjMwMDM3WjAYMRYwFAYD VQQDEw02OTMyMTI5Ni1hMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhsFikl4wQ+bknfIW8qtKKfNqbK17esQwMAZkuZyAo2McIPuIaJsUI7UNOe8 YN4Zgcw5A1naMBMNT4f0Be/Dv4l8oQ6NYgZv0XsdnIUQga9vSVy2k4bQ0J3BGIFZ FCFmZ7KaSZ6lJfqydAPRpOPh8tD/JKF5Bf6csqMVsDznKWyaRKXfZ6SL5ybkaXrw jmReDc16+z7dOxR9hFfl3KtX+3VNYYd4byqYWutmkGyLHpLShHuhyHv1RWrNDkyB dotJEVNO8PbPSGuO1d8NOanpU0PumGehivf7lUlPYyefknLf/SzjazNaSfmE4tyB yr1COQVMJyqukE1s7QlJngsuNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTk/hbU bqTkWPeUa07W5/K5PRa1MB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsRB6uq+mzIixiFxHEztSF3n/OchNu49CCfXsRegjF7QDc4q8KpKyW 7SnB8R+scCLMb67lTzbKPQv5LnsBjR/q6rpE+FFgbrMvLx9aUI6m8N0so5a+Xpz3 gfABLsNqJi1x5tRxiMW+DH6JXz1X7qXwnE85dReMUvkw7GUjl+sgWHl+gQkSEobw +NzSrkvmqZx2KUsOFX3lKvVdWDbDiwA1w9Qu0JoHaizghb150lkXWPK50u+prs/C 4yYiy+g8p2R1VcJeLu3vFsgHdmxLLNshPV0Du1BG0n3zVAgCoFGp/G7Fm1wHGcdu ZbmzWZaXB3L+MTrwAsvVS48sfnxjK4+G -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:05 2025 by rpki-client