This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json) Hash identifier: dWv5bXcSdfZAR1a4E75/nTUsPIvyvMyxANbLHhbH4c4= Subject key identifier: 97:69:7D:C1:9C:3E:1C:62:AA:2D:84:34:55:FC:7B:F2:4E:26:58:6F Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft Manifest number: 0C Signing time: Fri 05 Dec 2025 05:52:48 +0000 Manifest this update: Fri 05 Dec 2025 05:52:47 +0000 Manifest next update: Fri 12 Dec 2025 05:52:47 +0000 Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: zlsaOyWfiLQODyutE1eOzYuNiuikZeWbVpMgekvTEvs=) 2: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: iU9xhgwk7BF9Dw1LyEZZJRsmd4voHButrjrmIYckRSU=) 3: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: hAJTg6RB5BjX/CgestHJguPeFSKIh+Dv7A8Bm8CwO60=) 4: E6F375D2C91C11F0BC91DE14C4F9AE02.roa (hash: +BITTzWwzexqO1zpncQDhQ+Fd8c2ZLZKjEOA30U18SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Validity Not Before: Dec 5 05:52:47 2025 GMT Not After : Dec 12 05:52:47 2025 GMT Subject: CN=6932732f-d055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:95:67:33:5e:1a:e9:f2:3b:71:d0:85:b9: 5f:0a:68:42:a1:1f:2a:5c:38:b8:02:95:cd:2a:5c: 38:9b:07:d9:07:7e:d4:f9:0e:82:6f:80:d7:30:c8: 08:55:7e:f1:5e:54:bc:55:13:2a:62:09:dc:df:8a: 5b:a6:c7:7a:ba:ba:c8:b5:65:d5:f6:5b:c6:03:a6: 6b:d1:af:84:70:a3:77:6e:e8:7b:5f:c3:87:42:e9: 1a:3b:19:14:4a:f0:59:bf:d8:bb:16:e9:70:e6:fe: c3:82:d8:1c:ec:9a:b0:94:0c:c4:7e:19:ed:68:39: 35:c6:a6:3b:25:27:d2:ab:da:ee:72:51:5e:74:bc: 9f:35:cc:b0:0d:2e:2a:6a:3a:67:6a:c1:d8:77:6a: b6:24:37:b1:61:b1:94:ce:3f:b6:e8:9b:af:3d:38: c8:71:fb:34:e8:a9:4a:ed:c1:de:71:3d:7f:0b:ac: c5:36:a9:9b:f5:a3:55:b0:d1:8b:3e:52:3e:80:5d: 5e:d8:20:09:63:6f:00:bf:a7:87:ea:20:2f:76:24: 5b:90:c2:58:16:54:76:20:57:ff:65:d2:e6:4d:98: 27:63:89:72:75:72:f4:21:24:0f:f3:b2:a4:1e:f1: f7:91:c1:be:df:37:8d:72:e3:f7:86:d6:7a:4c:18: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:7D:C1:9C:3E:1C:62:AA:2D:84:34:55:FC:7B:F2:4E:26:58:6F X509v3 Authority Key Identifier: keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c4:e1:4e:2e:c6:16:cb:16:7f:ec:b2:dc:8f:6e:d5:45:2f: 9e:92:cf:48:92:d6:e6:68:e8:09:88:e9:eb:4c:72:62:61:15: 1d:d0:13:b0:71:9e:fb:46:2b:6b:aa:5d:3f:9e:66:0f:ec:68: 21:61:85:81:de:a3:d6:52:3c:6f:f1:ec:c3:b3:33:f9:aa:bf: 06:6e:81:c9:9b:e7:0b:86:11:ab:c4:c5:a7:b7:00:c8:9d:67: 0a:c3:28:6b:ed:d8:46:09:3c:db:a3:11:bc:a6:d1:66:ce:9d: 4b:0b:18:cb:a7:1f:01:b7:be:2f:3a:c1:ca:d2:c9:90:bd:c0: 9d:b9:0f:5b:b2:de:9e:5d:36:44:27:7a:7e:6b:97:89:dd:f1: d6:28:db:d1:52:25:74:73:ef:65:41:01:ad:7d:9d:ab:ca:c1: 8f:21:67:27:ff:b2:2f:6c:6c:8c:2e:a7:e8:a6:ac:79:60:29: 33:11:69:dd:e3:25:f9:30:81:fe:f0:e2:8e:52:1d:c3:35:f3: 02:a5:3a:fe:9a:8e:86:89:36:85:43:4c:7b:a9:ed:2e:3b:cf: 30:20:1d:d3:d7:14:7a:c0:82:3d:64:aa:4b:46:c1:f0:c7:e6: 96:b1:44:cc:61:0d:c3:00:1b:c5:7d:7d:33:52:fc:d8:7f:df: 98:64:4a:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1Qjk0NEZFNkY5 QzYzRTIyMDAeFw0yNTEyMDUwNTUyNDdaFw0yNTEyMTIwNTUyNDdaMBgxFjAUBgNV BAMTDTY5MzI3MzJmLWQwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7p5VnM14a6fI7cdCFuV8KaEKhHypcOLgClc0qXDibB9kHftT5DoJvgNcwyAhV fvFeVLxVEypiCdzfilumx3q6usi1ZdX2W8YDpmvRr4Rwo3du6Htfw4dC6Ro7GRRK 8Fm/2LsW6XDm/sOC2BzsmrCUDMR+Ge1oOTXGpjslJ9Kr2u5yUV50vJ81zLANLipq Omdqwdh3arYkN7FhsZTOP7bom689OMhx+zToqUrtwd5xPX8LrMU2qZv1o1Ww0Ys+ Uj6AXV7YIAljbwC/p4fqIC92JFuQwlgWVHYgV/9l0uZNmCdjiXJ1cvQhJA/zsqQe 8feRwb7fN41y4/eG1npMGODxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl2l9wZw+ HGKqLYQ0Vfx78k4mWG8wHwYDVR0jBBgwFoAUGlsAWXyNe2H7vv7FuUT+b5xj4iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0FFODgzNjY4QzhF QzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2xzQVdYeU5lMkg3dnY3RnVVVC1iNXhqNGlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0FFODgzNjY4QzhFQzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJI N3Z2N0Z1VVQtYjV4ajRpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJXE4U4uxhbLFn/sstyPbtVFL56Sz0iS1uZo6AmI6etMcmJhFR3QE7Bx nvtGK2uqXT+eZg/saCFhhYHeo9ZSPG/x7MOzM/mqvwZugcmb5wuGEavExae3AMid ZwrDKGvt2EYJPNujEbym0WbOnUsLGMunHwG3vi86wcrSyZC9wJ25D1uy3p5dNkQn en5rl4nd8dYo29FSJXRz72VBAa19navKwY8hZyf/si9sbIwup+imrHlgKTMRad3j Jfkwgf7w4o5SHcM18wKlOv6ajoaJNoVDTHup7S47zzAgHdPXFHrAgj1kqktGwfDH 5paxRMxhDcMAG8V9fTNS/Nh/35hkSow= -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:15 2025 by rpki-client