This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: ApFs58TbDq8Efmd5uAz6R6U1M6ejNDdMhX9U/+l2JyE= Subject key identifier: B0:C5:2B:51:61:C9:92:2C:B8:0B:F0:EE:F7:00:D2:C2:EF:CC:3D:16 Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 24 Signing time: Fri 05 Dec 2025 05:33:56 +0000 Manifest this update: Fri 05 Dec 2025 05:33:56 +0000 Manifest next update: Fri 12 Dec 2025 05:33:56 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: ILdq4CNokWBcc1ya6g7HEOvCr0MoN92Lhkh9msPozyU=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: Ty3keWksVpROp5e1j4cINLe1/6qFn8g6RY9zGQ2Ec2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Dec 5 05:33:56 2025 GMT Not After : Dec 12 05:33:56 2025 GMT Subject: CN=69326ec4-3304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:9b:69:30:02:a6:7a:ad:a8:e9:a2:53:1b: 2b:1a:fa:08:ec:11:01:8d:c1:dd:65:79:1c:b9:3d: 3b:c5:10:11:d1:ab:e5:ed:83:34:03:e9:84:5f:80: a9:1d:1d:d0:b5:6a:bc:1f:9e:53:58:46:3e:d1:e2: 17:47:92:21:68:a9:4c:30:08:e1:9e:a1:9f:d1:fd: c5:3b:4d:a8:2f:14:60:39:e2:87:a8:58:19:ca:fe: 23:f7:38:95:1b:11:5b:ca:98:a3:e8:14:db:06:12: dc:87:31:74:a0:f9:c8:c3:f8:a3:79:b9:0a:68:98: a4:b8:d1:68:1f:26:da:ec:8e:ff:fe:37:ce:05:b0: 59:40:eb:91:c7:ce:07:13:f2:d7:71:55:e0:0f:bf: 1c:b5:26:53:4d:38:c4:14:ee:97:be:b2:09:4a:3d: a1:f0:a4:99:af:18:a2:71:0c:8a:01:e9:5d:e0:d6: de:b7:55:ca:15:c5:9c:9d:88:a1:b5:11:e7:98:bb: 78:2b:46:75:92:1a:c6:40:7b:2d:5b:f5:13:97:0c: 05:d7:09:df:a9:e3:8a:6b:d0:a9:90:83:56:7c:17: 61:5f:53:05:31:8b:94:40:12:b2:46:17:2e:4f:1f: 05:62:0f:a1:26:b8:b1:d7:17:2c:52:2f:f9:96:5f: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C5:2B:51:61:C9:92:2C:B8:0B:F0:EE:F7:00:D2:C2:EF:CC:3D:16 X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:13:dc:b2:03:8d:1b:e5:1e:a9:29:f3:1d:6d:1a:80:ea:67: 95:8b:ef:f8:9c:73:58:8f:8a:0c:68:b4:c6:38:11:10:c0:8e: c8:76:2f:e9:85:76:d8:72:85:b2:ae:85:4e:01:94:0d:91:fe: b8:5d:a3:56:19:95:a7:5e:0c:f6:4c:5b:6c:38:40:b6:ee:fd: a2:1b:2e:66:5f:4b:eb:eb:b4:2e:2c:03:4b:a1:76:9e:49:fc: e7:8b:47:59:fa:e3:f7:52:b3:9f:69:55:0a:c3:bc:91:dc:90: a1:3c:cf:27:9e:9e:bb:ec:5e:b3:91:1b:89:c0:f6:bd:42:7e: 93:70:7e:26:b2:a6:bd:82:f6:49:39:3c:ad:e8:59:da:08:de: fe:2e:c3:89:1c:7e:f9:72:c2:1e:98:de:36:b4:0e:89:5f:90: c9:b1:83:c7:f5:d2:1b:15:5a:df:70:da:b4:53:e4:e5:9d:40: cc:57:0f:f1:7c:5b:bc:f4:51:23:6a:23:81:3e:ba:a3:a1:d8: e8:98:91:3c:a8:12:df:9f:34:65:4e:c1:e0:01:16:81:aa:fc: 64:1b:98:9e:a8:2c:1d:4c:6e:fb:1c:9b:fd:e9:44:cb:6b:1d: 9c:94:75:fc:4b:74:44:09:d1:41:4b:99:b0:5d:8f:55:d1:24: 94:ba:4e:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNTEyMDUwNTMzNTZaFw0yNTEyMTIwNTMzNTZaMBgxFjAUBgNV BAMTDTY5MzI2ZWM0LTMzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4h5tpMAKmeq2o6aJTGysa+gjsEQGNwd1leRy5PTvFEBHRq+XtgzQD6YRfgKkd HdC1arwfnlNYRj7R4hdHkiFoqUwwCOGeoZ/R/cU7TagvFGA54oeoWBnK/iP3OJUb EVvKmKPoFNsGEtyHMXSg+cjD+KN5uQpomKS40WgfJtrsjv/+N84FsFlA65HHzgcT 8tdxVeAPvxy1JlNNOMQU7pe+sglKPaHwpJmvGKJxDIoB6V3g1t63VcoVxZydiKG1 EeeYu3grRnWSGsZAey1b9ROXDAXXCd+p44pr0KmQg1Z8F2FfUwUxi5RAErJGFy5P HwViD6EmuLHXFyxSL/mWX13VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsMUrUWHJ kiy4C/Du9wDSwu/MPRYwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUT3LIDjRvlHqkp8x1tGoDqZ5WL7/icc1iPigxotMY4ERDAjsh2L+mF dthyhbKuhU4BlA2R/rhdo1YZladeDPZMW2w4QLbu/aIbLmZfS+vrtC4sA0uhdp5J /OeLR1n64/dSs59pVQrDvJHckKE8zyeenrvsXrORG4nA9r1CfpNwfiaypr2C9kk5 PK3oWdoI3v4uw4kcfvlywh6Y3ja0DolfkMmxg8f10hsVWt9w2rRT5OWdQMxXD/F8 W7z0USNqI4E+uqOh2OiYkTyoEt+fNGVOweABFoGq/GQbmJ6oLB1Mbvscm/3pRMtr HZyUdfxLdEQJ0UFLmbBdj1XRJJS6TtU= -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:40 2025 by rpki-client