This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json) Hash identifier: r3nOzBr2yMCHmx+ZtFKj7BICp1zlEG2c/o6o5MBtqw0= Subject key identifier: C9:6B:7A:C5:01:5D:07:7D:04:BD:A6:04:15:C0:94:75:AA:C6:D2:75 Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft Manifest number: 02CD Signing time: Thu 04 Dec 2025 23:45:03 +0000 Manifest this update: Thu 04 Dec 2025 23:45:02 +0000 Manifest next update: Thu 11 Dec 2025 23:45:02 +0000 Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: ODy47MH5b3SMwIDwn2DmL8meSBGMrbr4KvhoHUyipW4=) 2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: dtuYeScxI0cvK8sz9E/Cl0+96zsD1MptOKpsIJKXrl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Validity Not Before: Dec 4 23:45:02 2025 GMT Not After : Dec 11 23:45:02 2025 GMT Subject: CN=69321cfe-0b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:be:d6:d2:9c:7c:e6:bf:f9:56:30:8f:b7: 1b:53:0d:35:da:4a:2a:6e:b6:96:53:dc:c2:e0:cc: 75:70:c8:ed:8e:f8:6f:fe:1f:7a:cf:a4:c2:59:12: b5:f3:0e:0f:8f:cf:8f:2f:80:03:36:37:cd:0c:20: 1a:d8:0d:88:06:ab:c8:62:cf:46:bc:5a:07:b7:ca: 50:f3:0e:3a:66:4f:6a:8f:87:2f:64:4d:df:ed:f0: 61:c0:59:fd:9b:b9:4c:4c:95:26:b3:01:2f:40:bf: 51:9b:10:90:94:2b:d3:bf:ad:45:7d:99:5f:fc:80: 7b:3e:36:b7:8f:9f:e3:ff:6b:79:fb:2b:8d:9d:e2: 35:93:63:77:e8:e0:5e:97:b2:e1:51:0a:6b:55:58: a2:08:22:7a:02:0d:79:7b:c9:b5:17:9e:8b:6c:2c: aa:01:80:69:7f:28:59:1d:94:34:f5:88:de:3e:f0: 04:fe:b5:65:fd:c7:0a:48:4e:15:42:07:45:9a:cc: 87:b7:b8:b6:eb:33:cd:a4:b0:c9:a3:13:55:d3:30: 4a:54:17:77:7f:00:52:bd:dd:f7:a3:26:45:43:b6: 3d:4b:1f:56:8c:5a:0b:7c:df:14:6a:26:9b:74:a9: c1:20:cf:ac:28:11:5a:17:5b:98:f9:4d:41:79:ba: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6B:7A:C5:01:5D:07:7D:04:BD:A6:04:15:C0:94:75:AA:C6:D2:75 X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:91:02:71:1d:92:b1:60:7e:11:54:56:cb:1e:c9:92:d3:63: 76:59:25:b9:ea:16:6b:95:5c:81:8f:2d:48:c1:fe:5a:a2:25: 1b:91:6a:08:21:f3:f7:1b:03:8e:0d:70:5b:9c:ee:0b:8d:a2: c4:04:b6:57:8f:7e:f3:37:90:e8:e9:6f:d2:a8:9d:70:d6:a6: 79:54:8a:91:3d:9f:46:77:e2:02:3c:96:61:f3:13:e9:bc:a5: 05:c5:37:1f:06:fe:ac:ac:35:4c:6e:7a:5c:ba:95:0d:0c:a5: ea:8d:9c:70:94:f3:a6:3d:d3:fd:a3:90:ff:fa:f9:35:e6:8f: 61:00:60:33:21:ad:bb:c8:b4:d8:5c:43:05:10:01:56:88:2d: 2d:52:5a:c4:81:60:ad:27:c8:c8:c6:08:48:31:1a:24:02:fd: 19:01:6b:de:44:91:7c:55:d8:76:e4:82:d7:46:bc:9e:63:e3: a1:a7:ea:9b:dd:38:5a:4e:fd:c8:f6:73:ad:2b:bb:d2:d3:85: b3:94:d5:1a:93:47:47:3b:94:3a:f6:4e:3b:94:d5:c7:76:f0: 2a:ae:9d:e2:b3:5e:c5:9e:98:f8:c1:35:41:9b:d7:96:33:cc: e1:b3:5c:72:90:df:e8:2a:15:51:f3:35:8c:4c:b7:96:1b:1f: 1a:71:cb:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjUxMjA0MjM0NTAyWhcNMjUxMjExMjM0NTAyWjAYMRYwFAYD VQQDEw02OTMyMWNmZS0wYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pO+1tKcfOa/+VYwj7cbUw012koqbraWU9zC4Mx1cMjtjvhv/h96z6TCWRK1 8w4Pj8+PL4ADNjfNDCAa2A2IBqvIYs9GvFoHt8pQ8w46Zk9qj4cvZE3f7fBhwFn9 m7lMTJUmswEvQL9RmxCQlCvTv61FfZlf/IB7Pja3j5/j/2t5+yuNneI1k2N36OBe l7LhUQprVViiCCJ6Ag15e8m1F56LbCyqAYBpfyhZHZQ09YjePvAE/rVl/ccKSE4V QgdFmsyHt7i26zPNpLDJoxNV0zBKVBd3fwBSvd33oyZFQ7Y9Sx9WjFoLfN8Uaiab dKnBIM+sKBFaF1uY+U1BebqEmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlresUB XQd9BL2mBBXAlHWqxtJ1MB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFS NkNxazR0Y2hjOHBqNmNUbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBykQJxHZKxYH4RVFbLHsmS02N2WSW56hZrlVyBjy1Iwf5aoiUbkWoI IfP3GwOODXBbnO4LjaLEBLZXj37zN5Do6W/SqJ1w1qZ5VIqRPZ9Gd+ICPJZh8xPp vKUFxTcfBv6srDVMbnpcupUNDKXqjZxwlPOmPdP9o5D/+vk15o9hAGAzIa27yLTY XEMFEAFWiC0tUlrEgWCtJ8jIxghIMRokAv0ZAWveRJF8Vdh25ILXRryeY+Ohp+qb 3ThaTv3I9nOtK7vS04WzlNUak0dHO5Q69k47lNXHdvAqrp3is17Fnpj4wTVBm9eW M8zhs1xykN/oKhVR8zWMTLeWGx8accsQ -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:42 2025 by rpki-client